Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier: oUk8SzOc3P7zfjDknnI8j9PJ3TtY2IkCB2jTjsvyAuA=
Subject key identifier: 8F:3B:BB:32:3E:1B:6D:5D:69:A2:47:0D:D1:1E:3E:A0:77:7B:2B:24
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 019D258437DF67DD79E7E57259521ADDE063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:55 +0000
Manifest this update: Wed 25 Mar 2026 15:01:55 +0000
Manifest next update: Thu 26 Mar 2026 15:01:55 +0000
Files and hashes: 1: MJsBtMXDsOv4TTZ2efs5vOnxahY.roa (hash: jJGmnHuAyaWahhHhka2WAv2IAmrJwIOdndtEnTBheHs=)
2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: w5Dxdujy/lJ5fzzgrUMCBg+W7q3gVNUw20dJLXF8YGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:37:df:67:dd:79:e7:e5:72:59:52:1a:dd:e0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Mar 25 15:01:55 2026 GMT
Not After : Mar 26 15:01:55 2026 GMT
Subject: CN=8f3bbb323e1b6d5d69a2470dd11e3ea0777b2b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:e8:cb:c1:fc:d1:22:30:c5:c9:01:96:bf:
7d:e8:d7:5c:53:a0:60:74:0b:01:38:dc:eb:91:72:
fa:9d:89:8d:18:19:9a:c3:58:46:f3:7d:96:65:e8:
39:52:82:1f:3d:d2:23:77:a7:4a:66:8c:81:71:5a:
fd:63:3a:ae:73:00:86:34:2c:b7:de:46:04:f8:64:
17:9e:c6:75:87:97:03:58:01:92:8a:03:b2:8b:6d:
80:1c:0f:32:e0:ba:8b:0d:fb:29:fb:2e:74:bc:30:
ad:c0:14:24:06:ba:12:4a:f1:d6:47:8d:b1:7a:4d:
12:83:f6:eb:3c:dc:4b:cd:84:c1:8c:6e:de:22:1b:
3e:44:13:05:79:06:8a:65:56:2c:fd:19:50:fe:92:
5a:0a:8e:a0:24:0f:6c:21:e4:d9:10:fa:3d:26:15:
59:ca:f1:23:2f:65:03:27:21:2f:cb:ef:06:fb:a6:
8c:fb:ee:60:e9:5a:29:ba:7a:38:d6:c7:6d:a3:39:
26:cb:c9:31:b1:c9:14:34:ac:2c:71:57:6e:c4:f7:
2c:99:e3:8c:de:50:86:fd:30:49:75:2f:0f:5e:0b:
a3:0f:fd:71:8f:9f:5a:3f:f8:1f:d2:7a:60:e6:be:
f3:62:ad:9f:24:be:f0:27:cf:5f:a3:0a:c0:f7:ec:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3B:BB:32:3E:1B:6D:5D:69:A2:47:0D:D1:1E:3E:A0:77:7B:2B:24
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:14:ab:4f:dc:ca:e1:bc:a2:a7:28:43:e0:6a:09:db:03:01:
cd:11:9e:3e:4d:df:f4:19:52:76:c8:ed:31:a2:fe:54:5f:d2:
6a:09:74:4e:d4:85:80:a5:af:f2:5a:e3:ce:16:94:aa:d0:5e:
03:6a:ef:44:0d:43:f2:09:63:27:30:12:76:9e:56:fc:3a:39:
74:f1:3e:88:b8:56:52:51:9f:00:1b:fc:43:e5:4b:1a:5a:0a:
5a:a3:c1:2e:bb:58:ef:8a:a6:77:f4:63:a8:1b:3f:91:ff:ed:
b6:2a:e1:5a:97:ab:06:24:e3:a3:e4:80:ea:ae:15:6a:08:48:
19:75:76:71:bf:e4:9d:4a:a5:bb:10:ae:51:03:e5:88:00:14:
ba:e5:09:f4:37:12:5d:3f:9a:85:e7:f9:dd:5b:bf:b3:5b:89:
b1:1c:c6:88:f3:fc:fc:52:9c:77:67:7e:f3:a4:4b:46:bc:31:
e0:13:a7:e8:f7:38:59:e8:a1:a0:ce:90:d8:77:4a:33:1b:26:
7b:2f:72:62:fc:94:0a:10:57:35:2b:3b:aa:7f:db:52:6a:38:
d3:f4:74:33:0a:6b:3c:b6:dd:68:40:b7:e9:cd:3c:48:08:ec:
2d:99:b3:a1:98:3d:f4:02:9a:e6:19:5d:59:f0:53:7f:e2:1a:
b8:14:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:06 2026 by rpki-client