Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: saM+1f8z/UAZiA0efnNsJZDM3QFS1IO5EH6IX1tnnnc=
Subject key identifier: EC:63:27:35:61:F5:5B:EB:54:D9:B9:53:34:72:DC:9A:E5:60:7F:DA
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 019CAC10178FED398BC176A44E7B04F5403E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 07C7
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa (hash: EGFj0yiGNTXuSH8wwtjUjE+9yF5opQRMwl047u2UKFM=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: NooAiVsmJ71+xjccCcSqwe6dhqagFymKvNrawLuFdy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:17:8f:ed:39:8b:c1:76:a4:4e:7b:04:f5:40:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=ec63273561f55beb54d9b9533472dc9ae5607fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:c0:87:c6:cf:fd:2a:24:9d:13:4d:c3:7d:
cf:2e:bf:e8:6f:c0:32:ac:da:55:b7:8d:43:60:d0:
33:07:47:0b:59:6a:20:6b:2d:0c:f1:60:44:ba:75:
c3:3e:de:82:fa:f3:bf:22:64:51:ce:99:ce:c7:e7:
e1:37:9a:0c:3a:12:d0:31:87:b3:0b:56:34:66:be:
19:67:1f:63:47:91:d9:83:b5:e1:f9:71:5f:c8:ea:
15:00:cc:07:10:9c:3d:56:55:f4:cc:79:38:30:e2:
fc:7f:5a:15:62:bb:79:91:4a:f5:39:a6:a6:f3:e0:
29:d6:e0:60:0d:59:92:3a:cd:8b:50:54:f7:c9:12:
bb:2f:a2:a7:5c:d7:0f:d6:cb:1a:c6:a5:52:cb:e8:
7a:f1:7e:98:1f:0a:fe:da:c8:cc:d3:1d:2a:50:e8:
eb:7e:96:2f:13:8b:6a:99:d5:8e:09:23:4d:5e:47:
5d:d8:76:11:d7:85:6f:14:9b:01:f3:37:e9:61:82:
c8:f3:f2:b9:ef:1f:0e:8e:12:b8:da:61:fa:4c:78:
d7:66:5d:0b:2a:d8:9f:36:bd:5a:cc:71:fa:42:23:
80:d0:e2:53:38:1b:cc:e3:32:1b:14:21:34:c1:39:
d2:5f:5f:a3:5a:73:5b:e7:7e:b1:d0:f4:56:61:88:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:27:35:61:F5:5B:EB:54:D9:B9:53:34:72:DC:9A:E5:60:7F:DA
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:43:1e:3a:44:72:c0:c7:15:00:39:2d:35:ad:2b:ea:b7:a1:
b7:7e:85:36:93:1e:71:91:7b:e5:5c:34:c3:95:8e:14:8e:f8:
60:1b:f5:c6:b8:a4:5f:0b:2f:9f:25:36:ac:7f:1a:7b:3b:5b:
4a:c6:da:af:d7:b4:43:79:b0:08:18:bc:3c:d8:51:55:2f:d6:
c2:97:9b:f9:7f:63:55:b8:9f:1e:29:f4:ff:a0:d0:33:16:a6:
23:36:e2:54:2d:77:f2:5d:c0:b2:e9:2d:77:8a:b1:ae:b5:54:
25:61:29:9e:c1:f4:93:c4:8a:b4:0c:48:72:f6:8d:d9:16:be:
6c:53:c9:49:76:d6:e3:36:cf:57:0c:da:bd:3f:91:a8:1b:4c:
9a:1a:87:1c:e0:05:24:08:7e:be:42:0a:da:79:61:4a:03:f1:
3a:32:52:99:a1:c6:15:9a:2f:1c:5a:59:8c:e5:f6:27:06:24:
7e:33:33:43:e3:37:25:d5:73:bb:e6:e0:4f:5e:ab:cb:cf:4d:
43:24:46:6c:2e:c8:10:27:bb:f7:75:43:74:1d:db:39:8e:79:
60:16:96:e3:d1:d4:00:89:1e:11:46:78:e9:53:54:6c:10:f0:
be:17:39:69:98:c7:b8:56:2a:c9:6f:93:e0:09:42:66:58:4f:
d8:63:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:12 2026 by rpki-client