Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: /9mFmY9/1UKfsQYpAX9whZ8jW13k1ERta9/fsSqBkKs=
Subject key identifier: 7F:7B:28:57:F9:DB:57:05:96:29:7B:86:DF:02:A9:70:35:B3:EE:D9
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 019D2B4ED77FE709BA371D4EE2341EC7E274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 0CC2
Signing time: Thu 26 Mar 2026 18:01:20 +0000
Manifest this update: Thu 26 Mar 2026 18:01:20 +0000
Manifest next update: Fri 27 Mar 2026 18:01:20 +0000
Files and hashes: 1: bmMSflL-eMQuMBI3gu6949ZANPM.roa (hash: IDrbZuLc/19ByTc6qymrXkkUxTTGRdkMTB5oi5VuL5U=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: J/DWessPCt7ovf7ryvBnjWMxiYTr/AcZh/lj9Lgi+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:d7:7f:e7:09:ba:37:1d:4e:e2:34:1e:c7:e2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Mar 26 18:01:20 2026 GMT
Not After : Mar 27 18:01:20 2026 GMT
Subject: CN=7f7b2857f9db570596297b86df02a97035b3eed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:72:42:9c:dc:d4:ae:41:08:a4:da:72:06:
62:7c:cf:27:93:74:6d:51:ec:7f:03:b8:e7:0c:97:
c7:fe:80:6b:46:fb:e7:ff:de:e7:93:d0:de:58:83:
71:46:e5:e9:a3:3d:21:25:27:76:dc:6d:c4:82:c4:
12:d2:31:04:86:ab:6b:6a:28:b2:eb:28:b2:ae:ac:
55:59:29:6c:a7:84:78:a6:5d:da:fc:fe:92:2b:5e:
a1:1e:68:dc:43:4a:b6:1e:e9:7d:97:d7:6a:77:55:
90:15:09:d8:05:b9:68:56:38:3e:55:04:f5:d4:ba:
5b:5c:3c:18:a2:71:b0:fb:7b:86:ee:e5:b9:15:24:
3b:8b:e9:4d:ed:bf:db:88:27:f3:a8:58:8e:d7:88:
06:c3:d7:ab:f0:f0:d6:9e:76:ab:84:3b:4c:66:69:
c9:5c:e5:71:fd:e1:07:8a:30:5d:b6:6d:fb:22:ad:
1b:5f:e2:49:a1:70:b9:5f:42:0b:34:4a:32:88:a1:
e1:ff:9e:f4:7f:8a:89:1b:2b:7d:2f:90:66:85:c5:
bc:71:72:35:3a:2f:be:d8:ea:4e:ca:3e:07:0b:93:
de:ef:95:fa:1f:c7:01:39:80:e1:ff:07:0d:f1:01:
0c:5d:2e:2c:08:1b:57:a0:00:d8:ca:a8:07:47:6d:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:28:57:F9:DB:57:05:96:29:7B:86:DF:02:A9:70:35:B3:EE:D9
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:50:f9:86:e0:0c:52:45:ae:a5:6f:9c:12:1c:0e:47:48:0d:
9a:56:ff:0c:f6:ac:86:3c:d5:54:f0:7d:a2:57:d9:ee:1e:5f:
bd:27:72:91:52:1c:83:f8:11:8f:b8:cd:c6:6a:67:7a:57:0a:
18:c2:d5:ad:0f:25:f1:36:d1:c6:a0:ea:3d:db:cd:bc:6e:b2:
8d:40:2e:f8:1f:ed:41:1f:3d:1a:d5:94:5c:29:5b:79:5a:b6:
17:f7:34:8b:94:08:ca:4c:58:31:38:a6:39:da:ea:34:a4:a4:
ec:41:34:80:4e:c6:7d:c7:08:22:5b:82:ec:ba:08:f5:a4:90:
43:6a:f9:03:53:57:c7:ad:e5:dd:c1:aa:3e:7e:c3:b1:63:08:
4f:01:b3:55:30:de:77:80:86:07:75:52:2b:36:e8:ff:71:69:
1f:a9:d2:80:46:b7:01:f3:99:88:6a:10:40:e6:7f:cb:77:19:
e2:2e:90:9b:f0:bd:cc:98:de:a8:ae:cd:21:f1:9a:d9:9a:0f:
cb:9d:80:b9:cc:07:0e:fa:95:94:55:cb:35:dc:83:9f:6b:61:
8d:67:ae:4e:39:9e:27:a8:2a:ba:43:36:ce:f5:7b:09:0c:f2:
09:1e:d3:1a:d8:7a:b2:16:d5:fb:95:37:92:48:b5:bb:2c:ac:
02:4d:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:44:12 2026 by rpki-client