Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: yBvD7CiMVCXR1hLkLfQWGPHIuqTd2uDas2L6pXAdQVc=
Subject key identifier: E6:77:A5:71:AD:ED:91:2F:29:DF:27:BC:A4:AB:A8:D6:1B:2C:7A:B3
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 019D29CE89ECEFE406112208E166EC65DE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 025E
Signing time: Thu 26 Mar 2026 11:01:34 +0000
Manifest this update: Thu 26 Mar 2026 11:01:34 +0000
Manifest next update: Fri 27 Mar 2026 11:01:34 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: QGxu12rmiFmpnHv7GcR70pbBbCiLSs9Yaa2z/7ZEUxw=)
2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:89:ec:ef:e4:06:11:22:08:e1:66:ec:65:de:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Mar 26 11:01:34 2026 GMT
Not After : Mar 27 11:01:34 2026 GMT
Subject: CN=e677a571aded912f29df27bca4aba8d61b2c7ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:90:05:0c:37:10:c4:d5:a3:73:43:5c:5d:
6b:ea:23:43:ab:ff:27:43:ca:87:a4:88:06:4a:23:
09:53:ca:97:73:d2:6f:c0:ca:21:6e:7c:ff:41:ce:
6a:c0:98:cf:3e:79:94:31:d2:91:af:09:3a:62:78:
25:1b:27:45:59:bd:5c:0b:44:89:5f:d4:92:59:af:
2b:74:11:de:d1:4f:41:56:82:fd:ff:6a:e5:f9:1d:
f1:a3:4b:1d:ec:a2:2f:63:52:32:43:46:6f:0a:82:
0a:60:b1:35:42:60:c2:85:18:68:cc:83:e7:cb:fa:
0c:97:d4:7b:30:e3:1b:91:85:21:f7:03:c0:6d:ca:
63:31:96:17:c4:a3:ad:e4:35:59:28:fc:78:02:f6:
c0:0b:e9:a4:84:a7:ea:82:99:9c:9c:eb:96:19:53:
66:f1:5b:1a:d1:2e:7f:39:25:b1:86:99:68:37:aa:
32:d9:b4:49:14:98:4c:8a:ee:e2:b8:bb:38:89:26:
ec:80:1e:73:02:78:bd:36:05:50:d2:eb:39:9f:e4:
12:3d:cf:de:69:5a:ba:62:73:11:6b:64:2e:fb:e7:
9b:a3:86:07:85:33:ce:a8:0b:0d:16:fa:f5:e5:ee:
03:a8:65:68:4a:76:8a:89:47:77:8f:40:b3:bb:0d:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:A5:71:AD:ED:91:2F:29:DF:27:BC:A4:AB:A8:D6:1B:2C:7A:B3
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:aa:97:e4:fb:af:be:fb:47:00:ea:f8:81:3a:3c:37:96:06:
28:15:da:36:d9:ed:c6:ea:fb:08:c8:01:5d:40:63:e9:e1:5e:
06:3c:ce:23:a5:0e:0f:7c:2d:09:d7:ec:a5:5a:21:75:cc:05:
85:87:a2:68:22:2c:05:a4:ce:78:6c:d0:f7:0a:9b:fe:f1:1f:
25:36:13:a4:6a:f2:54:b2:48:4d:07:f9:2d:69:3d:28:95:ec:
a5:c2:2f:c2:c1:ac:1a:ac:c1:93:f1:e1:de:ad:b5:7f:81:e6:
1b:02:76:c0:c3:67:af:17:1e:3b:65:f8:09:dd:5e:bf:35:18:
e7:66:84:90:08:59:a3:8b:f8:dc:36:31:38:9a:1c:13:d2:ff:
60:71:f8:31:1c:bb:89:2f:70:b0:62:e8:36:e3:33:32:bc:42:
7e:bf:ed:83:a6:11:8f:ea:35:27:80:f7:97:e2:38:a0:a3:7b:
a1:6b:60:b6:eb:31:65:d9:17:35:0d:11:47:fb:af:1a:94:2c:
24:95:32:25:d5:65:e4:c8:10:25:7c:60:f3:d7:99:50:f6:27:
b1:28:22:58:71:a3:84:8a:6a:04:bb:16:6c:ba:2e:d4:bc:d5:
14:42:c6:27:86:c1:4f:d9:75:54:20:77:02:a9:a1:80:16:84:
1d:df:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:40:54 2026 by rpki-client