Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: PWNMrV3/2VaoicU7KIir8r49F+YkpKlFMrhtkshBl+8=
Subject key identifier: 4A:3F:D2:B8:77:1A:F5:0C:CF:CF:54:B4:71:97:28:9E:45:34:8E:50
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019D284DD5A2E806295E8A7F0FEB4A4085E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: m6vV6XxjjRPwEFazrHJwpa2GDquICJaWfJr/YwhKmZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d5:a2:e8:06:29:5e:8a:7f:0f:eb:4a:40:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=4a3fd2b8771af50ccfcf54b47197289e45348e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:cd:a6:21:83:4b:13:ab:76:af:06:2c:07:
38:a0:49:92:57:de:a0:6c:c7:0e:89:78:f8:f9:8e:
a6:a2:43:6f:bc:6b:c7:a8:35:38:ef:7a:b2:b4:9f:
56:83:3e:a7:dc:b9:b6:95:90:0e:53:17:d9:3f:e6:
f8:8c:3e:69:bf:e9:8c:c4:94:98:46:76:0b:1a:d0:
00:b0:24:74:b3:75:78:d0:d5:26:67:e6:4c:81:de:
42:bd:e8:88:14:78:f2:1a:37:c3:78:46:b2:8d:22:
53:10:4d:54:06:07:8b:72:0e:c4:1d:75:0d:c8:f5:
9f:6a:aa:34:87:fd:70:42:39:35:cd:42:ab:41:6c:
a7:36:be:6c:ae:8f:a9:f2:d3:16:22:79:ab:f3:fe:
9f:92:c1:88:18:f8:29:4d:cc:11:da:03:7b:d6:f0:
36:5a:b0:b7:4a:29:ac:26:20:80:18:30:84:0d:66:
03:4c:2e:0f:64:b6:1c:b1:8a:30:24:52:21:ca:a3:
c4:60:ca:db:15:07:64:31:2f:5d:65:e8:ab:47:2d:
aa:62:9c:e0:9e:03:0c:a9:cb:20:af:08:84:65:88:
fb:0a:90:a9:16:96:5b:25:79:04:83:95:ef:58:8e:
d1:35:58:1c:93:b5:55:8c:81:94:1a:a2:fd:20:45:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:D2:B8:77:1A:F5:0C:CF:CF:54:B4:71:97:28:9E:45:34:8E:50
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b7:0c:18:c7:3f:c4:87:82:1b:95:16:e7:da:0e:a9:7d:73:
e9:44:d5:cd:17:be:1b:a5:8e:47:4b:44:3b:58:32:fe:d3:8e:
24:95:65:86:fc:87:e5:4e:93:8e:d0:bb:cd:ad:88:8e:80:55:
ce:c0:5a:af:ad:51:90:fb:02:b1:b1:bd:87:5b:b0:c6:d5:35:
0c:91:e0:48:ff:d1:a2:62:63:dc:66:5b:77:b5:63:b4:97:43:
c1:ea:b7:74:17:09:64:bc:ae:cb:43:40:91:39:3b:ec:e9:49:
ba:a1:bb:82:68:42:5e:32:9e:c6:50:9f:78:03:1e:64:98:31:
e8:47:d2:b4:4a:62:46:65:c2:0e:80:f1:66:c3:1e:30:0c:a6:
de:f5:24:48:60:e5:05:97:51:c3:be:da:45:57:f9:e0:99:a3:
7d:e8:d1:b4:2a:3b:cf:24:34:f2:0a:0c:e6:a1:cd:51:4b:c5:
17:96:37:a5:ea:3c:9b:ca:43:f1:37:0b:b9:e4:2a:d2:f2:f0:
8f:85:f1:d0:41:ab:19:43:e5:e2:b8:d1:76:b8:31:86:5a:5a:
de:99:bc:4f:e0:3e:8c:cf:b0:88:9e:51:ad:0c:d3:31:38:c1:
92:da:57:d6:0a:09:79:cb:b0:25:be:a6:42:c3:c3:c8:9b:63:
f7:29:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:37 2026 by rpki-client