Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: uD/sTiH6IEY0RxZvMtgOyHAp7yufR61/LAYbWc9aHWU=
Subject key identifier: 8D:33:EF:B6:A3:6A:E4:F0:B1:A3:72:5C:E2:D0:FF:3C:A6:48:C7:CA
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 019D26CCD466EB982D31B1CF65C73D7D2BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: 6ly5xS7Crn95qS-sabxmTiXk0Gw.roa (hash: orel+0qepeeJDJ5TDLnEm1CeQiuPhxAXOKIcf81qcUQ=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: O3Ofnn6/xBAgCkwZxl7s6CSC0T8NvlrIGHvNwC9KLLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d4:66:eb:98:2d:31:b1:cf:65:c7:3d:7d:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=8d33efb6a36ae4f0b1a3725ce2d0ff3ca648c7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:b5:86:d0:da:ef:5b:a2:24:4e:1b:56:8b:
39:da:d8:00:e7:a6:3f:98:40:3e:a5:c0:8b:6c:f4:
c6:32:17:e9:c1:7a:03:fc:ed:25:c1:5f:d4:3a:dc:
e4:c0:43:82:ed:7b:00:8f:26:33:f5:4a:32:2d:8c:
23:40:55:b1:1f:be:08:99:f9:fd:ac:b3:ce:ca:bd:
22:03:2e:6d:43:8c:a8:e8:bf:51:ff:8e:12:e9:a9:
ba:56:e5:cd:31:8c:2a:50:47:36:e5:e5:32:5a:62:
7d:ff:4a:f7:a7:5e:cd:33:cf:8f:e8:c3:1f:cf:d5:
39:99:ee:5d:b6:06:72:63:a7:54:ec:b8:7e:c2:f2:
d5:77:9d:b4:a8:ec:e7:58:09:52:02:ec:24:86:a0:
35:13:4c:00:33:1f:66:35:b1:df:94:dc:0d:8e:46:
a5:af:77:12:98:3a:89:fd:8d:1e:a4:14:ed:f5:62:
af:7e:af:8f:c3:c6:00:d5:76:eb:ce:56:2b:35:d9:
6c:9c:92:23:ef:55:f1:16:83:9d:49:b6:01:fe:e0:
25:87:d6:c2:08:b1:7a:85:b7:f8:75:34:ca:3e:a8:
46:3d:5b:0d:39:71:81:c6:52:0e:e0:7f:46:75:22:
e2:a1:3e:05:9e:a6:f1:9f:b9:96:ee:87:6e:fd:67:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:EF:B6:A3:6A:E4:F0:B1:A3:72:5C:E2:D0:FF:3C:A6:48:C7:CA
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:de:67:a3:ae:59:68:f3:10:2b:d5:4b:16:ac:37:54:56:
c3:51:4b:74:31:72:97:76:12:43:69:43:b4:ee:ff:47:75:18:
d3:23:3b:05:a5:56:d0:c0:27:af:b4:b5:d6:4a:50:5b:ba:0a:
93:3d:fb:45:5d:d5:17:53:75:22:9b:9d:5f:99:a3:7c:cf:10:
50:b1:0e:7e:16:b4:a1:b8:e2:7a:c5:e9:9f:df:7e:c4:92:0f:
b3:d1:69:18:ee:a8:db:74:10:08:1b:ca:5b:da:67:da:07:56:
ec:96:ae:5b:70:96:8d:4e:b0:e7:57:5e:b6:2e:18:b0:50:ed:
91:46:01:54:5c:a3:ac:ba:5f:ac:fc:d5:fd:1c:d2:eb:42:ff:
37:62:74:09:bb:1a:ec:7a:a5:44:b0:dd:74:a7:4b:93:0e:e0:
d4:31:99:fb:22:47:8c:cf:ac:60:1a:eb:6b:b6:64:94:40:70:
b6:62:e9:36:ea:25:58:d1:af:00:30:e7:25:45:f0:71:64:6c:
1c:8f:b4:2f:07:02:a7:e9:2d:ec:29:f2:40:3a:da:fa:7b:91:
05:ad:91:d6:cf:ab:d4:78:9e:db:26:59:0b:11:56:b5:1d:ac:
58:32:dc:96:07:ec:15:07:16:3d:b7:09:cc:93:83:0a:d7:79:
51:ae:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:44 2026 by rpki-client