Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: IM9sHzU6oPQYlnFjB9un936OOWJQyJU5LdswXHYbljc=
Subject key identifier: A0:57:0D:A3:4F:04:CB:91:23:33:49:4B:26:64:1F:95:EB:7C:C7:ED
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 019CAAC6CD93A84B7DD89DD228D94289CF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 1175
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: PhZp+HFacNMmqdhZycIHw0uHGeMwsH/rtquPa0emxos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:cd:93:a8:4b:7d:d8:9d:d2:28:d9:42:89:cf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=a0570da34f04cb912333494b26641f95eb7cc7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:ad:b7:7a:a1:4d:5c:a0:a3:56:d0:80:d9:
f2:fc:41:ef:3c:50:50:d9:59:92:f0:42:ea:37:9b:
65:73:b5:72:84:b1:82:fc:50:54:5d:60:8b:61:ff:
d5:7c:25:81:a8:03:bb:75:18:c2:f6:b1:0b:8f:85:
8d:3e:65:a2:f4:06:86:40:dd:ba:ee:36:9d:87:f2:
cd:7f:ce:c9:c3:cc:dc:c7:bf:12:3f:0f:1c:41:51:
c1:54:1a:29:3e:d6:4e:92:09:b6:ad:14:3c:b4:a3:
91:d7:e2:5c:c8:47:8a:93:e6:4c:40:b7:b3:96:23:
ef:5e:34:79:31:c1:32:0e:96:84:4b:b1:ab:89:69:
ba:09:db:74:75:dc:9b:a8:0d:9f:20:43:48:1b:09:
61:91:ae:60:59:1a:fe:15:b1:f5:73:79:4d:a8:95:
46:cb:62:da:90:46:f5:12:13:9a:e4:28:1b:df:f5:
1d:c7:1c:0a:e2:c2:13:95:59:32:d2:ef:ae:89:b7:
85:66:0d:35:91:77:14:46:e5:4f:b7:ba:26:33:fd:
18:ca:22:6c:30:a6:ce:cf:02:2d:11:87:36:4e:73:
b5:66:da:e6:5e:02:58:b9:19:61:e5:16:60:4c:16:
2c:96:5d:19:54:f7:cb:9e:8d:a4:56:5e:42:14:41:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:0D:A3:4F:04:CB:91:23:33:49:4B:26:64:1F:95:EB:7C:C7:ED
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:df:f1:99:36:a6:e3:7d:11:d5:dc:0b:5c:31:f4:d6:b2:
cc:48:28:22:fb:49:eb:f9:f5:3b:a6:4f:30:46:b3:5b:99:28:
f0:8d:f4:8a:0f:cc:e8:97:0e:6e:48:d7:c2:29:73:67:5b:4a:
82:83:29:3f:5c:be:82:4a:19:ab:9a:d6:8d:45:a5:45:c8:26:
d5:09:43:09:d6:6a:02:58:59:b3:5f:82:f7:27:35:4c:04:69:
bb:4d:63:e5:d5:d4:22:a3:2a:de:13:a9:a9:57:bd:34:83:34:
4d:b1:8c:7f:d1:0b:75:2a:16:b3:23:13:d1:db:76:53:ef:f2:
37:34:be:09:d9:6a:06:5f:57:0d:f6:f2:a3:16:12:46:12:73:
37:b9:4b:3d:d5:28:fb:ea:72:24:32:9e:18:9e:b5:8b:5c:55:
f0:34:95:0d:f4:d6:12:48:a7:b8:cd:f7:aa:21:66:b5:05:4e:
77:ab:9b:7e:45:c8:09:fd:59:22:be:7e:85:24:31:af:62:b7:
87:d1:ca:f1:3a:2d:9e:99:09:d8:01:23:b6:82:c4:63:24:ec:
20:19:11:ba:a4:af:b1:73:9a:68:1f:3c:7c:78:c1:36:a1:1b:
48:7d:df:50:b8:f1:2e:3e:3d:6e:a7:ed:8f:70:c2:90:a5:99:
b0:f9:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:18 2026 by rpki-client