Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: 2Rz0MQbQ4L0ULu98025k65SYCim83PvgJzK6Uv6JG1s=
Subject key identifier: B8:D4:14:21:B2:8B:CC:13:0A:09:61:BB:AD:2E:C0:87:46:62:A2:26
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019CACB58546862B642766441BE4B17C8902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0B3D
Signing time: Mon 02 Mar 2026 04:01:43 +0000
Manifest this update: Mon 02 Mar 2026 04:01:43 +0000
Manifest next update: Tue 03 Mar 2026 04:01:43 +0000
Files and hashes: 1: 5M_KwgEpGB_wTUnEs5KgK0u-puM.roa (hash: 1WXrU5af8c9IUXVeRilbTvTk9Z0TVLWoEf8fzrPe7J4=)
2: Ve6c2IT4Y4KWt1y8vOlimM_P9Vo.roa (hash: JZ/bRjpJCHl5nEUS59KBB6ePkjyLJVz3d6ZPz9DGR/E=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: jF7lAFtTHd8OTse9qAOXxdivzNe3kx6LHN/BbQU5Ylo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:85:46:86:2b:64:27:66:44:1b:e4:b1:7c:89:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Mar 2 04:01:43 2026 GMT
Not After : Mar 3 04:01:43 2026 GMT
Subject: CN=b8d41421b28bcc130a0961bbad2ec0874662a226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:e3:29:bd:2f:aa:d6:c7:e4:32:b1:30:02:
42:0f:5d:21:7e:67:52:1e:68:82:dc:cd:49:35:a0:
09:b9:fa:1e:bb:6d:ed:12:1b:bf:2a:bb:b4:9b:00:
7c:0b:c6:12:2d:65:4e:78:be:aa:6f:71:78:4c:66:
b2:5a:ac:09:f7:53:ff:d3:83:bf:f5:ca:4a:72:7f:
cd:b5:26:28:68:c8:ac:51:02:8e:6a:a9:da:7d:0b:
f3:6a:cc:29:dc:b4:37:89:7d:79:8d:26:15:b4:47:
3a:eb:1f:5f:b5:df:f1:22:42:60:41:e3:3e:8a:43:
7f:d0:16:fb:33:e3:c9:6e:38:71:b1:86:25:f7:d6:
07:5e:ba:b0:9a:83:d7:ef:d3:2b:67:c5:9a:5a:b8:
b9:66:8d:b3:7f:24:c0:9d:fd:4a:da:a1:d4:f2:05:
29:4f:61:c4:a4:16:a7:06:70:ec:41:ab:5b:e2:60:
1a:bc:be:cc:50:d4:c8:fa:27:00:45:7e:c0:74:81:
0f:60:6d:50:f3:2f:95:fa:54:b4:9d:73:46:ae:e9:
79:08:22:e1:45:87:6d:34:8d:64:c6:c6:5e:97:73:
fe:19:10:7b:c5:11:f5:8e:04:65:21:ff:5e:15:f1:
b1:fa:5f:39:06:0b:23:c3:5b:a6:4c:ea:14:ac:a7:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:14:21:B2:8B:CC:13:0A:09:61:BB:AD:2E:C0:87:46:62:A2:26
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:30:0c:34:f7:24:28:d7:49:3d:5b:51:db:42:27:eb:a2:45:
d8:cb:f3:65:72:53:63:65:a3:52:9c:dc:ce:04:8e:da:3d:c5:
d3:5f:2a:94:47:ad:c4:3e:08:aa:a2:d1:0c:8e:12:5b:a3:72:
91:62:95:97:fe:95:af:5b:88:4f:82:a9:61:a7:64:bd:4b:29:
18:63:aa:83:ba:52:20:c5:b3:ba:77:fd:6b:b8:74:26:6a:89:
2c:d5:3f:44:2b:51:26:48:ca:5b:4e:46:6b:7a:e8:20:91:c0:
ec:02:dd:f3:a8:f9:f7:7d:8d:6b:b2:47:db:e6:0a:1f:00:85:
a0:60:b1:c6:a5:32:ac:09:f2:f4:0a:dc:79:d1:aa:50:71:5b:
37:db:98:25:2f:f5:4e:68:2c:6d:3c:8d:20:48:aa:d7:b1:8b:
dd:9f:d5:da:0f:56:57:88:b6:13:45:6a:e8:73:d9:51:1b:eb:
8f:12:59:66:b9:89:d8:e6:78:db:a0:4e:6e:9f:73:ee:a3:7f:
62:1d:ad:41:ad:bb:ab:c1:f2:de:52:c4:bf:c0:15:b4:6d:0c:
90:11:4f:4e:c2:65:3a:ce:b3:07:0a:e5:68:8a:0b:b1:d9:a5:
3e:ba:57:e0:f6:71:31:72:4d:64:64:65:e0:9d:35:bc:d4:c9:
22:65:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:25 2026 by rpki-client