Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: XXeVMcofM+4rlkVl2P1zhhMZq9dUwlTuSQeECjdRymY=
Subject key identifier: 52:61:AF:6B:C5:E1:32:4C:DA:8E:5A:38:52:3F:05:5D:D4:B6:91:5F
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019CACB521FE84504B6173B3F9E736B2A716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:01:17 +0000
Manifest this update: Mon 02 Mar 2026 04:01:17 +0000
Manifest next update: Tue 03 Mar 2026 04:01:17 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: JzOwqUrnqHtE3YeUQhNzWqWfvpScasrX+UlIjRVBEgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:21:fe:84:50:4b:61:73:b3:f9:e7:36:b2:a7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Mar 2 04:01:17 2026 GMT
Not After : Mar 3 04:01:17 2026 GMT
Subject: CN=5261af6bc5e1324cda8e5a38523f055dd4b6915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:d8:35:f6:19:e1:ab:d7:01:5b:2f:66:77:
eb:f1:a1:ba:00:92:53:9e:4b:42:d5:b0:b2:9a:36:
b8:73:0a:ab:f3:81:bf:95:c6:19:16:98:c8:2f:24:
2d:98:04:e7:7f:cc:e8:cd:09:4a:5d:9b:1d:40:c1:
c1:65:be:b1:87:12:0d:7a:f2:7f:4c:e4:e8:d7:29:
bf:ed:fd:f1:42:22:95:6b:bd:85:67:5a:01:a7:84:
3a:92:98:ba:be:94:bd:03:6b:1b:19:17:eb:ff:95:
b7:5b:d9:7a:d7:95:89:1f:fd:da:9e:08:e5:c6:b4:
a8:20:10:9e:51:aa:69:e3:7d:70:c3:54:37:33:e2:
63:bf:a3:33:0c:d2:6e:fe:ec:b0:cc:35:98:a9:ea:
a0:19:78:00:a6:0d:18:8d:bc:06:7a:0c:4e:36:0e:
e2:be:c6:4d:64:c9:ba:d3:33:f8:15:64:df:f6:f2:
09:53:91:9a:3d:4c:6c:24:ac:b6:23:4b:fd:2a:17:
e8:50:09:c2:b4:bb:54:cb:67:5b:1f:b7:7f:8e:e8:
d1:39:91:82:7d:07:a1:90:62:3d:01:0c:8e:31:85:
40:dd:30:ca:75:71:5f:a1:6d:2c:b2:f1:26:1e:25:
89:da:6a:e5:d8:0a:a5:ed:96:2d:e9:2b:38:ab:bd:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:AF:6B:C5:E1:32:4C:DA:8E:5A:38:52:3F:05:5D:D4:B6:91:5F
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e2:c8:01:59:a1:31:de:c8:30:d8:61:8f:58:f5:59:33:1b:
cd:e2:5f:c1:01:41:68:11:45:df:21:99:23:a2:a5:13:2b:5d:
58:5f:5e:a3:f6:8f:12:0f:df:f8:e7:0d:d1:15:ef:28:57:0f:
ff:d4:a9:45:67:19:96:4a:68:42:33:e3:9d:e5:27:46:39:e3:
4c:a4:8d:78:0b:49:27:e9:ce:40:6e:c9:0a:d4:24:b1:d0:64:
d6:54:10:d1:15:23:93:c1:5e:60:ed:9b:41:bb:63:8e:2d:de:
58:9f:2d:05:be:62:77:3a:04:3e:1e:4f:07:41:8f:8c:23:89:
8e:53:6a:6c:09:9f:95:e5:2e:83:e1:1c:79:b5:7d:1b:bb:23:
a5:f1:b3:6f:3c:dc:28:7c:87:0c:bb:e4:20:17:40:97:9b:bc:
c8:e2:56:6b:b7:a3:9a:10:f8:60:d7:4e:46:04:4c:cd:b3:51:
c2:c1:16:4e:9c:17:a6:0f:67:20:73:d5:e1:d2:58:36:2e:1e:
38:24:b8:00:70:28:df:ec:22:1a:ee:a7:ce:14:7b:b1:b5:4f:
2d:d3:6e:86:b9:35:1f:43:23:43:ed:8d:46:91:0f:62:e2:76:
87:68:ea:ce:37:5d:da:0a:59:8a:d8:88:0a:fb:81:6d:f2:f1:
b4:62:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:34 2026 by rpki-client