Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
File: vyWD8y8GMvH9ot4x1NVi7qoH07U.mft (raw, json)
Hash identifier: EDPn1cKn5RZcLXvdGwad6jJdJe0TapfnOynThkpsB10=
Subject key identifier: 26:02:EF:2F:64:93:A2:9F:FA:5E:A2:FE:F6:67:94:6D:EC:A8:8D:45
Authority key identifier: BF:25:83:F3:2F:06:32:F1:FD:A2:DE:31:D4:D5:62:EE:AA:07:D3:B5
Certificate issuer: /CN=bf2583f32f0632f1fda2de31d4d562eeaa07d3b5
Certificate serial: 019D27046FFAB4A60AA897A48229A7852238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyWD8y8GMvH9ot4x1NVi7qoH07U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
Manifest number: 4F
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: vZv3FN2tJ8gWjI_-FLI812Ef6ns.roa (hash: QctpTFOBnHUk9XOzbJs42Weo4R/GK1yQVquh8DaiaL4=)
2: vyWD8y8GMvH9ot4x1NVi7qoH07U.crl (hash: AksWs0IsFK/SrgE421wjk/Zioalh7J7QSvoOQDrvIo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyWD8y8GMvH9ot4x1NVi7qoH07U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6f:fa:b4:a6:0a:a8:97:a4:82:29:a7:85:22:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2583f32f0632f1fda2de31d4d562eeaa07d3b5
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=2602ef2f6493a29ffa5ea2fef667946deca88d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:e1:b6:9c:65:13:13:38:f2:c8:86:f2:97:
36:4b:e4:35:8a:43:7b:8e:54:5b:f1:cc:7b:a8:1b:
75:c4:de:ed:74:df:40:7c:b9:cc:80:56:e0:ad:bc:
f7:1b:26:62:64:3d:fd:2e:05:77:b9:de:f7:ec:56:
e2:0c:2b:ce:0b:a0:f1:70:c2:7f:01:09:83:53:0e:
82:1a:0d:0e:7b:da:48:12:5d:c3:e2:a8:1b:74:3e:
5e:8e:aa:43:df:71:f0:9b:d5:21:55:d4:b4:f6:9d:
c2:c9:83:02:b1:03:4f:93:85:1f:e4:ef:66:54:fb:
ac:c6:1e:79:75:cc:82:bc:64:f9:d6:28:43:37:c3:
1d:91:15:1a:d8:22:c8:fd:46:75:65:d4:23:81:bb:
7e:9e:f1:f8:ef:7c:31:0d:39:9e:57:21:04:d0:cb:
29:52:8f:97:de:e1:82:84:ad:1f:e8:d4:a7:d7:c1:
83:3d:00:ba:02:1f:05:6a:d5:f0:d6:37:c9:b4:e2:
19:0a:c8:ba:c8:7f:61:3e:f8:0a:e5:46:32:f3:23:
0b:7c:a8:81:9d:03:aa:27:bf:5a:22:c8:42:af:93:
6e:71:7e:1a:cf:6b:d4:6a:70:4c:7e:61:ee:43:5d:
3f:00:02:73:1b:0d:fc:c0:1a:5d:26:63:ed:11:4f:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:02:EF:2F:64:93:A2:9F:FA:5E:A2:FE:F6:67:94:6D:EC:A8:8D:45
X509v3 Authority Key Identifier:
keyid:BF:25:83:F3:2F:06:32:F1:FD:A2:DE:31:D4:D5:62:EE:AA:07:D3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyWD8y8GMvH9ot4x1NVi7qoH07U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ceaf0-27f6-456c-bc7e-08538b0424eb/1/vyWD8y8GMvH9ot4x1NVi7qoH07U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:74:ce:d7:e8:1d:6a:73:db:19:ef:95:39:9b:d2:cf:7d:58:
9d:e9:77:7f:b1:e6:42:6a:77:1e:81:56:b8:b9:76:71:39:41:
ad:ed:88:44:73:d4:25:c1:13:60:0b:f4:8f:89:40:83:cf:cd:
13:47:be:70:4f:d8:68:3b:4a:4e:b0:0c:9f:ce:1f:a7:7d:2f:
f4:e6:3c:2a:a8:93:7e:46:20:47:bf:65:f3:fb:6a:a7:9c:04:
ce:07:5c:21:c5:bc:e1:77:9e:0b:d0:34:8c:49:71:cb:f5:ed:
3e:fd:d7:c8:57:09:e0:7b:1d:29:56:12:f1:40:dc:05:2c:5c:
88:0d:d7:ee:cf:3e:78:a2:35:c5:26:6b:52:ec:56:1f:62:fe:
0e:dd:90:51:5f:f2:46:f5:d8:ec:bd:20:49:ba:c5:b1:4a:ec:
e0:9c:ac:5c:a7:bb:0c:ac:bb:1f:88:ee:5d:c0:a2:24:6c:41:
b5:65:bc:e8:d6:c5:d8:5b:78:70:c3:a1:b2:b2:79:b1:8f:75:
e6:c5:e4:60:91:87:13:7d:d0:94:bc:47:18:a5:9d:96:26:e8:
07:9c:bc:33:7b:4b:48:40:87:40:af:59:f6:ab:fe:43:6e:ce:
a7:24:b1:6f:71:fa:43:17:5d:7a:53:3c:4b:62:fc:a4:7b:3a:
62:da:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:21 2026 by rpki-client