Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: COzQR1WV3O2ObFqmW/PBuM71JEGDIjLYKWKeg3Yh4Yk=
Subject key identifier: 97:CA:11:AD:13:5E:C8:A9:22:C6:17:06:2D:96:C6:92:89:97:4D:62
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 019CAA8FF76179A965A6D536B050AE66DD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 0A6F
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: p9RxkxEDg3zhOEBmGSkuGg-Qp1g.roa (hash: Pzg3LR/Kx5u+U4xpCocEsCBgxEMmX7bZWZgvVSP3EX8=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: kpjtAHS21PLhFId6JSGo4fvDECmFBhobrdtKddtpKTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f7:61:79:a9:65:a6:d5:36:b0:50:ae:66:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=97ca11ad135ec8a922c617062d96c69289974d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:af:bb:cb:5a:d3:0a:63:b5:01:96:f7:63:
35:59:6d:19:9f:9e:8b:35:d2:7f:6b:cd:e6:cd:61:
b4:37:4d:39:94:e0:6d:65:2f:0d:a5:51:cf:71:9a:
1f:24:98:eb:de:eb:ef:f2:b4:03:ec:69:2a:2e:d5:
9d:38:b5:4c:ee:a2:2e:1e:e5:d8:11:59:22:1b:a3:
d1:4c:ac:d9:b0:47:60:25:71:43:a7:85:d2:69:01:
2d:26:43:f2:03:f1:6e:bb:57:6c:62:d2:25:bb:e4:
b1:37:f7:47:67:9b:a2:38:48:36:c8:2e:38:98:7c:
93:3f:33:45:ba:b6:e0:da:d0:ba:20:5d:e2:80:13:
6f:40:c9:10:b1:a9:c5:f1:8f:82:53:12:cb:64:a4:
d9:16:ce:ab:96:03:b8:34:48:b4:1f:e1:09:d0:e2:
b7:c7:3b:b6:b3:d6:c4:14:8b:40:eb:63:86:2b:e3:
13:df:c7:fa:e2:c5:74:9d:68:fb:eb:48:d7:18:b9:
e9:c0:a8:78:02:6a:7d:ff:0f:00:91:d9:74:df:1b:
bb:4b:27:6f:e3:ab:17:20:c0:45:4e:05:dd:d6:75:
2e:2c:73:dd:72:58:af:21:41:4c:2a:a0:82:5e:69:
38:36:5e:e8:4e:af:91:c7:c0:78:44:51:f8:f8:6d:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:11:AD:13:5E:C8:A9:22:C6:17:06:2D:96:C6:92:89:97:4D:62
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2c:cc:84:9f:18:0e:39:8c:ba:ca:a6:eb:e1:94:d1:37:8f:
4e:85:dc:a0:3d:65:44:31:0f:3a:00:e7:48:0e:38:68:b5:b7:
a0:bb:54:ea:35:34:90:48:57:8b:a3:e7:f3:6f:41:1b:46:88:
bd:51:86:51:36:2d:76:76:2b:54:2c:a6:78:ee:40:fa:e8:88:
4f:69:0d:3d:93:14:9b:70:e1:0a:b8:16:74:07:ca:f7:c0:3f:
04:24:e5:4a:64:40:1f:2c:92:77:56:9f:1c:fc:a4:f9:17:29:
6e:5c:7e:f8:cc:36:81:3f:4d:98:d0:a7:fb:28:c4:58:a4:bc:
ba:2e:74:f9:f5:1f:ba:0d:7a:7d:59:b7:06:12:52:ca:39:f0:
94:5a:f0:d6:e1:d5:2a:74:80:1d:4e:9c:f4:d1:3d:65:c9:2e:
55:65:d3:c7:ac:a8:62:73:89:1c:00:9b:85:22:30:e8:07:83:
cf:c4:e9:63:9c:08:a3:17:b8:c7:5b:51:a5:a5:36:b7:ba:93:
11:54:d5:24:e4:ea:61:75:9d:f4:a7:f0:9c:07:26:d9:87:d8:
ad:37:83:17:45:43:0c:d7:49:f0:61:85:1e:36:af:7e:69:da:
21:d7:72:dc:10:2f:9a:d4:42:f7:1a:72:d6:16:03:f6:a9:a0:
9e:14:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:31 2026 by rpki-client