Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: CaZySZwCH7yXkKdyiTwk30LaMacJSySzZQOr94k1ifM=
Subject key identifier: DD:26:01:5C:B2:55:C9:32:A9:01:EC:DC:94:FC:35:16:0B:87:A2:89
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 019D2A049FB47A59625386BE95350F734B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 1088
Signing time: Thu 26 Mar 2026 12:00:39 +0000
Manifest this update: Thu 26 Mar 2026 12:00:39 +0000
Manifest next update: Fri 27 Mar 2026 12:00:39 +0000
Files and hashes: 1: R1-sQ-aIXEFJT-93CGHyULWdzGI.roa (hash: wTAnQ3p13dmuTH6bJb6Zb4Pwzwq21wLmg4ze6Go9HJA=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: jJC4V7s/RqJDbF6A3bHaqQoQyE81FLsZKvx31Lome3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:9f:b4:7a:59:62:53:86:be:95:35:0f:73:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Mar 26 12:00:39 2026 GMT
Not After : Mar 27 12:00:39 2026 GMT
Subject: CN=dd26015cb255c932a901ecdc94fc35160b87a289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:04:29:69:bc:37:c7:fa:60:43:2f:d2:6a:
da:07:59:6e:01:ed:83:cc:08:03:6c:27:ea:1c:29:
65:4b:62:f6:8d:ff:ca:b7:14:5b:91:1f:11:46:ad:
23:56:f0:5e:de:26:58:a9:64:36:fb:82:c8:b3:23:
bf:9d:94:71:61:96:09:a5:66:7c:54:55:93:a3:43:
3f:ed:74:4b:3d:fa:d3:ac:c2:7f:bb:c4:aa:d0:98:
40:3a:8f:28:29:93:37:a9:ec:17:2e:d1:1e:49:59:
5a:bf:f9:2d:09:c3:01:f2:0e:87:ee:b6:9e:e4:90:
43:86:a9:c4:1e:05:fa:65:d7:c8:6d:32:00:a2:83:
a7:1d:52:57:70:62:f1:c3:39:99:07:dd:3a:a9:e2:
74:e2:92:68:3a:2e:87:b8:2e:50:d5:e3:be:19:b4:
f4:30:aa:fb:45:36:80:40:dc:9b:da:12:a8:e7:cf:
6c:fa:b5:8b:bd:63:88:50:97:6a:f3:6e:37:7d:16:
9f:f7:7b:e3:18:ed:d5:08:58:7d:b0:f4:d1:fd:24:
c2:1a:d5:3a:fb:45:f9:75:d9:6e:9d:42:79:c1:65:
bd:a3:3e:61:2f:db:99:1b:3d:2f:b8:61:13:5d:47:
b4:26:2d:ed:b6:4a:8b:6e:c6:4a:4d:c6:21:6b:b5:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:01:5C:B2:55:C9:32:A9:01:EC:DC:94:FC:35:16:0B:87:A2:89
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:04:3f:06:07:46:bb:ea:d1:3d:08:68:ea:fb:3d:17:b3:82:
f8:24:b8:c6:58:ce:1b:bd:5f:7b:06:99:85:76:0d:6b:8f:88:
f7:67:14:ca:2f:e7:ae:f7:86:3b:ad:2f:bb:10:3a:35:92:f6:
81:15:7e:1d:9a:4a:fb:5c:e6:02:53:27:b2:da:25:d9:72:6a:
ad:ce:29:60:a5:9d:69:b8:87:6c:4e:6f:57:00:cd:26:65:fe:
f9:8c:83:d3:e6:ff:71:86:e0:e1:ed:a9:75:89:10:03:3f:2e:
73:25:ae:c7:d1:7c:5f:ac:9a:ca:85:d9:1d:fc:24:8e:ec:8c:
ed:e5:56:b3:70:5b:f9:d2:f0:3a:39:30:04:a7:b9:b9:b3:3b:
13:be:38:b4:66:a2:3b:57:a2:46:d0:82:23:0e:e5:b0:63:28:
52:1b:05:2b:84:1e:36:94:19:24:ab:6b:39:00:1f:1f:9d:15:
fe:7c:aa:2b:5c:61:76:d6:32:7b:84:29:b7:a8:24:9f:7f:4d:
29:c7:d8:28:95:b9:30:50:28:ab:2d:e5:9a:7f:b7:3f:9b:dd:
8d:fc:a1:e1:26:95:ac:a5:59:89:6b:61:b5:44:d2:db:ad:5d:
56:dc:c2:f5:c0:2e:91:6f:65:33:a2:05:a1:14:ae:15:6a:9e:
42:d2:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:04 2026 by rpki-client