Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier: O1SoPNZ4WCIFKFK+l1JCv4VfG6ycQ1MRo4CWIYk6SVg=
Subject key identifier: FD:E9:D2:F8:97:3E:25:6D:2B:A6:B0:94:1A:B0:73:90:F8:FE:4A:B4
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019CAAFD017CDE025C4AD5C25D33FBA9092A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number: 0BBC
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=)
2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=)
3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=)
4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: lx/e6yvuYPo5WQaSAkYGCRSUjGlxVaI5Pm0Y5I2AReg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:01:7c:de:02:5c:4a:d5:c2:5d:33:fb:a9:09:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=fde9d2f8973e256d2ba6b0941ab07390f8fe4ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:45:90:01:da:5a:f4:2a:1f:8d:fe:6d:23:
c6:75:f2:2a:30:20:01:cd:dc:03:ea:b0:23:ce:fb:
3a:07:7b:cd:a6:ff:b4:6c:0e:7c:b8:ac:20:5e:a9:
02:0b:b0:85:0d:ee:b3:68:98:24:a6:f7:03:38:2e:
bc:24:70:07:be:48:d4:c1:b0:b1:1b:2a:4c:49:e8:
15:9d:95:cd:be:df:6f:63:b5:da:c3:6b:e6:6c:8c:
3d:1b:e6:51:43:78:bf:dd:88:a2:5b:cb:51:94:d7:
38:28:cb:df:89:e0:9e:91:44:6a:6a:7a:9e:4f:68:
2d:47:cd:10:97:41:84:14:0f:45:20:3f:9c:9e:35:
3c:f7:76:97:b6:57:42:80:d5:a4:3a:93:58:2b:ee:
10:00:7b:90:2c:9a:e9:a8:b7:65:d8:f4:e3:e2:fc:
82:7d:be:20:5e:53:19:55:13:cd:e5:61:e6:6f:b5:
3c:2b:15:1e:4c:e5:5b:8c:e2:2f:43:08:61:90:fa:
d7:a8:70:c3:7f:3f:9f:a1:26:a9:57:9b:23:bd:95:
b1:df:f2:89:51:67:14:49:41:f9:aa:f9:a9:2b:ad:
88:87:c9:b1:e8:56:f6:be:72:88:99:8b:56:49:32:
8a:b3:79:bd:5f:07:64:66:a2:4c:48:74:24:88:a7:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:D2:F8:97:3E:25:6D:2B:A6:B0:94:1A:B0:73:90:F8:FE:4A:B4
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a4:fb:62:43:9c:00:a0:a6:23:79:90:b5:86:ff:8b:7b:71:
4f:6b:38:16:25:80:23:68:b0:e8:cf:61:8f:d6:9a:12:8b:97:
0a:c5:cc:6f:ed:49:44:6b:bd:5b:7c:fe:be:f6:f5:f6:94:9b:
cf:a5:57:c5:93:55:01:c4:1e:d6:b9:02:52:22:18:6c:db:db:
bf:67:3d:02:1f:38:3b:8f:23:8f:80:0e:13:7d:04:3f:5e:af:
39:1b:f2:3e:ab:6c:36:26:2f:b1:92:75:cb:4d:30:78:25:e4:
f4:ca:00:4b:c4:62:db:6f:81:ac:b0:cb:e4:2c:61:6e:22:45:
e9:82:0a:45:96:16:be:02:c4:a7:1b:b6:8b:8e:b1:55:e0:7a:
fe:64:7a:b4:d5:b1:6e:98:b2:96:b5:e8:cd:1e:d0:48:c6:c7:
9a:78:ee:05:e3:9e:82:e0:1c:90:b6:53:36:aa:a4:0d:aa:e5:
90:c3:51:16:2b:4b:64:77:bc:39:c2:88:ec:a3:ba:e5:2c:5e:
28:68:23:b9:8c:d7:c9:8c:eb:cb:c4:42:33:dc:81:07:87:95:
65:3d:5d:60:91:4e:5f:d9:b8:f4:c6:b8:0e:88:15:04:24:c4:
e3:63:d0:1e:f0:8e:f0:b5:28:07:4e:74:08:6e:bb:95:d4:02:
e1:b0:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:29 2026 by rpki-client