Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier: s5kujVgcT7+A5Dzh03J7B5bc3xg0Z8g+NZLxdJcQtlU=
Subject key identifier: 56:19:1A:39:8B:49:E0:EF:D5:28:03:65:26:8A:15:17:AF:F6:3E:E1
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 019D2928EDC2D75B390907EC4D1E0DF61058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:41 +0000
Manifest this update: Thu 26 Mar 2026 08:00:41 +0000
Manifest next update: Fri 27 Mar 2026 08:00:41 +0000
Files and hashes: 1: Zhqy7g8lJUOishUdKqXaWCvxzx4.roa (hash: UN8EUtXHVUb/yxu+HKPvBFBWS56nPQFqhJoUEVPPqMY=)
2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: hRqyVdBpDHtPg1p/jXg4JlXGrUpzgRVA4fq2y0FLIbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ed:c2:d7:5b:39:09:07:ec:4d:1e:0d:f6:10:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Mar 26 08:00:41 2026 GMT
Not After : Mar 27 08:00:41 2026 GMT
Subject: CN=56191a398b49e0efd5280365268a1517aff63ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:18:28:3c:99:9b:a4:f1:01:8f:1a:5d:9a:
e1:b7:10:c1:37:57:4b:54:db:07:9c:89:ad:89:41:
81:ea:af:05:e6:8c:3f:ac:e6:dd:16:6c:ec:73:b8:
e2:05:78:b7:dc:66:1f:04:d3:dd:e8:da:57:1e:40:
a2:fa:04:5e:c9:03:f8:47:a6:c4:ff:d2:49:30:0a:
22:5c:b3:58:32:b0:86:f1:59:b5:21:58:6f:19:b6:
e7:af:05:e3:66:37:3b:5e:67:5b:17:61:f7:1a:e4:
b8:d4:da:e9:50:57:2a:d9:f6:d6:2c:80:9c:80:32:
f6:98:34:5e:95:32:c7:1f:34:12:09:c8:d3:9b:bd:
ff:f3:57:2f:97:1f:fd:8c:ac:fc:9c:a4:bc:c7:6a:
bc:c1:46:b0:ff:3a:2f:ce:18:3c:25:bc:c6:b7:73:
0f:45:9a:54:e5:b4:d0:c8:eb:9e:c7:e0:2a:f8:7e:
aa:30:01:70:66:a0:8e:4f:ac:85:93:c7:69:77:c0:
e4:c9:da:19:ea:09:2f:31:fc:44:0f:e3:ac:3b:ae:
a1:04:7f:39:75:04:1e:e1:3e:c4:04:13:bd:b9:d5:
c5:35:f4:97:75:8c:b2:49:69:da:2b:f3:e5:83:d4:
be:df:ba:98:54:9c:43:a6:f2:e3:d4:24:9f:cf:f3:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:19:1A:39:8B:49:E0:EF:D5:28:03:65:26:8A:15:17:AF:F6:3E:E1
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:71:51:d4:bb:01:1b:e3:d2:89:e4:d8:ce:14:2a:bc:b4:
9f:90:c4:2f:5e:52:cb:6d:1f:8d:d9:d3:43:ca:d0:22:e2:35:
a5:b7:65:f8:51:de:7a:68:a6:47:a8:52:cd:7b:25:70:f2:9b:
1f:3a:ea:16:4d:52:b2:ae:08:16:11:91:6c:b8:5d:52:bf:53:
94:5a:d6:2c:02:21:dc:31:4e:d0:9d:a4:f7:b3:7b:e5:f9:fa:
59:36:d7:a4:9c:31:3c:41:2d:96:66:4a:2f:d6:81:47:7d:d7:
7d:8a:e8:81:1b:14:00:c4:8b:36:63:07:fd:70:be:65:39:e2:
3e:a9:06:e2:51:b2:f1:7f:ca:75:cd:bd:88:e1:a6:81:08:e5:
32:56:e5:bc:b1:03:6a:be:2f:64:9e:87:17:20:d0:1b:4d:23:
9c:e8:f9:d1:fb:4e:4e:22:71:ea:cf:55:ed:5c:50:4d:73:3e:
d5:65:b8:17:df:f3:a4:af:e0:3f:b9:55:98:7f:34:f0:40:db:
af:07:59:ed:5f:6a:8e:4c:53:78:2c:03:bb:29:79:4a:ca:07:
a2:3d:ef:38:2c:65:ff:57:a3:44:96:99:b4:9b:f7:a3:a5:d1:
70:15:50:a4:5c:d9:a5:64:32:ac:71:85:06:c0:86:3c:78:3c:
b2:74:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:36 2026 by rpki-client