Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: c4lMBP6f4CyGuCz/B/T4r2K24XeyZO6RWQKbctp6n4s=
Subject key identifier: 21:DA:35:24:BF:6B:57:C4:6D:31:DD:5E:47:8E:56:F9:51:33:10:F5
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 019D2B85AA1C2BD34EB0EFB7BF409FFCF4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 19:01:13 +0000
Manifest this update: Thu 26 Mar 2026 19:01:13 +0000
Manifest next update: Fri 27 Mar 2026 19:01:13 +0000
Files and hashes: 1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: b4ekmgG2KKPf3JNe4bOVxwtjFi2Lox4rOhoEpLKyRMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:aa:1c:2b:d3:4e:b0:ef:b7:bf:40:9f:fc:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Mar 26 19:01:13 2026 GMT
Not After : Mar 27 19:01:13 2026 GMT
Subject: CN=21da3524bf6b57c46d31dd5e478e56f9513310f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:e4:02:40:b0:f3:88:d7:7e:83:4c:a1:79:
3e:40:22:11:37:93:21:46:6b:57:7e:b2:7c:38:29:
2b:53:d9:77:5c:b1:a6:82:20:3c:12:79:bc:11:0d:
5a:84:02:10:9b:25:a4:96:81:0e:44:d7:a2:13:f0:
15:0b:94:34:51:dc:76:0c:4e:5b:35:49:55:db:0d:
84:1b:c4:33:79:b6:32:ab:04:a3:fd:76:b5:98:2c:
5c:1c:41:9c:2d:7b:ac:9b:93:5d:dd:0b:e8:d9:3d:
cf:0b:f6:6a:5f:c9:ab:b6:46:74:fd:72:3a:52:0f:
4c:a5:b9:98:9f:d7:db:19:ca:e3:f4:66:b1:5d:2b:
02:05:82:3b:52:4f:4e:0d:9c:bc:03:9b:7e:19:4b:
87:1e:6d:9f:f0:3f:c9:dd:65:55:6f:ee:fc:fe:b0:
ab:03:96:be:80:cb:07:38:63:29:46:77:06:96:f0:
18:d3:07:b4:aa:e1:26:1b:34:36:52:dc:b1:6f:bb:
ac:c3:ff:4e:be:07:9f:c3:99:26:c4:22:91:e8:ec:
c9:23:db:86:d0:94:cf:50:50:df:d5:68:80:0e:cb:
f2:6e:f8:ba:ba:75:c1:28:3d:c9:ce:a6:b1:0d:fe:
1d:2d:cc:05:60:dc:5b:a8:f0:8f:d6:14:2e:24:ae:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DA:35:24:BF:6B:57:C4:6D:31:DD:5E:47:8E:56:F9:51:33:10:F5
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:ec:45:3f:d0:92:dc:20:df:8d:68:9d:20:5b:55:9f:23:
1b:ab:45:6f:92:b6:f4:03:07:3d:e5:6a:15:b4:75:f7:64:22:
0e:d2:5e:a7:44:7a:16:d6:4e:45:a0:ce:41:d1:c3:7c:8a:01:
b1:b8:1c:cd:66:b2:24:eb:c6:e7:e3:0e:c6:81:88:e2:8d:3d:
06:7b:3e:8d:de:bd:c7:3e:ce:4a:c7:c0:9c:76:a7:af:6e:f7:
a1:89:ad:d9:dd:b9:74:fa:da:54:a2:bb:a5:8b:de:40:a7:2b:
aa:0d:06:fa:5c:79:1e:8e:fd:42:a4:66:cf:51:71:df:5d:f3:
ff:e6:9f:24:c5:c2:8c:ff:8a:26:56:50:88:10:07:3a:90:80:
fd:71:e7:9d:cb:db:d6:8f:4b:32:3a:59:3b:86:1c:7d:f4:97:
1c:6e:b7:10:fe:3f:d0:e5:24:84:f6:32:ec:49:cf:0f:cb:23:
77:4e:58:13:57:f1:25:f2:e7:38:42:08:c8:3c:e5:89:b3:a1:
77:69:ba:2c:10:dc:5a:22:1b:26:83:dc:eb:6f:45:aa:27:20:
92:38:5f:2e:fd:64:b0:46:85:3e:24:24:ed:50:39:19:29:3c:
fd:b3:cd:fd:1d:f5:cb:d4:3b:ab:c8:fe:38:cf:dd:7e:ed:9d:
a6:c1:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:23 2026 by rpki-client