Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: ecHXS4oCjvnekUOW9ZkwQQzXc/5eJETB/b8THT25t3o=
Subject key identifier: CE:FC:03:D1:33:A4:DF:E7:F6:B4:F1:9E:38:D3:BA:5C:AB:93:1D:E1
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 019D273B02FE4632A54250CBA192EB754C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 142D
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: nu2lbW0g95yVXBtDFUgDrkJzEwM.roa (hash: 8SMpinprSw+0Hderswh6JaQ9jOtPmZtb2eKAdki8fbU=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: gBAfbrDUY6CIIq1CPJB0JdnxrXpumCAYQZXi5QgAptk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:02:fe:46:32:a5:42:50:cb:a1:92:eb:75:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=cefc03d133a4dfe7f6b4f19e38d3ba5cab931de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:d7:9e:c9:e4:2b:77:e3:9e:41:c5:cf:3f:
f5:6c:99:7c:6e:ce:49:a8:f2:80:05:92:7c:20:55:
6c:ec:31:ec:cf:fc:87:ef:20:b1:e4:75:b6:91:c8:
b3:18:8d:a2:c4:55:9f:ed:58:0b:0c:b6:95:a8:55:
b7:dd:5c:90:cc:b5:cf:1e:13:d7:2b:8b:54:94:6b:
72:45:6b:e1:25:42:7a:e7:a8:b3:ae:75:33:6e:33:
3a:fc:23:9f:d3:20:31:33:1a:1f:a9:a4:42:06:6e:
3e:11:6f:ad:c9:71:82:4e:c0:16:c6:a8:c7:06:34:
71:b7:1e:7b:b2:61:e2:bd:af:a1:83:37:b9:49:8b:
36:09:6a:5c:ef:4c:9f:22:9e:5a:bb:f5:d7:cd:c2:
c0:19:cd:d4:1d:a8:20:18:cf:66:e8:d9:ff:33:67:
ec:59:8d:bf:ff:5a:f7:5e:ea:d0:22:c6:d1:f8:d6:
8d:af:4e:5b:db:53:2d:ae:fd:90:23:ee:db:92:f4:
8a:5c:9e:ae:f8:62:93:19:14:6f:85:f6:3d:59:95:
21:b8:8a:7f:45:14:fa:7e:63:60:34:b4:50:bf:40:
c0:04:7d:d1:3b:c6:60:a7:15:ec:f5:eb:35:bc:81:
4e:d4:34:f4:7d:f4:8f:54:ee:74:85:e6:2b:a0:f4:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:03:D1:33:A4:DF:E7:F6:B4:F1:9E:38:D3:BA:5C:AB:93:1D:E1
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:70:f8:f9:58:ce:e1:50:1f:81:d9:9d:09:3c:7e:e9:ae:43:
f0:11:41:1c:d7:69:96:fa:23:f8:eb:a6:07:5c:ad:5b:41:d4:
e8:1a:f4:67:1d:77:b8:6c:97:a9:fe:1e:f8:1b:b6:02:a5:fc:
76:2f:ca:1e:14:d7:f3:62:0c:81:a8:c8:e3:e7:fb:26:de:37:
7c:64:5b:11:bc:5a:d6:71:65:2f:3b:75:13:fe:b3:3f:3c:de:
15:dc:ed:7e:5d:a1:85:0a:8d:7b:ae:33:44:3c:48:f5:ba:4d:
89:41:65:ae:82:66:56:36:dc:d4:61:28:60:04:17:91:67:04:
cd:eb:8e:f2:6b:bb:7d:e8:d7:20:92:41:fa:1b:5f:38:1e:78:
f7:a4:5b:9f:c3:02:dd:ff:ac:a5:0d:1e:c7:81:a7:ca:aa:92:
a9:4d:a6:cd:ae:fe:97:94:2f:85:ff:ba:8b:14:c5:82:98:85:
d1:0c:66:e8:9d:71:cc:77:0e:ca:db:4b:f3:c1:64:11:0e:c8:
2a:4c:62:a5:d4:dc:eb:23:9e:f5:ab:9a:61:42:d7:fb:a0:36:
3a:be:c0:27:1a:35:b1:bb:fb:65:40:bd:7c:14:b2:b9:53:28:
14:21:99:1a:1a:63:d5:fa:da:24:39:c7:a5:ea:3f:68:4e:19:
f6:f2:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:59 2026 by rpki-client