Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: cty3mof1tDBRnlOcrDWQ9JnuxLLOCdfeSeVssLJHjDk=
Subject key identifier: 0C:44:57:E1:AF:92:8E:03:80:95:1F:01:7B:56:3A:D2:47:7D:07:C6
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 019CAA588261E6A706B9782DD63612EEC3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:00:53 +0000
Manifest this update: Sun 01 Mar 2026 17:00:53 +0000
Manifest next update: Mon 02 Mar 2026 17:00:53 +0000
Files and hashes: 1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: +HehIcTUxg8fHdbdzupXEX8ulY+0z93cuPiyyj8mF8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:82:61:e6:a7:06:b9:78:2d:d6:36:12:ee:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Mar 1 17:00:53 2026 GMT
Not After : Mar 2 17:00:53 2026 GMT
Subject: CN=0c4457e1af928e0380951f017b563ad2477d07c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:74:4e:54:79:a6:01:1a:1a:8d:02:9f:0b:
97:0d:06:dc:c2:0f:bf:1a:c8:a1:de:f1:60:88:d2:
e1:6b:d0:6b:35:a5:40:d4:b0:7f:0b:12:65:b4:12:
b3:dd:5e:dc:4e:0c:77:14:dc:04:fb:6d:07:66:60:
bd:7d:50:d6:a1:52:bd:d5:9c:ab:ac:71:d0:7b:8b:
44:82:23:bc:45:f8:14:6f:76:47:32:d5:69:e6:53:
f9:44:bc:ed:b8:0f:59:98:8d:b0:a0:95:f4:d3:64:
12:3f:f7:8b:bb:aa:f6:13:0d:5f:e7:92:c9:cf:51:
93:03:d0:a5:fd:f7:40:5a:53:29:6d:0a:d9:45:04:
a7:54:fb:bb:98:ee:35:12:3f:67:34:a8:66:31:b9:
d7:14:68:54:66:c9:e4:94:ee:5a:6e:11:f8:83:16:
d8:8a:41:a2:4e:54:62:bd:f0:76:7b:67:1e:be:8a:
ae:71:07:4a:d8:68:4f:80:1c:76:3d:23:97:80:a2:
d6:8f:f3:b0:ad:83:8a:2b:5e:81:2d:f6:49:34:7d:
c2:d3:7f:86:0d:4a:82:78:bf:c9:72:3e:8c:ee:f8:
2b:21:bd:eb:87:3a:1c:7c:ce:f1:6b:fe:fd:21:e9:
17:c1:1c:f8:fd:13:d7:36:56:45:a9:85:2a:d5:46:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:57:E1:AF:92:8E:03:80:95:1F:01:7B:56:3A:D2:47:7D:07:C6
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:5b:6e:aa:db:3d:d2:98:a1:f1:e5:90:57:0a:45:f1:ef:
c3:d4:38:e3:c6:af:84:4e:c3:bf:7b:98:06:aa:8a:56:f8:6d:
73:b7:9c:93:e6:d1:e8:47:37:0e:d4:89:54:5a:41:e7:f9:8b:
b5:fc:6f:6b:e3:f9:b4:87:6b:d0:2a:bf:37:c8:6f:16:5a:de:
37:43:f0:7e:25:53:4f:3e:79:69:3c:d9:c2:41:8e:c2:62:27:
f4:64:bf:ed:e6:2d:75:1b:ee:9c:ec:f3:2b:2d:6c:33:5c:fc:
0d:89:ab:7a:37:37:31:86:84:f0:d4:4d:94:89:3c:92:43:04:
d4:97:40:6f:bb:7f:04:93:8e:13:60:56:ef:e0:9f:a3:74:d5:
a1:94:4c:83:08:16:33:e5:ac:1c:94:30:6c:99:26:34:6d:a7:
7a:e2:5d:96:ce:11:bf:48:44:ae:ed:2f:4d:0d:5e:26:6f:fe:
78:bb:0a:c4:75:07:41:f1:68:21:78:4c:9a:d6:2d:18:d3:31:
b9:c4:82:b7:b8:71:0d:c7:24:a6:1a:15:2d:d1:ca:44:6f:2f:
03:b5:45:58:dd:09:53:ad:83:42:59:a9:e5:80:1e:64:70:30:
be:8e:92:83:cc:7b:a7:90:e4:05:f0:17:ae:e0:a1:2f:02:1c:
47:dc:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:20 2026 by rpki-client