Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: rVUIIGixythazruP3cClfcJQT/WwUWWARiO3rNQ1Xhs=
Subject key identifier: 9B:56:D2:67:14:F9:35:90:B6:E5:A9:C4:7D:00:0A:01:52:00:CF:5E
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 019D27DFCF84A82577D46A6FF1FDA122A896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 176F
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: SDu33Jeh8c7arCHbWi8vSsrtoRg.roa (hash: mOOpOXQQCP8piIIEBcEgAzeCzN5EN9HiWhAzdTUbVms=)
2: kOyZYgSX80CsRnrKhHMAejR73Kw.roa (hash: /AadyvBuTOLqb+dP0xaY/xt4sTbRJkvJBZZOyXanfbw=)
3: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: 5w4R1MtUMUjkyzBkxYM9HF+6XMYGzraq2/tLI3bNF5s=)
4: wH_YLSDY4b5XgVUcKfrsKH4Px0s.roa (hash: KLtMxNZ5FPCN1sTLToHlbj9Dq8r/htuRuv+o2DrmCdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cf:84:a8:25:77:d4:6a:6f:f1:fd:a1:22:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=9b56d26714f93590b6e5a9c47d000a015200cf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:cc:e0:ff:bf:12:6d:01:0b:9a:93:07:84:
9b:f8:23:a1:2b:e7:ea:64:a2:ff:51:69:36:ab:cc:
48:83:37:85:dd:e6:39:36:46:ea:94:e3:91:6f:ec:
13:44:fc:d1:e8:04:8c:30:ea:b5:bb:b4:65:bf:7c:
95:e2:0c:87:fe:c5:b6:35:2e:da:f2:e1:3e:33:64:
b8:68:5c:db:19:d0:33:6f:c1:e6:84:95:8a:68:a4:
01:67:66:df:b1:fc:ce:76:59:b7:43:83:1b:88:9f:
c7:c8:2b:91:13:f1:e1:db:d6:72:e4:e3:52:72:c8:
f7:3e:a1:56:67:53:8c:09:b6:6f:7c:db:ce:ef:b2:
c9:98:65:e8:2f:2b:98:de:38:dc:8f:ee:d1:0f:10:
e7:9d:89:52:e4:09:3c:8e:8c:46:db:25:be:ee:ec:
6d:16:66:ee:79:ce:ef:64:ad:66:ab:11:2b:3b:7e:
00:6f:ac:8b:c2:5a:a6:e3:b5:a6:80:22:63:9f:ca:
7d:fe:42:8b:ce:3c:9a:0b:02:96:95:04:f5:38:77:
60:65:7e:a3:0f:f5:36:b0:72:76:07:12:36:6e:69:
c7:3b:fc:42:c3:5c:7e:42:6b:b1:d8:e4:f6:74:f0:
e5:9c:8a:a9:d4:15:e0:e8:68:ed:c2:bf:f7:a7:7b:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:56:D2:67:14:F9:35:90:B6:E5:A9:C4:7D:00:0A:01:52:00:CF:5E
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:99:fb:1f:2d:a3:35:85:e3:34:a4:46:31:ba:58:78:17:
22:20:91:07:03:db:7a:3c:b5:b1:2a:ca:06:16:6b:3d:c7:3b:
10:70:75:13:9f:63:eb:c6:de:05:f5:3f:13:56:b0:02:08:1e:
06:b1:0d:a7:b6:82:dc:af:30:e8:3e:3a:f0:c8:63:e6:9a:ca:
d6:10:75:22:ac:c4:cc:e0:29:10:83:4b:52:22:86:26:2f:0d:
75:6e:e5:e0:5b:b4:64:43:43:c9:f3:69:95:c0:3c:6b:5e:ca:
c8:4a:45:8d:27:91:ba:19:04:c5:d5:c5:f3:1c:5d:1f:18:d1:
03:cb:5d:c7:e2:aa:78:b3:8d:96:6e:0d:39:2f:1e:86:ec:94:
8e:01:0d:b9:de:69:d5:cd:c8:5a:79:96:2b:76:11:7a:39:aa:
a3:c7:e4:43:d3:ae:2f:b0:54:3b:a8:cd:ef:8d:b1:44:b5:78:
de:45:5c:a8:ef:ce:e9:50:e6:c0:fc:16:6f:d2:5a:45:5e:f5:
10:10:fb:31:0f:85:9a:3f:dc:64:4f:81:4a:c2:bb:80:30:1e:
7f:45:e7:3f:f6:cb:ee:bd:15:9d:c0:bc:51:a9:c9:1b:77:54:
a4:03:3d:51:0c:f2:95:7e:01:31:5c:62:ee:7f:be:b4:10:c0:
b8:5a:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:35 2026 by rpki-client