Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
File: vWGQNE2etusMy5SON6oKqr4vLpA.mft (raw, json)
Hash identifier: NS2dWlyJUC3WPpe2TPcWYoJErii+zQJbbMwsmEXB8M0=
Subject key identifier: 94:94:50:C2:E0:2B:5F:4E:DC:36:58:BE:CA:FD:FF:67:E6:8E:2C:2B
Authority key identifier: BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
Certificate issuer: /CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Certificate serial: 019CA7FC7BF822DC731BA8765084A0BB028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
Manifest number: 64
Signing time: Sun 01 Mar 2026 06:01:07 +0000
Manifest this update: Sun 01 Mar 2026 06:01:07 +0000
Manifest next update: Mon 02 Mar 2026 06:01:07 +0000
Files and hashes: 1: jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa (hash: 4Rm+AgcIx2QNLzodYb14yKwLv1JgZDJIFSxZdtp7HDw=)
2: vWGQNE2etusMy5SON6oKqr4vLpA.crl (hash: 825x2WSERMxEQaC90RxrIer7OS6CWcM1x8z4LtfryPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:7b:f8:22:dc:73:1b:a8:76:50:84:a0:bb:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Validity
Not Before: Mar 1 06:01:07 2026 GMT
Not After : Mar 2 06:01:07 2026 GMT
Subject: CN=949450c2e02b5f4edc3658becafdff67e68e2c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:45:77:b3:a5:39:67:06:e9:fd:df:6b:be:
e2:38:40:ee:c6:e2:de:f9:bc:b2:5c:d5:35:ef:79:
7d:75:f3:ed:2f:25:11:59:23:73:9a:43:1a:ce:85:
f4:41:b9:94:bb:93:f3:bf:8a:56:7b:d3:9c:c5:85:
d0:26:50:ab:f5:54:2b:90:c0:a0:2f:8b:b6:b8:9b:
38:fe:7b:89:ed:ef:b0:48:17:91:a0:0d:e5:70:ad:
bd:ab:0f:cb:fc:38:9f:ba:09:f9:35:97:aa:d7:c8:
f1:d2:2d:72:83:36:73:44:0c:88:bb:59:c5:0b:59:
ab:51:4e:d7:6b:a3:ee:0a:4d:f9:6a:13:fe:43:ff:
df:98:84:46:78:8f:ad:7d:76:35:df:6f:b9:37:18:
9c:f5:b9:af:a3:74:27:d7:5a:9a:12:9e:7c:58:24:
f1:24:5f:f4:8c:08:64:42:c5:ba:25:9f:b1:77:e7:
d9:e8:35:73:4c:2d:f1:ed:bb:e5:99:6f:3a:22:95:
f6:64:8a:45:6a:af:8f:d3:d0:12:aa:04:28:b4:7f:
90:04:11:44:18:a2:49:ce:96:3b:c9:e2:12:0b:95:
98:68:5a:2a:eb:c2:fa:1b:11:b9:62:c9:12:d6:1a:
1b:cc:13:7b:23:36:73:d1:f8:b4:b9:df:76:e0:fa:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:50:C2:E0:2B:5F:4E:DC:36:58:BE:CA:FD:FF:67:E6:8E:2C:2B
X509v3 Authority Key Identifier:
keyid:BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:51:f5:e2:23:bd:f2:f3:f6:3b:88:8f:ee:a8:f5:fa:9c:
3b:e2:e7:97:e9:f6:12:a1:6b:fc:68:0f:20:50:f8:df:fc:39:
8d:b2:09:b8:80:b3:c0:33:6b:bc:39:66:d6:d1:aa:c4:d4:f5:
c4:59:46:23:2e:58:a9:f0:34:59:f2:f8:51:eb:b9:8f:28:59:
df:a6:65:68:01:cd:4b:b2:ae:37:9b:e6:ff:bd:d1:8d:d4:dd:
d8:30:cb:c4:67:4b:c5:6c:d3:5e:8c:97:17:a2:60:e8:76:66:
60:52:61:26:a2:9d:6e:2a:68:a0:e2:2d:5d:08:f7:6d:d2:b4:
f0:79:0d:c3:e7:55:ac:12:0e:5f:73:0c:af:70:2b:22:7a:dc:
55:c5:31:71:80:fb:70:50:ae:77:85:c2:0c:a2:bc:7e:1b:7c:
73:75:52:ce:e8:ef:88:7c:68:8e:5d:2c:88:39:f0:c5:5e:fd:
57:0c:52:97:ce:99:55:1e:ca:27:f7:47:fa:b9:8c:36:f1:ac:
1d:5d:74:36:ef:60:63:e4:68:60:1c:49:8f:7d:22:54:c8:b0:
bb:dd:99:fb:9a:ab:a2:8d:96:21:39:a5:f0:83:57:d0:f6:1c:
79:b5:36:62:b1:ff:83:2f:cb:00:44:54:ea:66:6f:48:76:c6:
68:67:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:51 2026 by rpki-client