Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: gwZXXI0e3MolbnwwyEMIMXQ7iLnS0KZka4jl5F/33lc=
Subject key identifier: 65:92:D5:41:F3:EB:12:E2:AD:4F:25:18:3A:40:66:D7:A5:0C:E1:95
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 019D29291A47132DB4155802F2EA801B46C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa (hash: eD8cUm6eR2m4jrtu7qYzfbk2kaBxMh/aGCqnzhmpaDY=)
2: g5jXkTpT8rS4RDrTaaqiauLNaBc.roa (hash: isrTkqL/KrQh1HHr0NL5DuWGUHsje/NyVaTqgUAy9vE=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: PAiUanx6Ycfd7Sw76zdnNHnKf4YOLeL0Ex3DRYJEw3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1a:47:13:2d:b4:15:58:02:f2:ea:80:1b:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=6592d541f3eb12e2ad4f25183a4066d7a50ce195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:3a:7e:e5:60:d1:bd:3a:d0:55:34:bb:1f:
87:c9:41:13:21:92:7e:04:d2:b2:d6:ca:6f:c5:d4:
39:64:26:75:d9:1c:50:19:c6:56:e3:ad:14:46:8c:
aa:0d:fe:3e:79:4b:2b:78:a8:2b:05:33:c9:e6:f7:
e0:ef:d1:1b:97:24:87:96:62:b0:d3:b2:9f:95:34:
74:88:0b:8b:5d:26:c1:27:fd:53:f2:a1:5f:6f:84:
d9:88:7a:39:b7:69:c7:12:9c:e3:01:5d:b3:69:7a:
b1:58:17:3e:1a:29:bb:9d:b1:0b:c1:c3:dd:76:ce:
70:1e:da:47:82:b4:a2:3a:12:ad:a1:07:c1:a3:70:
ed:31:c0:7e:00:fa:df:8a:35:26:4d:23:1c:33:0f:
61:8d:fc:28:b9:72:bc:bf:c5:d1:e0:28:2c:cf:09:
b5:6c:40:3d:d8:26:7c:a2:cc:34:ba:4b:03:e6:93:
ab:f4:2e:64:34:3a:18:2e:81:41:65:57:32:a2:24:
8a:aa:55:ec:f1:6b:31:ea:71:cc:45:2b:44:40:5a:
97:65:54:73:e2:71:74:69:17:ef:30:36:25:c0:39:
bd:f0:ca:65:ee:31:89:63:80:c7:b8:4f:44:ad:f9:
6d:56:c4:b5:8a:44:f1:37:15:b1:08:b9:ad:1c:c9:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:D5:41:F3:EB:12:E2:AD:4F:25:18:3A:40:66:D7:A5:0C:E1:95
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:ab:34:1d:16:e7:c4:c8:cb:2e:d0:a9:35:25:b9:cf:b5:
74:d1:fc:59:bd:bc:f2:f1:f9:d9:dc:ad:eb:7c:33:31:35:0e:
7d:bf:5a:52:f2:aa:af:72:9c:07:46:72:58:85:3a:58:5b:b1:
ac:d2:11:d3:ce:17:c1:24:bd:05:44:33:92:ed:31:a6:d6:38:
b2:c9:96:47:49:a3:5b:18:5d:90:c2:02:c3:54:44:08:72:c3:
63:f0:a3:2a:35:8b:3a:06:b1:41:c4:fd:d7:43:fe:ff:be:5b:
6c:d2:55:1d:cd:fe:76:0e:7a:56:3f:cc:d3:7c:7d:37:7c:3b:
72:90:c0:2f:0b:d8:d7:54:14:3f:8f:68:3f:7d:9a:88:29:17:
00:81:cb:1b:ea:0f:76:7b:e6:97:d4:6e:12:80:30:51:d5:6f:
75:fc:39:63:42:cb:0d:d5:28:9e:d1:cc:9a:d3:6a:4a:4f:0c:
53:2f:86:b7:63:35:15:98:f2:3a:66:9a:a8:d2:01:ea:04:fe:
e4:39:6f:74:5c:3d:ed:92:37:e2:06:a9:3f:bb:2c:f1:85:1c:
15:0c:90:fb:e5:d1:1e:01:5d:bc:04:65:7c:93:f2:53:40:5e:
d6:21:f5:d6:36:1b:30:83:b2:85:c1:ef:7b:ac:ac:5f:02:56:
76:63:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:44 2026 by rpki-client