Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: e8pZq0GBDMJYh5sRmzHyRbKzVmTroebOQkqNis0xP9A=
Subject key identifier: 48:64:B2:25:97:91:14:86:E3:34:53:6D:82:5E:C7:8E:AB:A3:C6:0D
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 019D28BB8E387DC438A04BD78B15AA11C0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 0555
Signing time: Thu 26 Mar 2026 06:01:13 +0000
Manifest this update: Thu 26 Mar 2026 06:01:13 +0000
Manifest next update: Fri 27 Mar 2026 06:01:13 +0000
Files and hashes: 1: rnLM_a8LAjwiWtEqOy7Mhls5gy0.roa (hash: jMUOUB5MPfYCum5RcFFu1kpq8F6mGqOp/XYY8NGS/KY=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: j9OfmNYjDpk8znq93RW5DoZ/DL61zpd5VvIUmpwCelU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8e:38:7d:c4:38:a0:4b:d7:8b:15:aa:11:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Mar 26 06:01:13 2026 GMT
Not After : Mar 27 06:01:13 2026 GMT
Subject: CN=4864b22597911486e334536d825ec78eaba3c60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:0e:7b:5e:d4:f8:54:03:af:13:4d:c9:c7:
94:16:9a:34:d4:10:e8:93:bf:5a:d0:a1:d1:96:4d:
9b:78:a9:73:b9:b0:09:c1:0f:3b:fd:58:f7:a8:4f:
82:bb:e0:d5:16:c1:6c:79:fb:d2:30:c1:4b:bb:5a:
03:93:61:ec:b6:d1:86:e3:4c:3a:24:f6:eb:7c:1e:
09:91:f9:ec:98:8c:6d:63:c8:4e:21:06:50:ee:27:
22:37:db:1e:8f:b1:dc:a1:f4:89:c1:af:8f:3f:93:
d3:70:59:37:ae:ff:b0:fd:14:ef:99:b0:dd:ee:e9:
23:89:43:44:09:1a:16:6f:56:da:4f:3d:cc:fc:d7:
83:6c:24:9c:ca:17:3c:df:63:f6:80:28:7e:ec:ee:
33:6a:5f:03:bb:a9:83:46:54:48:47:48:7c:b5:29:
01:b4:53:7f:38:b0:e6:6a:44:9a:73:ad:3b:b0:5b:
8b:28:9d:a6:f0:ce:19:87:d2:2a:85:6b:52:08:04:
2b:cc:d0:31:70:8c:d5:d8:96:84:03:be:d3:73:ce:
a9:87:e5:dc:d2:44:79:ca:46:ca:47:51:89:7d:e7:
04:0f:78:eb:25:bc:4c:5b:bc:7a:8f:16:e3:d3:c3:
30:4b:f0:6a:aa:e2:13:8e:6a:8d:aa:2a:9e:b0:82:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:64:B2:25:97:91:14:86:E3:34:53:6D:82:5E:C7:8E:AB:A3:C6:0D
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fc:3c:c3:f2:76:a3:ad:67:cd:2b:ac:c7:26:54:60:41:e7:
c1:96:a1:36:06:d8:72:13:b5:b0:dd:24:48:b1:06:01:46:c2:
51:43:9f:2d:c1:50:94:93:b0:a9:c7:9b:57:57:da:89:33:74:
ea:d5:23:8a:a5:46:98:ed:cd:3b:a9:cb:cb:f0:20:b1:20:bb:
43:75:ce:0c:f2:0b:db:50:f5:3a:b1:3c:ee:be:ec:46:b5:13:
46:08:22:97:9b:26:60:6b:35:8f:96:4a:67:e2:f2:a4:f6:76:
44:48:46:46:27:1a:ab:a6:2f:e1:88:36:26:9e:1a:d5:38:55:
cd:c0:8e:e4:1c:45:c0:61:f0:fb:d4:74:4d:b6:94:61:7c:6a:
87:37:ad:64:59:d8:bd:4d:3d:ea:13:81:d2:25:da:d1:5e:a4:
63:84:48:28:d0:29:1b:8c:01:c7:b4:fe:dc:12:9f:d0:7b:3c:
5a:b7:b9:62:84:b8:d7:51:e6:24:41:08:70:7a:5f:c5:ab:58:
5a:1d:b9:ba:37:2d:49:d3:3b:0c:f0:bc:1b:73:62:14:c7:32:
56:26:00:ce:ad:ba:82:f7:53:45:b8:5f:29:3b:30:12:8d:06:
b5:89:a8:75:c5:77:c3:4e:5f:08:e7:df:79:4a:e3:4c:47:ec:
33:5a:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:27 2026 by rpki-client