Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: oFpYxFGHUJijFL/kyV3yF6nVLRXxZ9Me+VNFrDQZUQI=
Subject key identifier: 7E:1D:78:CE:DA:9E:E9:0C:6C:16:86:8D:5C:E0:36:A0:52:41:59:B9
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019D2A3B9FAE704827B957314A11D58B2884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:00:43 +0000
Manifest this update: Thu 26 Mar 2026 13:00:43 +0000
Manifest next update: Fri 27 Mar 2026 13:00:43 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: 8zrveUWCojWCnEGAK1zJ6IyiZNn4tmDkS/Hh9+DBJw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:9f:ae:70:48:27:b9:57:31:4a:11:d5:8b:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Mar 26 13:00:43 2026 GMT
Not After : Mar 27 13:00:43 2026 GMT
Subject: CN=7e1d78ceda9ee90c6c16868d5ce036a0524159b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:e0:ef:a3:de:cc:95:98:6a:cb:99:f6:7f:
3c:6c:c8:87:f8:38:c3:32:63:fa:4a:e5:f5:04:d5:
bd:ed:30:6f:d3:cf:fd:88:38:f5:e9:66:af:65:08:
b6:5f:18:43:2c:7c:e6:45:bf:ef:82:e9:d6:25:38:
fb:28:ca:4f:19:b5:2e:4e:91:df:de:e5:13:01:32:
3e:c9:a9:e8:0a:96:08:1d:45:b5:3f:22:09:b1:6c:
84:ee:b9:22:55:7f:97:f8:34:83:31:1a:f5:b9:99:
a2:f8:65:43:9f:8a:20:92:fc:07:dd:26:c7:a1:bf:
69:f3:90:f0:1a:33:7a:37:ef:16:8f:7c:eb:70:28:
45:60:81:8e:0d:a8:ea:a0:8a:f9:2e:58:9e:87:5c:
c4:83:53:04:51:aa:c0:3b:fb:7d:12:ce:25:a3:64:
77:d5:ed:39:a8:65:cf:d1:52:d4:eb:67:e2:99:3a:
ba:a7:62:4e:5c:53:e0:62:0b:e1:d5:7f:d0:b2:e6:
08:8c:10:c5:33:21:be:77:c0:46:34:14:9a:60:5e:
b5:05:75:17:f9:d2:4a:46:81:56:7e:71:53:88:1c:
06:aa:23:d0:11:9f:1c:ec:23:0a:05:d7:67:34:3b:
3b:0b:65:d5:db:dc:7f:84:f0:49:2d:8e:02:51:88:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1D:78:CE:DA:9E:E9:0C:6C:16:86:8D:5C:E0:36:A0:52:41:59:B9
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:39:5b:80:e8:c3:b9:16:4d:ab:37:a9:34:c1:fd:b6:05:d2:
ea:ae:22:8c:83:43:05:f9:8b:5a:6b:1e:7e:7c:8b:21:df:29:
98:be:61:f6:de:66:84:04:3a:f2:28:5b:92:ab:32:3b:c0:98:
88:ea:7f:88:a5:cf:23:c9:e3:f8:c6:33:83:bb:88:c2:c8:c5:
84:2b:79:93:a2:fc:4b:46:6a:84:bc:21:4f:db:b8:a1:e5:96:
81:4d:ca:96:df:db:02:5f:9e:e4:5a:79:24:6c:3d:a8:ce:dc:
2c:3e:22:51:26:37:a2:2b:ea:7e:eb:05:c3:3e:5b:4f:8f:92:
f0:f1:7f:25:20:49:a0:0f:55:e1:aa:b9:d3:8d:eb:86:67:9f:
a9:64:f0:5c:24:40:95:3c:8f:f9:3d:2b:ba:1c:03:3f:a9:48:
b9:03:6a:b5:3b:c4:b2:80:75:39:8e:a1:26:57:b7:60:69:08:
67:da:61:16:89:53:29:f6:0f:5c:f5:3b:05:45:e9:5a:88:fc:
db:70:90:97:57:0c:a7:fc:4c:f3:e4:4e:c4:fa:27:c1:63:bf:
f0:59:43:b4:3a:92:fb:76:61:b6:a1:e0:29:27:57:5d:f8:97:
df:0c:70:f5:87:37:80:4e:8b:09:b7:ac:37:a4:66:e5:3b:38:
ef:bd:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:28 2026 by rpki-client