Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
File: vDH-mHQNcnxyab0GmhN11ZFftI4.mft (raw, json)
Hash identifier: a7DCA0JtNCPjGzm3TDIbdcafVhicqAPTCIo+Cdc7KpE=
Subject key identifier: 89:EA:D7:94:13:87:E5:93:61:AB:A6:19:2D:08:53:4E:5F:6B:E1:F1
Authority key identifier: BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
Certificate issuer: /CN=bc31fe98740d727c7269bd069a1375d5915fb48e
Certificate serial: 019D2C2A5B5CC65FC6C564C679508CECB429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
Manifest number: 62
Signing time: Thu 26 Mar 2026 22:01:06 +0000
Manifest this update: Thu 26 Mar 2026 22:01:06 +0000
Manifest next update: Fri 27 Mar 2026 22:01:06 +0000
Files and hashes: 1: eBYsHLpTe5rtTp536t9KrRqEDBw.roa (hash: AfoQ+njM0VDp7GNJ1maOO3kKpGSJZsYKVK6zpBPLxEc=)
2: vDH-mHQNcnxyab0GmhN11ZFftI4.crl (hash: trlLKpAkc5TVGgVTpfEbdGauC2ovdT8DiS2X5obdejI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:5b:5c:c6:5f:c6:c5:64:c6:79:50:8c:ec:b4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31fe98740d727c7269bd069a1375d5915fb48e
Validity
Not Before: Mar 26 22:01:06 2026 GMT
Not After : Mar 27 22:01:06 2026 GMT
Subject: CN=89ead7941387e59361aba6192d08534e5f6be1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:0a:74:06:db:5f:ba:02:51:d1:20:66:1a:
d6:9f:7a:14:2f:75:d4:db:fd:dd:f5:3b:08:10:64:
e7:8e:4e:77:ed:27:89:f4:7c:53:45:8c:9a:77:9c:
16:a3:8c:31:4a:44:da:ca:84:29:7b:28:62:e1:73:
35:5b:59:38:f0:d5:ee:46:fb:33:18:55:18:56:f7:
ae:0c:26:85:5b:a4:c9:fd:02:65:9b:c5:c6:8c:31:
b8:20:d9:02:fb:2f:5a:53:3b:74:c8:85:00:6e:0e:
27:1a:0f:91:ea:28:40:05:ed:0f:e7:61:23:61:fa:
58:38:ab:2d:d9:f2:af:5d:1a:a4:42:6a:59:dc:47:
ab:6f:47:69:cb:12:f0:32:11:0d:ff:a1:fb:04:27:
0c:bf:12:4b:47:53:79:e1:42:4c:c3:04:6d:4f:7a:
24:af:f3:3a:7c:5a:e2:94:da:d2:c9:e3:77:5b:62:
65:de:7e:0b:22:81:02:5a:49:04:db:ee:b4:1f:a4:
9a:cd:3e:91:76:0c:9e:c9:55:1d:29:ee:06:50:84:
8e:83:e7:59:d9:60:6b:78:f3:0a:3a:e8:8b:9e:55:
be:75:3d:02:2d:d4:11:20:8d:03:95:a4:cd:cc:f6:
6a:3c:cd:31:94:13:ee:cd:c0:57:c3:b0:88:bc:af:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:D7:94:13:87:E5:93:61:AB:A6:19:2D:08:53:4E:5F:6B:E1:F1
X509v3 Authority Key Identifier:
keyid:BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c1:b6:46:b5:33:96:f0:e0:13:f6:46:47:4f:8e:5c:78:e7:
89:0d:52:79:e1:de:6d:33:93:91:57:84:29:3f:dc:33:40:cc:
ab:1f:a6:ec:a5:e7:b9:25:56:e5:19:85:64:a2:55:77:16:bc:
b8:3a:5e:4b:92:4f:a1:8e:59:18:87:d1:57:88:50:b4:b9:3e:
f2:01:14:78:18:42:73:ad:90:a9:e4:c2:c3:17:e3:41:e7:fc:
3a:b5:58:dd:48:ee:c9:c7:ae:09:53:49:c3:ff:f8:8f:a5:f2:
ca:22:de:45:c9:91:59:a3:1b:d5:07:34:fa:6d:45:e6:96:a0:
40:74:ef:58:d6:f5:d4:1a:98:41:e3:c0:1f:45:a4:5d:53:a8:
df:41:60:89:b1:4c:5a:19:a4:11:6f:f6:a7:d6:fd:03:c2:bc:
08:b7:b7:87:be:95:c6:35:bd:6f:a9:0e:e1:46:06:2c:c4:f3:
f8:a5:c2:8c:ea:0a:e6:86:ce:cc:25:eb:bd:7f:9d:6d:1d:48:
57:4c:e5:a2:33:e1:6b:4a:26:8d:11:a9:f4:12:1f:ad:93:7e:
e8:60:b0:85:ac:c3:6e:68:71:a9:9f:cd:9b:62:05:68:3b:b1:
17:55:ed:06:59:af:80:68:2e:37:2d:51:bc:00:99:99:31:b9:
78:92:13:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:50:50 2026 by rpki-client