Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
File: vflgsO5rxdD2oMZKafL4Yln9zVg.mft (raw, json)
Hash identifier: 4to6KArrJ1Ks1AoPlGS1Efy/xIgK89G4OB+Tcrjvdjs=
Subject key identifier: 3E:18:95:65:AA:97:71:E9:AC:4B:B5:A9:D5:92:80:28:CA:5F:B9:77
Authority key identifier: BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
Certificate issuer: /CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Certificate serial: 019D2928E3D967648FC518BBCC5CA018E965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
Manifest number: 1760
Signing time: Thu 26 Mar 2026 08:00:38 +0000
Manifest this update: Thu 26 Mar 2026 08:00:38 +0000
Manifest next update: Fri 27 Mar 2026 08:00:38 +0000
Files and hashes: 1: FB6XhAljb_Cq4OzW1NxhRMI8uX8.roa (hash: oRoqHHkjJ5NsUTcwkAs7nSs4mia9Uv979j7dFZIGR9Y=)
2: vflgsO5rxdD2oMZKafL4Yln9zVg.crl (hash: Loc0paSmzZ70k4smHt5wkTzd3QaoB3o+OdQNI4ZJ/cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:e3:d9:67:64:8f:c5:18:bb:cc:5c:a0:18:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Validity
Not Before: Mar 26 08:00:38 2026 GMT
Not After : Mar 27 08:00:38 2026 GMT
Subject: CN=3e189565aa9771e9ac4bb5a9d5928028ca5fb977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:8a:32:3b:26:b8:4e:1b:53:34:f2:34:fa:
80:01:fd:6c:87:28:bf:86:a3:43:c2:f0:cb:fc:48:
fc:75:f5:bf:5d:22:c4:5e:f1:7c:8c:37:1a:be:1f:
75:f7:78:a1:34:62:7b:12:99:4f:cc:6a:c9:06:51:
25:3c:6c:21:11:04:e2:69:1e:2e:d7:83:95:6c:d6:
17:fd:94:c8:ed:a6:53:d2:72:06:02:e1:c7:ec:a0:
e0:49:ca:c3:51:09:9f:04:32:cd:06:25:04:dc:48:
44:4b:58:0d:02:07:47:52:16:fb:2d:8b:92:65:b2:
29:cd:b0:a7:fe:25:04:55:04:f7:a9:60:6d:16:84:
32:a1:49:df:5d:b3:ac:3c:3d:6e:27:1a:a2:29:e1:
05:27:cb:15:fe:47:ed:5e:6e:5d:18:e6:c7:b4:d0:
6c:f2:40:a1:c5:e1:53:85:98:f5:26:eb:a0:f2:db:
ac:54:00:c1:2e:d2:05:20:d1:04:20:b4:be:8f:72:
97:88:75:2b:4b:d1:5b:d0:cb:4a:71:3c:14:ee:c7:
06:ae:4d:e3:35:41:a9:e6:37:94:61:b7:ac:e8:82:
2c:88:94:b9:91:7b:e3:f9:1a:11:c6:5d:5f:a0:cc:
51:29:ee:fa:27:7f:82:ba:7b:7c:55:38:3c:80:92:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:18:95:65:AA:97:71:E9:AC:4B:B5:A9:D5:92:80:28:CA:5F:B9:77
X509v3 Authority Key Identifier:
keyid:BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8e:f1:59:95:29:9e:29:3b:8a:5b:6f:74:11:d3:6e:46:b3:
13:ee:d0:e3:d6:fc:fd:4a:66:e9:7a:36:ce:4b:0f:d5:ad:f4:
50:35:84:63:af:6f:11:ea:fc:90:42:1a:df:e6:f9:0f:32:b9:
6a:c1:e6:9f:53:46:be:5a:d5:55:ae:bc:8f:4c:77:8c:31:dc:
92:ea:09:1d:db:41:21:ce:0f:1e:d0:5b:ac:76:e4:ae:a3:02:
36:ae:2a:8d:97:f2:10:78:d0:cf:79:43:7d:a0:1e:3d:cd:51:
cc:03:cb:c7:e2:25:95:b7:ad:65:3a:2e:15:5e:54:1a:f4:7a:
f4:81:ef:e5:6b:4c:f5:ac:79:38:77:25:69:42:74:8c:ce:29:
d6:0c:a9:5c:0b:ad:00:a2:a6:5b:7a:2c:02:0d:00:98:d0:6c:
54:25:a9:22:ec:73:21:dd:c9:64:d6:e5:64:ef:e0:8f:50:aa:
91:83:7f:f2:98:a3:54:67:6a:c4:c2:6d:20:af:1a:36:79:2c:
ae:48:b3:de:08:28:69:84:c0:ff:7d:89:cb:44:17:f8:13:85:
6b:80:96:67:4a:7b:ac:2a:ee:b3:eb:b3:e2:0e:57:7b:fd:02:
0c:b8:ac:9a:83:f8:e4:0a:76:0f:2b:5c:22:fb:2e:de:dd:39:
13:4a:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:24 2026 by rpki-client