Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File: vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier: GwysyJYe5yJg3BjpFVsxFzC0odVLLNjIR1+4aVFEWQU=
Subject key identifier: A7:AF:F5:D2:45:4D:76:0F:7B:4E:A1:02:85:63:5F:40:83:9A:D4:23
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 019D2772EEF8CCAFF60E2B1536A0B2FFBCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:02:16 +0000
Manifest this update: Thu 26 Mar 2026 00:02:16 +0000
Manifest next update: Fri 27 Mar 2026 00:02:16 +0000
Files and hashes: 1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: ScIYzK87Z3hDP90EMOuy0gRSMugMQ9A/VlMHMX0aFP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ee:f8:cc:af:f6:0e:2b:15:36:a0:b2:ff:bc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Mar 26 00:02:16 2026 GMT
Not After : Mar 27 00:02:16 2026 GMT
Subject: CN=a7aff5d2454d760f7b4ea10285635f40839ad423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:a0:13:86:41:2d:3f:b4:aa:7f:cd:3d:d6:
bc:bb:26:66:e2:de:74:c1:45:ed:af:5a:ad:26:25:
13:a2:d4:37:a7:b9:c7:38:cd:54:2f:8c:e6:ae:ef:
a3:30:8c:c4:7b:b9:9e:ed:b8:9c:26:65:ac:64:e5:
18:c3:ef:18:4e:e5:bc:36:1a:86:eb:11:dc:ea:22:
f3:46:f3:e7:a2:87:5f:c4:fd:8b:38:b1:71:b6:ea:
09:ee:88:84:38:57:1d:20:98:e1:67:c0:08:de:3d:
ff:3f:ab:fd:31:50:93:f9:28:e8:41:f6:b9:19:75:
04:58:96:bc:9a:12:fa:15:b3:e8:80:71:4d:2c:2f:
a8:9b:99:c4:c5:58:2c:23:a3:a9:5b:3a:59:5b:75:
78:6e:91:30:15:5c:dc:40:3f:35:29:64:fb:a2:6a:
89:61:03:8a:db:60:db:1c:40:97:02:dd:b0:2b:3d:
75:1e:f8:0c:86:d6:04:eb:02:6d:c6:38:42:44:29:
a5:f8:6c:6a:94:64:af:fe:c2:65:1c:f8:0e:5f:78:
0e:08:64:fe:00:06:b8:92:31:04:9a:07:c1:0b:dc:
36:14:b5:bb:5e:72:18:a6:ff:a0:84:14:ea:c1:4a:
39:51:e8:53:a2:1f:50:6e:28:0d:e5:d5:58:27:f6:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:F5:D2:45:4D:76:0F:7B:4E:A1:02:85:63:5F:40:83:9A:D4:23
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c3:3f:51:60:aa:0c:f8:e5:84:04:c4:6f:0b:1c:e5:7d:ab:
ce:62:01:9f:02:7a:9a:24:17:bb:6b:53:38:fc:33:8d:ca:0b:
a0:9a:4d:33:27:db:72:de:be:e8:c0:77:08:53:37:4f:75:ea:
d3:17:e5:39:2b:6a:e5:3a:5b:45:9c:fb:d5:8e:88:41:85:0f:
53:7b:65:c2:a4:0b:53:f0:36:d4:04:be:73:81:be:eb:a5:6c:
ba:3e:54:f6:7e:8b:40:5a:0c:07:62:18:6f:af:1e:34:f9:8e:
f2:3d:07:a5:ef:bd:fe:c6:46:b9:8c:02:a5:cf:e2:3b:72:5c:
05:f7:55:aa:d8:41:8e:68:37:da:99:cb:8d:08:bc:6f:71:e9:
0f:fb:f4:d3:c2:67:cd:59:8a:54:06:7c:12:37:2b:cf:f7:91:
c2:b8:7b:24:cc:dc:8d:0f:f5:03:ae:80:33:29:e7:01:f5:23:
c8:94:98:fe:cc:7e:63:e8:05:d9:d9:17:da:41:b7:91:79:91:
7a:95:19:0d:b0:a6:d4:ff:4c:cc:60:53:70:50:f7:93:50:4c:
31:05:e7:1f:00:03:53:71:ea:17:22:a8:c0:5a:ac:e4:18:85:
ff:ce:e9:4f:e5:bf:f5:6b:0a:e9:fc:f2:5f:86:90:59:62:8d:
e3:2e:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:09 2026 by rpki-client