Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File: vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier: bpu+08Lwm8GZpJpUUd5i/GDvGiPYtMZxKyUoEIu/I7M=
Subject key identifier: FB:4E:24:04:DF:3D:9E:EB:4A:76:79:DF:4E:94:F0:87:19:90:DD:7C
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 019D284E17E26453E7B9586E6CE4C11C58E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number: 1281
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: mk9FoHtrLbDMqhyHTcDKHNuv37k.roa (hash: +ODYm11fXrZNctf9Tic/a7meV/r5t53Msv62thVJdV4=)
2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: 7RcIrqaVmehTsijiemTh5WUkCo4Fwj5Cy2WA8jACj7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:17:e2:64:53:e7:b9:58:6e:6c:e4:c1:1c:58:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=fb4e2404df3d9eeb4a7679df4e94f0871990dd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:e3:a7:f3:7b:e4:ce:30:31:15:a8:2c:75:
f9:5a:d0:aa:3e:98:40:eb:06:64:20:61:65:ba:49:
88:ee:ae:39:58:e8:f3:f7:57:c9:f3:80:51:62:63:
7e:51:73:0f:19:e0:18:64:74:65:29:d3:90:13:70:
83:09:b6:97:3a:d7:1a:b2:75:c3:64:8a:28:50:6f:
57:d3:73:4c:1b:d4:dc:6a:7d:3b:af:09:14:f3:30:
c4:15:42:85:02:38:b2:72:b2:3d:cc:74:4e:83:ff:
a2:6b:bb:bb:1e:f5:ad:02:11:d0:4d:7d:c3:bd:be:
e5:d9:1b:01:e9:fa:5f:a8:44:3d:7b:47:b5:21:cc:
9c:f4:3f:34:ab:8f:a8:85:ab:29:0f:6d:ec:44:1b:
84:c6:3e:10:06:00:91:4b:cd:07:34:bb:ce:0e:5f:
42:31:a5:6e:61:99:ef:1d:84:f8:e2:4d:6e:88:5a:
54:ff:35:53:29:b8:ae:4a:ad:97:d3:0c:56:96:ec:
e0:cd:4b:19:c2:34:0c:29:13:80:62:88:1b:8e:c5:
a6:91:ac:16:67:82:82:cc:ba:ba:8d:c1:d9:9b:f9:
88:7b:69:a0:ba:00:a2:4c:84:7c:17:28:21:eb:9c:
2c:ef:9a:13:28:c4:1d:6d:ca:14:f4:88:e3:2f:12:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:24:04:DF:3D:9E:EB:4A:76:79:DF:4E:94:F0:87:19:90:DD:7C
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:45:f2:47:76:a0:b7:a2:a1:f1:52:8b:49:92:8e:66:d6:ea:
8d:09:4c:61:66:29:d4:a9:54:b8:3e:31:d7:0f:ba:e8:65:c1:
46:39:d5:29:0a:94:02:ac:44:35:4d:9f:da:8f:a5:eb:01:fb:
ff:23:c7:a8:2a:87:8d:e9:bd:b1:ba:fa:8e:e4:45:d2:88:d4:
fb:cd:2c:26:a3:dc:f4:62:c7:14:46:2b:e2:72:7a:48:5b:09:
5e:df:ba:28:50:dc:8e:c5:f9:a3:72:e8:7c:5e:7b:64:70:4c:
d3:9e:05:e9:26:20:06:b7:97:1a:5c:dc:69:10:c2:93:59:6b:
8e:73:d1:1b:db:11:46:a5:4d:72:dd:e4:ad:a8:95:e7:9b:ad:
09:a6:55:97:d3:07:ed:af:42:88:95:51:01:41:88:40:64:a5:
65:8e:18:52:fc:9e:c5:88:25:b8:00:c4:5b:83:49:54:ee:d6:
45:b5:5b:40:82:d3:aa:27:bf:4c:94:7d:30:ab:25:78:f9:dd:
9f:23:a7:39:d1:cf:c5:6e:7b:63:43:3e:96:8d:f1:96:35:1e:
2d:6f:ca:c1:46:0c:5e:6a:5d:59:64:c0:e7:3e:3c:cf:d5:0b:
47:5a:34:b6:08:3a:b0:cd:24:96:76:4d:cc:74:7f:e2:dc:cb:
85:a8:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:26 2026 by rpki-client