Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: bMSPZq/QiI2FDajfEd2i/f2QbfKmJ4CNTuOJJt5jG4Q=
Subject key identifier: 2B:86:EA:B5:A0:DF:64:B3:43:75:B8:D8:8B:F7:78:C0:7D:6C:61:8D
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 019CAC0FF297579970A069862A05D9BD245B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 13A4
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: AuEY_lhsQ1reVE3aekx3vo2MXuw.roa (hash: 8nzWp+KuBZnVHqZNnr3zfpd8+GWRxSiubDowltaN1ZQ=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: tIPl8MDBYy4Iuo2KZ1ZdLBC3VFOtIRjxxaMiizsMBss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f2:97:57:99:70:a0:69:86:2a:05:d9:bd:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=2b86eab5a0df64b34375b8d88bf778c07d6c618d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:47:5e:73:61:04:63:90:6f:66:06:78:b5:
94:62:b4:b4:55:33:2b:87:10:66:9e:da:c5:ea:d4:
1a:9a:55:02:de:56:3a:9d:43:66:0b:6a:cf:db:05:
a4:54:44:9f:39:d0:39:9c:7f:67:67:95:89:e3:03:
85:cc:71:9b:35:18:24:79:2b:e0:bd:7f:0f:c2:d2:
42:0d:52:b1:6f:4f:1b:61:f5:9f:b4:a4:24:14:b7:
a9:a6:84:02:ca:9b:e3:30:5f:a8:02:f7:24:40:07:
45:aa:e8:d2:35:e8:ab:37:2a:0e:60:f7:5d:55:9f:
0a:f2:d5:bd:fe:7f:8d:c5:6f:2e:b9:47:42:9b:bc:
73:f5:03:3f:2c:db:94:89:c9:61:2a:4e:0f:8f:f5:
ad:b5:56:52:44:93:e2:1e:c2:09:41:8a:76:cf:33:
fb:5f:51:b3:ef:5b:47:0c:51:1c:6d:70:3a:5f:7b:
e2:2c:aa:1d:71:f4:8f:63:8a:59:a0:4c:d4:87:08:
87:92:7a:e8:3d:83:37:61:ca:14:94:7d:6c:4a:aa:
0a:b9:17:12:fd:93:fe:ce:b3:40:70:ef:5a:0f:cc:
8f:d2:70:eb:e1:79:8e:53:4c:9f:56:81:2d:7f:31:
86:0e:1c:a9:62:39:79:3f:c1:53:18:23:cf:f3:58:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:EA:B5:A0:DF:64:B3:43:75:B8:D8:8B:F7:78:C0:7D:6C:61:8D
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:8e:91:f7:74:38:ab:b8:8f:3c:f3:75:73:c0:04:fa:42:
c6:e5:79:f2:77:65:8b:58:18:f0:4a:6b:c8:5b:42:ed:c7:82:
fe:a7:45:86:17:8c:7b:66:59:57:32:39:da:b7:55:a2:ad:6b:
69:ab:82:17:30:03:3b:25:43:b6:47:4a:9b:9b:84:63:dd:fe:
c8:ad:f0:a0:6e:8d:c8:77:7c:db:9f:56:3c:24:d7:b8:a8:fb:
4b:22:7d:c6:bc:9f:cf:de:9b:27:11:41:54:43:a4:2f:49:12:
82:c2:5f:a7:3d:c4:45:9c:2e:bb:60:e3:bf:dc:d7:51:2e:1f:
da:40:bc:52:5d:b1:95:88:67:c4:d4:5b:19:65:7f:ba:b6:4a:
0d:57:2b:c2:f7:13:f4:6b:ad:5b:18:34:66:b1:86:7e:3f:78:
91:9c:58:09:72:8d:40:c8:c0:b7:ea:9c:50:e4:21:50:cf:01:
4c:ef:a3:f6:2a:3e:73:7a:bd:c7:b6:b4:96:98:51:0c:61:b0:
cb:f8:ba:a1:1b:27:ad:c2:e5:38:97:cc:d7:8e:26:da:c4:e5:
4b:b6:43:35:ad:d7:94:61:44:db:83:b6:5e:0d:96:1c:71:2f:
4d:73:e0:5f:b9:eb:84:c2:77:86:20:64:9b:52:64:16:34:55:
ef:02:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:21 2026 by rpki-client