Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier: Hy/72EHyjOD4YVX4vAivi+UFLMhwuOcX76zIGN7KYOk=
Subject key identifier: AC:52:9D:6F:11:E9:7E:96:F2:40:34:83:51:AC:55:B4:6B:63:4F:90
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 019CAB6BDEE31DC3F1E853A9E033630AC07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number: 1627
Signing time: Sun 01 Mar 2026 22:01:39 +0000
Manifest this update: Sun 01 Mar 2026 22:01:39 +0000
Manifest next update: Mon 02 Mar 2026 22:01:39 +0000
Files and hashes: 1: A6vGIJGT64W29On7fsToe2iuYDQ.roa (hash: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI=)
2: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (hash: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E=)
3: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (hash: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ=)
4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: wJaYciuQhxNqQDi+WrJ+xXpiqCty9WS8esLSoh8OnCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:de:e3:1d:c3:f1:e8:53:a9:e0:33:63:0a:c0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Mar 1 22:01:39 2026 GMT
Not After : Mar 2 22:01:39 2026 GMT
Subject: CN=ac529d6f11e97e96f240348351ac55b46b634f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:6d:61:b3:04:98:e0:75:e7:3f:8a:7e:3b:
c7:4e:02:66:39:aa:cf:12:1e:58:5b:90:ce:97:c8:
96:c2:13:9a:77:71:6c:61:9c:21:01:5d:24:7c:86:
ca:54:2e:36:5f:c5:df:c5:b7:57:53:3a:63:fa:66:
9a:7a:eb:22:48:ba:b2:f8:5c:ea:7c:bf:2b:90:69:
54:ae:26:8f:6d:77:1b:0e:49:d2:da:e3:51:36:c3:
2c:2c:d4:3c:35:37:6a:c0:e4:20:68:2c:dc:66:42:
38:37:d8:18:22:b8:cc:15:4d:cb:85:fa:ab:b2:48:
a5:fa:e3:60:d5:78:9f:77:60:1f:f0:36:5a:0a:8a:
ab:2e:35:cb:90:67:18:2d:98:1a:c9:8d:08:ed:47:
d4:86:43:20:44:04:12:9f:ba:18:f4:43:86:1a:eb:
fe:0a:f5:49:ad:69:95:fb:d2:86:ca:7a:66:c8:d5:
0b:ab:aa:82:b4:13:44:22:34:65:30:b9:a5:29:30:
fc:10:a3:d1:63:84:24:5b:ba:82:aa:c7:7c:fa:4d:
36:75:a9:10:6c:d6:48:06:7c:d8:d6:51:88:42:33:
f8:22:ac:99:0b:43:65:2a:9c:a2:ce:53:f9:01:84:
17:d5:fc:18:74:58:26:1b:48:c5:84:88:56:c6:da:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:9D:6F:11:E9:7E:96:F2:40:34:83:51:AC:55:B4:6B:63:4F:90
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:0f:1d:7e:f6:ec:a2:9a:cc:6c:d2:c6:cd:c8:4f:23:06:
48:b7:c7:0e:61:dc:47:d5:66:7c:4c:61:82:25:76:d9:ce:b0:
c0:93:20:81:7e:62:e2:18:5d:16:70:bf:a8:77:22:c8:41:c1:
9e:19:c7:54:54:fe:18:4e:63:da:3b:bc:97:66:be:2a:e8:d3:
e1:a9:56:ad:f8:f7:2e:48:c4:c8:b7:8b:73:b5:d7:95:9d:ff:
06:a3:62:4d:43:62:db:b3:0d:c2:13:5b:ad:af:ff:30:30:69:
0f:49:9b:09:3e:3a:f7:21:15:e6:cd:b6:66:8a:ce:7e:85:43:
ec:f2:3d:04:79:4e:e9:52:f1:b3:a2:51:13:fe:55:b8:c3:26:
73:4b:69:8b:de:f7:0f:08:69:79:49:5d:49:98:5b:86:51:14:
b3:de:68:d1:d8:fb:89:55:1d:f0:40:38:eb:0a:0e:44:b0:56:
ed:d0:4f:d3:4a:0f:01:84:ad:39:62:a1:a5:45:0f:cc:19:10:
c4:05:a4:97:e8:a3:55:b7:c1:6d:4b:35:0e:3a:ad:d6:91:04:
ac:c6:03:80:93:f6:18:32:06:a8:be:a5:00:6e:63:48:be:db:
3f:9c:65:e9:94:cc:50:96:8c:b6:1c:59:b0:e7:77:76:5e:56:
ef:64:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:20 2026 by rpki-client