Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: X3E2QE/9acB0rznUt8fOC6v7dG6lXIXrwAWkjoUWtL0=
Subject key identifier: AA:E6:36:E5:00:7E:3E:4F:15:D6:D2:83:77:73:90:0A:1D:9B:38:31
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 019D2884B444F6C85E47D5454FF5F92A374B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: YHKYnGE1yB1uFptgZmpMfgXTqkmLezDo9ZEeYJetPI4=)
2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b4:44:f6:c8:5e:47:d5:45:4f:f5:f9:2a:37:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=aae636e5007e3e4f15d6d2837773900a1d9b3831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:60:f0:c8:77:5e:12:92:38:a6:02:84:23:e4:
b1:c1:4a:eb:70:6b:fd:25:77:da:68:f0:b6:92:97:
c7:ef:2d:02:28:04:f8:9c:9f:4e:9e:e4:1f:4c:bb:
c1:16:fd:9b:6a:ee:1f:fb:58:38:39:b4:3b:d3:29:
28:11:d8:3d:46:39:21:02:cb:0b:25:b8:07:ef:9a:
ff:b3:26:65:16:b4:ac:c1:9d:71:44:63:ab:ba:b6:
46:59:32:09:ad:46:8b:fd:3b:38:3c:f8:13:86:27:
82:77:3b:c7:b9:96:ff:02:30:ea:cc:36:78:48:fb:
7b:c2:af:9c:c6:21:14:79:05:7f:7d:84:52:f3:85:
f0:ad:d7:94:73:c7:0c:32:46:b5:cd:bc:3b:df:fd:
84:1c:9b:41:22:b7:78:0e:da:5f:13:1b:88:94:4b:
d7:64:b9:c1:b0:1f:51:f6:86:e3:46:96:22:00:44:
82:8d:d1:5c:f3:cf:93:23:c4:54:43:cd:4a:1a:16:
e2:24:8b:c3:59:16:05:98:40:41:fc:6f:59:5d:e6:
bc:55:3b:70:fc:ae:0c:4b:7d:3b:85:0e:db:53:9a:
6d:36:70:0f:ec:7d:96:f8:ed:ef:10:36:8c:c3:7d:
1d:92:f2:cc:3d:13:8f:d2:b2:43:9d:e7:7d:ba:99:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E6:36:E5:00:7E:3E:4F:15:D6:D2:83:77:73:90:0A:1D:9B:38:31
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:04:9c:1b:42:b4:f1:25:8f:cd:e8:e0:ca:fe:08:27:d7:48:
14:1e:f4:6c:dc:e8:73:a3:b7:cf:a2:5a:4b:e5:b2:7b:c8:25:
b3:76:c2:9c:a8:e2:31:23:1a:50:50:6b:4a:5c:a9:8b:27:45:
ad:e3:be:1b:dc:2d:bf:7c:bb:47:8f:00:65:b3:db:ee:66:66:
68:fc:19:61:68:0f:78:bd:6f:0b:79:fb:75:ff:32:ed:e0:a7:
a8:fe:f3:58:8f:75:7b:33:24:53:8f:08:3d:89:9c:fd:7a:12:
89:12:b8:40:7f:b1:fd:30:e7:1c:92:e6:db:24:82:7b:df:ff:
ea:e4:ab:cd:4c:02:26:c5:ef:d2:01:99:e2:a8:6f:77:c9:88:
8b:a6:45:7a:cb:e5:31:f1:6b:9e:cc:60:0d:bf:39:ec:fd:38:
6e:fe:16:ac:df:f9:91:4f:62:18:0f:d3:78:03:40:6b:1f:d0:
65:0f:40:65:1c:7b:9f:44:e3:31:63:0c:08:24:9f:94:9e:95:
5d:b7:ec:e4:9a:9b:f9:3f:48:59:89:21:02:83:f5:4d:ba:e0:
fe:0a:7c:46:a1:c2:3e:49:87:d8:b6:0e:c7:e6:8b:e2:da:35:
a4:0a:65:f3:d8:a2:dd:ac:51:35:3b:96:10:05:2b:c3:05:3c:
2c:62:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:48 2026 by rpki-client