Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
File: vGyMBtLTwoAfBUWPyDQT2wpd360.mft (raw, json)
Hash identifier: gklB9Eycg/V0J1G4NWmgk59N0JyEfivLSrHenAAN2so=
Subject key identifier: 3F:F2:A4:B3:5D:FC:F6:9D:08:75:49:1B:BA:CD:F7:FF:D1:8D:4E:99
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 019D2A3BFC67556564FA9A8162EF3D5A7C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
Manifest number: 1843
Signing time: Thu 26 Mar 2026 13:01:07 +0000
Manifest this update: Thu 26 Mar 2026 13:01:07 +0000
Manifest next update: Fri 27 Mar 2026 13:01:07 +0000
Files and hashes: 1: 9GEV1KGOs6UyReJcZnE4MA3Z57w.roa (hash: c487nWK9wzpjn+Fsi5CHvUaS6Xs4YGa9xngjcByZiFY=)
2: PzcN4F3pkDnlYvW4HH79zj0Cmtc.roa (hash: LEAdYC23MLKW0M/JM3SBHOt8Jw/nCj9KXkKRrcVxDzY=)
3: vGyMBtLTwoAfBUWPyDQT2wpd360.crl (hash: al7xSGDy8nbflxQa8myf07Uu6dqq940CpCpzBZMIClU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:fc:67:55:65:64:fa:9a:81:62:ef:3d:5a:7c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Mar 26 13:01:07 2026 GMT
Not After : Mar 27 13:01:07 2026 GMT
Subject: CN=3ff2a4b35dfcf69d0875491bbacdf7ffd18d4e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:f4:8a:ba:7e:fd:09:d1:2a:23:56:45:c6:
b5:4f:14:a8:23:90:9a:b8:04:85:4e:32:d0:e6:7a:
f8:07:43:09:d9:99:28:1f:9e:c6:59:00:11:34:03:
c4:45:36:5f:54:56:a0:b7:d9:bf:d1:13:a7:1d:80:
22:c8:4a:88:2c:1e:8f:78:8a:e9:4d:33:c4:bf:77:
8f:f6:7a:9f:07:75:d1:66:eb:31:c6:ba:30:5e:e6:
8b:b6:39:4e:2a:90:62:c8:76:d4:b7:ae:bc:ec:b5:
fa:f6:1d:94:1b:76:20:0b:6f:b7:64:b4:42:0f:fc:
4d:ea:a8:de:ec:a7:b5:d0:a3:20:41:16:a2:27:f4:
b5:87:e3:53:c1:4e:4f:e8:d9:8a:53:b7:1d:a8:d6:
5f:91:79:00:92:05:1b:66:da:6a:29:98:9a:2c:e3:
5b:c3:1f:d6:64:d0:b7:94:1b:c9:88:e6:31:d2:17:
82:6d:ff:08:e8:43:59:0a:e7:cb:d2:da:75:7d:69:
bf:98:60:2e:03:eb:77:4f:72:d4:66:f0:ef:58:0f:
38:28:b3:b2:9f:27:b7:23:17:9e:9d:21:93:e3:76:
82:d7:e0:fb:af:fa:92:dc:1a:64:66:ee:90:84:94:
df:27:9b:6b:47:9f:92:df:23:73:66:95:d7:79:2f:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:A4:B3:5D:FC:F6:9D:08:75:49:1B:BA:CD:F7:FF:D1:8D:4E:99
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:06:94:da:e1:f5:c9:3b:e5:e2:57:04:e0:20:01:92:3f:47:
c9:8a:d3:f3:05:c8:dd:a7:cb:3e:ad:ad:be:f4:8f:5e:31:55:
6a:ea:db:61:b1:de:24:ca:02:8c:2d:5b:a1:a8:13:69:3f:9e:
09:fe:5f:ef:2f:bc:c5:59:59:58:28:64:ae:5a:ea:93:20:53:
8c:22:e5:09:db:98:a1:57:7b:96:dd:9f:f5:f0:5e:2f:63:88:
24:fc:01:2a:3f:ef:08:92:0a:67:0b:a3:54:b2:33:af:d3:39:
d0:4e:47:ab:8a:88:d6:7c:de:d3:cf:c4:12:b1:0e:74:5f:85:
86:94:e5:2f:ee:67:c8:fa:86:1f:5c:36:32:8d:6f:00:31:e6:
3b:ee:00:e5:52:ce:75:80:64:f2:fd:72:8d:aa:f7:d4:4b:65:
69:3e:71:69:ee:b0:e4:9c:50:87:c0:e0:61:9b:18:86:91:2b:
ab:e1:be:f2:9d:bb:3e:d7:6e:f5:72:c7:76:60:fb:16:8a:58:
b2:0f:7b:0d:f7:f2:e3:69:7d:a1:dc:10:0f:9c:d4:9a:a8:97:
20:12:a8:bc:d3:ee:e0:25:d9:f0:07:c0:f7:e4:20:08:76:ca:
02:80:86:b3:f7:47:65:db:c1:26:bb:26:77:0b:a7:4e:8c:f6:
a6:1b:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:01:08 2026 by rpki-client