Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: TUykBCw1842oi8DueXc2Ikvi3TWqUN7+WOa8eq9puPM=
Subject key identifier: 42:43:BF:C1:1A:3D:F7:B8:0F:EE:70:4D:62:A1:26:18:13:4C:69:5D
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 019D25F10599A8685EBD59B0CE785D8CFB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:00:45 +0000
Manifest this update: Wed 25 Mar 2026 17:00:45 +0000
Manifest next update: Thu 26 Mar 2026 17:00:45 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: EHVi8IyhZ9Glrn6W8zMRKRNxl+CWrShGcsscCBJbU0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:05:99:a8:68:5e:bd:59:b0:ce:78:5d:8c:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Mar 25 17:00:45 2026 GMT
Not After : Mar 26 17:00:45 2026 GMT
Subject: CN=4243bfc11a3df7b80fee704d62a12618134c695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:5b:79:c1:72:fc:ad:22:77:9d:f7:a3:fd:
4d:9c:fb:85:87:09:36:9b:d7:52:83:2d:63:31:4e:
9f:93:46:94:e3:40:18:dc:d0:37:7e:19:18:44:81:
5c:bc:42:2f:3e:7a:35:f7:79:55:0e:b2:1d:e1:d8:
07:84:ed:d5:4e:07:5e:a7:9d:f1:2a:54:7c:b3:c3:
9a:9f:9b:dc:06:9e:ea:5d:56:a1:68:dd:13:2b:2d:
6b:5c:ab:9b:63:c1:f0:49:cc:da:ca:5e:e2:07:a1:
ca:2a:35:63:17:35:4b:1a:e4:4d:35:4b:e0:33:77:
cc:4d:e3:15:af:3a:0c:8a:da:45:d3:d3:15:57:bc:
2a:fc:4a:aa:b7:b1:63:eb:09:f9:2a:85:de:d2:0a:
dd:a5:24:02:a9:ad:2c:3c:6b:ef:66:46:db:7f:ff:
60:40:a6:2c:50:c4:19:3c:7b:14:17:53:36:ca:a0:
28:e1:4c:0c:a1:10:a2:3b:77:d8:b4:24:ed:ad:5c:
58:7a:4a:9c:53:38:bb:09:fc:10:19:1c:91:a5:5e:
56:d3:a7:3d:0b:c4:40:33:7a:9f:c7:3f:71:a7:1f:
71:df:51:2d:fe:5c:32:a9:24:b6:7f:c8:6d:c7:fc:
a0:10:e9:59:50:b4:2f:ec:5a:b6:cd:e3:7c:2f:60:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:BF:C1:1A:3D:F7:B8:0F:EE:70:4D:62:A1:26:18:13:4C:69:5D
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:ba:9a:9e:f6:ad:4c:a9:c1:2f:96:15:63:3a:41:5f:3e:
2e:18:66:aa:10:56:9e:f4:e7:b1:a3:00:c7:42:b5:fd:98:21:
96:25:64:6a:25:31:25:fa:1d:b8:b1:3e:7d:1e:fa:7e:a3:24:
57:a6:8d:ef:b2:4d:c4:44:f7:94:7f:78:fb:c4:7d:a9:c7:01:
aa:b6:61:77:a3:d5:66:bd:a5:7a:b4:c0:49:fb:25:21:53:7d:
f4:c4:13:82:37:8a:b0:d9:08:86:30:c4:07:42:01:4e:c3:c2:
c3:b2:b6:69:56:b2:d9:c1:26:73:f1:3a:50:e9:81:89:28:33:
44:16:78:26:28:73:5c:5b:37:c4:f5:2f:12:57:f8:b3:d6:1d:
f9:b1:02:8c:3a:28:d8:f2:ed:03:4b:32:8f:91:4a:b8:4b:49:
7c:ba:b3:b1:28:3e:6f:66:7d:d0:99:26:6a:bd:9f:0e:ce:ce:
b9:b5:ee:08:43:4b:df:28:1f:18:3c:45:06:79:29:0c:73:42:
01:4e:0e:63:a4:c1:d3:c3:87:26:15:e5:9c:ff:b6:c6:3c:a7:
ce:a0:47:6d:b8:1a:a3:2f:f2:25:3a:12:48:b3:38:67:4d:28:
43:79:13:25:c4:a4:2a:ab:06:ae:75:bc:49:cb:c9:d0:6e:ea:
6a:fe:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:43 2026 by rpki-client