Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier: x4gDm23oMTyRrglqYcqa2xICQFEiX9/1OHe2lVWBKdg=
Subject key identifier: C8:5B:E0:5A:0A:10:D8:DD:DF:B0:FF:00:3A:6C:3F:BE:AE:51:24:43
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer: /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial: 019CAEDA606C9F52D86665109301839C1FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:01:12 +0000
Manifest this update: Mon 02 Mar 2026 14:01:12 +0000
Manifest next update: Tue 03 Mar 2026 14:01:12 +0000
Files and hashes: 1: CnLU5sdd9_xh2OEtCZx6z-2dgTY.roa (hash: n31FwsvZCRP5aWFMhgbGP9qd5w+wCRJhNJerptRYayU=)
2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: f8mpoVF/0IlIOawPyl6J8/ByrbtuLzhB7yV8oLDV1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:60:6c:9f:52:d8:66:65:10:93:01:83:9c:1f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Validity
Not Before: Mar 2 14:01:12 2026 GMT
Not After : Mar 3 14:01:12 2026 GMT
Subject: CN=c85be05a0a10d8dddfb0ff003a6c3fbeae512443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:99:33:2d:21:41:30:89:d8:e1:67:5e:b6:
79:0c:91:6c:f9:96:97:ef:c8:36:f9:74:31:c0:e3:
de:6b:06:8b:fb:44:f6:08:d5:cd:f9:70:b2:dd:75:
2f:8a:bb:ca:50:43:ad:10:cc:b3:85:1a:32:00:4a:
c1:12:ad:51:60:1e:13:e8:45:e9:5a:c3:47:bd:cd:
2a:a3:1f:92:55:21:d9:69:fb:48:2f:0b:34:6f:67:
e3:de:24:85:90:d0:ce:8e:de:ce:7d:f9:cd:7a:94:
54:15:95:bb:5d:c2:e1:a5:8b:a8:e6:84:76:39:4d:
59:9b:d6:2e:c6:29:4f:d0:12:94:0e:2f:27:f3:cc:
24:e7:3d:00:0b:81:90:50:8f:29:99:68:2e:a5:17:
d2:65:34:fc:08:0e:47:98:15:2e:7c:19:98:e8:00:
a7:64:a0:a6:31:bc:a1:e3:9d:68:10:27:1b:d8:4a:
59:49:20:68:c2:78:3a:97:be:02:b2:0f:a3:9d:6f:
e2:28:b7:51:e3:b8:ba:dd:91:69:41:fc:85:90:a9:
d2:78:3f:61:11:9f:a5:b2:c3:81:30:41:63:23:e8:
69:6d:41:cd:29:9e:cc:e5:63:92:e1:87:bf:13:23:
7c:f5:d1:c6:79:53:3d:6e:9a:32:57:26:da:19:64:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:E0:5A:0A:10:D8:DD:DF:B0:FF:00:3A:6C:3F:BE:AE:51:24:43
X509v3 Authority Key Identifier:
keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1e:8f:a4:b4:c3:0c:84:e7:9c:c2:93:0b:8d:bc:0e:bc:b3:
a7:50:b5:ba:ee:08:66:79:a8:73:bd:2d:11:f4:70:a3:16:51:
57:1a:46:e4:b5:58:4e:44:26:1c:c8:69:f1:81:3e:bb:fe:4f:
4c:d2:4f:01:c0:27:06:29:fe:63:69:bc:b0:bf:7e:57:d8:1d:
c6:56:39:fb:61:ac:3f:b7:5d:d2:98:fe:e7:39:c8:95:98:de:
17:ac:0a:b1:d4:87:33:13:c2:f6:ee:06:be:6a:24:b6:03:7f:
3b:74:d4:30:64:df:f1:ca:43:f9:43:04:2a:69:7c:46:c3:e4:
b0:bb:0e:fb:90:4d:e5:96:49:59:9a:16:95:ed:29:20:ab:cc:
75:1b:f5:d4:be:4c:b5:31:30:17:e9:0a:55:f2:b8:19:61:23:
79:dc:20:e0:e8:34:b0:b9:d1:f0:17:b0:28:f8:a0:63:b1:a5:
8a:6c:72:ac:27:9f:33:0a:68:73:9a:2c:21:5c:64:0f:ad:dc:
d7:80:e0:79:7e:04:b3:8f:7f:b5:d4:f9:7e:dd:e5:0a:08:bd:
62:0b:4b:e4:73:29:ed:99:42:18:36:ac:dd:1b:11:2d:23:6b:
c2:8a:2c:5b:94:a6:99:43:e3:30:b4:5b:c8:5a:04:15:e1:de:
58:1f:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:12 2026 by rpki-client