Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
File: vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json)
Hash identifier: i3kOo4d5xzqqy3SQk/o+nnxkstJDon7WibzzV9i1cPY=
Subject key identifier: 0D:60:EB:4E:A4:20:5C:76:E8:EC:1E:CC:E3:7A:AD:94:9A:23:63:64
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial: 019D25F1501288CEEBFFBDD0ED85D0631935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
Manifest number: 0769
Signing time: Wed 25 Mar 2026 17:01:04 +0000
Manifest this update: Wed 25 Mar 2026 17:01:04 +0000
Manifest next update: Thu 26 Mar 2026 17:01:04 +0000
Files and hashes: 1: 5trZT8H8b8qEyleVSfGYnOWywrY.roa (hash: eOu11Ek0FyJBzZ2HRO2uveVNcG5F2I/J6cQ5U17P66g=)
2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: FkNxzTBc1kdgcg4P9yvkhlE8iLpvsU4JkpDKcd7WuhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:50:12:88:ce:eb:ff:bd:d0:ed:85:d0:63:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Validity
Not Before: Mar 25 17:01:04 2026 GMT
Not After : Mar 26 17:01:04 2026 GMT
Subject: CN=0d60eb4ea4205c76e8ec1ecce37aad949a236364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:9f:b7:81:de:b0:39:6c:13:57:67:5b:25:
1c:86:fb:74:85:9f:af:5d:f4:b5:14:00:6d:19:69:
2f:21:a0:1f:12:f7:65:94:a8:aa:81:92:81:c7:5f:
3e:99:07:1e:0d:89:e9:ad:f8:59:3e:0a:36:bf:68:
93:a1:63:3b:75:0c:dd:70:47:a3:46:fb:61:8b:6d:
8a:43:90:2a:10:f3:a5:0a:44:bc:2a:b6:0e:64:4b:
97:02:e2:07:c7:7f:00:51:88:b3:81:91:4b:ec:bd:
f3:d5:ab:54:e0:f0:9e:0c:83:7f:e9:3f:80:d2:1a:
e7:20:85:cb:06:b0:48:bf:8a:d7:42:a6:48:a2:12:
c6:c1:88:4c:19:ed:36:c8:3c:fd:ff:2b:1d:9f:d1:
15:63:72:94:02:fd:09:f5:2b:9e:f5:2e:a4:b0:3d:
96:32:c7:c6:55:ed:f1:54:a0:e9:bc:d1:65:08:38:
cd:ce:19:3b:96:2c:10:de:49:70:6b:58:3c:ec:56:
37:18:f1:18:f5:08:54:b8:67:e3:6f:a9:d4:b4:3f:
c5:2a:99:d0:20:f0:4f:3d:1a:97:3e:b0:1e:86:fa:
63:1b:2d:05:e1:08:f0:13:ef:ca:5a:29:d2:53:25:
50:85:8a:0f:ec:b0:02:c4:2d:85:1f:47:c0:66:4f:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:EB:4E:A4:20:5C:76:E8:EC:1E:CC:E3:7A:AD:94:9A:23:63:64
X509v3 Authority Key Identifier:
keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:58:ab:ae:03:43:f0:33:4e:2b:ee:83:cf:60:cf:87:a0:42:
1a:6c:15:8b:e3:3f:77:9c:bf:0b:b0:b4:36:ad:fb:4c:d1:9f:
18:b1:92:32:b9:fd:94:18:d7:71:32:27:cc:ce:ab:07:a0:18:
56:37:62:ff:3f:94:36:5e:4c:fc:53:d5:ec:b0:7b:f5:b1:52:
eb:d4:8b:1a:91:de:23:a2:54:fd:1a:93:71:3f:82:d2:26:3e:
fb:9d:1c:e5:27:65:38:f5:ac:a3:32:af:f9:2a:26:8f:68:fb:
70:0e:d4:35:c3:7e:8c:fc:a1:07:66:db:7e:70:30:26:1a:e8:
75:0f:96:bd:8d:cb:55:d7:f3:7d:e7:8d:11:0f:20:b6:ec:98:
5a:54:56:f4:87:b8:ee:c2:20:a8:57:c6:43:64:00:39:e8:1e:
ab:c4:f4:a1:e2:b4:ad:8d:af:1d:4a:d6:ae:16:40:14:e0:da:
a8:ef:13:62:0d:21:58:4f:81:5b:01:b1:76:bf:01:60:8b:2b:
2e:ce:2b:75:ef:ff:f6:46:ad:13:25:55:5c:07:67:b7:d8:9e:
84:38:70:28:5e:8f:d9:94:a7:2a:3c:44:34:8b:83:82:43:be:
ea:af:88:5a:b4:0c:29:0f:aa:81:70:5a:51:64:11:96:06:ce:
b6:d2:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:58 2026 by rpki-client