Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: /7huQAf/FwTX/IR4b5aWDUz6nNQdBIPtp4dbCdT78fc=
Subject key identifier: EA:97:DF:14:2F:E8:13:3D:53:D6:C1:9F:27:99:06:48:29:7A:21:35
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019D9B19D001DE3C8CFB076C5499172C0C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 093E
Signing time: Fri 17 Apr 2026 11:00:53 +0000
Manifest this update: Fri 17 Apr 2026 11:00:53 +0000
Manifest next update: Sat 18 Apr 2026 11:00:53 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: 0wpun9HCnUcUSxXg92mN8jOgYlIMqpkkuiMu4oVJd3o=)
3: xd89191APrZOUVHG3uZycN3SZ0g.roa (hash: IG6q5I2/G1oD/WZjTUVQ36euEC71avJGwrJIV9eTw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d0:01:de:3c:8c:fb:07:6c:54:99:17:2c:0c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Apr 17 11:00:53 2026 GMT
Not After : Apr 18 11:00:53 2026 GMT
Subject: CN=ea97df142fe8133d53d6c19f27990648297a2135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:d0:87:f4:b5:c1:ef:8e:c0:40:c9:04:65:
1a:8e:a8:5d:46:c8:40:d9:43:a8:65:31:70:4f:c2:
99:81:71:69:de:97:74:16:1c:c9:ed:12:4e:d9:a8:
41:f9:67:de:7c:c3:17:70:7e:0b:de:97:ff:8a:11:
dc:9a:b6:8f:a4:99:38:a8:64:a2:38:7e:0f:1a:b4:
d5:f3:58:6c:f7:50:d9:57:18:00:a9:2f:5f:d8:b4:
d5:55:5e:66:b8:96:84:9b:a6:62:e1:7d:d3:49:46:
5a:b1:26:2c:5b:32:56:70:47:6a:f7:fa:91:d0:71:
47:7f:85:c6:cc:6b:01:5b:2a:0c:89:f3:48:6f:f1:
11:a0:db:45:12:0f:b4:f9:66:ba:a4:3f:e6:26:11:
23:c4:3d:f6:3f:af:c7:69:24:7d:45:e7:23:fc:5c:
db:31:fb:2f:7f:1e:f2:33:96:cd:61:af:a8:b3:59:
f8:7e:e4:f7:fc:ea:60:b5:d6:8d:52:0b:b7:8f:e9:
2e:1b:c1:2c:23:0c:d2:c2:8c:2c:b3:eb:f3:f7:89:
ba:c6:d7:1f:76:26:11:ca:e1:07:80:ba:fd:59:05:
9a:0c:a0:b1:d2:e5:6a:10:a8:cb:84:a2:8f:15:ab:
12:e9:5d:8b:25:2b:d4:3c:fa:ff:e3:a6:5f:c8:d1:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:97:DF:14:2F:E8:13:3D:53:D6:C1:9F:27:99:06:48:29:7A:21:35
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8c:b6:fa:41:60:22:46:2f:83:83:c8:fe:3d:64:58:50:67:
11:3b:1b:ce:0c:d4:72:44:d1:0c:ef:3a:ed:46:b2:22:80:8a:
e0:b7:58:49:a3:6c:3d:6b:75:d7:85:b0:25:73:85:bc:9d:fc:
62:22:a1:19:36:78:3b:be:13:e2:a8:2f:ec:e2:ac:c4:2a:92:
68:cc:b0:b3:b2:83:06:c1:c5:29:1c:69:f7:40:5e:bc:09:38:
52:09:0f:58:af:34:28:a6:82:5c:37:a8:44:41:c2:85:7d:27:
34:31:ea:a1:9d:0d:df:ac:13:6e:3b:38:cf:94:63:b5:cf:68:
b6:bb:e4:b7:ec:59:41:18:45:c0:ca:db:97:fe:78:83:42:c9:
e4:ea:d7:b4:ef:4c:5a:89:ab:c7:cc:eb:60:5b:34:0a:b0:2c:
0a:c6:8b:ee:94:1d:a4:56:86:3b:3b:c0:83:18:55:59:36:f0:
22:73:38:4a:ef:bb:3e:f1:3a:3e:c8:65:d5:98:84:5e:44:5c:
29:40:3a:a4:65:30:25:b5:4c:d6:df:9c:b1:67:00:e7:4b:ae:
66:50:25:64:a0:25:7a:f8:cf:27:7c:2b:1d:07:4d:fa:ab:87:
f8:23:4f:43:d1:16:54:fe:92:a9:91:48:bd:1c:36:f0:d4:be:
b2:4e:3b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:10 2026 by rpki-client