Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: fhh4lzftFg75SAB/bywLZJF8ac4OqmTumEmuRRWiqQo=
Subject key identifier: 31:17:4F:15:E1:D0:89:BB:3D:1F:89:6C:54:79:CA:A5:CF:50:42:9E
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019D2B85B2BE405F28C1A94525CE7424A4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 19:01:15 +0000
Manifest this update: Thu 26 Mar 2026 19:01:15 +0000
Manifest next update: Fri 27 Mar 2026 19:01:15 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: BOkc5BNXbvSEFEYIuLu2NOuoBwpm2JZRjuRDzYxWHKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:b2:be:40:5f:28:c1:a9:45:25:ce:74:24:a4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Mar 26 19:01:15 2026 GMT
Not After : Mar 27 19:01:15 2026 GMT
Subject: CN=31174f15e1d089bb3d1f896c5479caa5cf50429e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:39:c1:3b:85:75:4a:4d:8f:7c:36:56:5b:
d5:cf:bc:ca:73:f3:0b:37:59:10:c7:2b:14:5f:1c:
3f:74:fe:6f:2e:a8:c9:7d:06:5b:cf:db:66:c4:a1:
01:ff:b2:6d:2e:25:0e:ed:a4:68:ef:4f:47:23:b8:
c0:b2:5c:27:c8:9f:47:dc:0a:48:14:cd:2a:af:b0:
62:34:66:99:d6:f7:26:07:f1:45:69:9b:89:54:e5:
35:e0:c4:b2:60:8e:30:13:08:65:b1:58:5f:31:cd:
19:7f:b8:02:29:8b:c2:ab:95:05:a9:d1:e7:45:9b:
12:b2:fb:45:4d:5a:be:3d:6c:a6:21:d9:c5:c5:b3:
3c:a8:07:af:54:08:03:53:a8:15:6f:68:16:1b:b1:
76:ec:5a:bd:1e:c3:5d:23:5e:81:79:99:ef:b7:be:
39:73:18:c4:1c:7d:37:39:98:aa:72:23:19:f8:21:
45:b9:c8:10:5a:c4:50:88:cc:81:dd:4d:fc:86:d5:
91:a8:34:96:7c:fc:92:80:28:ff:ba:06:07:bd:95:
f6:8a:73:76:18:ee:e5:d4:f9:c8:ed:c0:a0:ff:e2:
8e:31:cd:be:c5:60:73:3b:df:f0:a9:3a:90:54:30:
50:46:a9:9a:5e:6c:20:df:5c:d6:96:5b:db:f1:9c:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:17:4F:15:E1:D0:89:BB:3D:1F:89:6C:54:79:CA:A5:CF:50:42:9E
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:63:f2:92:c1:67:b0:08:22:d8:cf:8d:5e:1f:53:1b:9f:ae:
49:f0:21:97:09:0d:1e:b4:5f:40:e3:01:a8:f0:b6:a3:36:c1:
cf:4f:44:8d:a7:a3:6d:36:12:38:39:31:ba:5f:c1:b0:5f:7d:
a5:44:11:f1:f0:d2:c9:3a:bd:b4:0b:12:7a:6d:2d:ff:8d:e2:
33:8b:bf:18:1f:73:d2:f5:e0:77:98:31:d6:03:69:df:94:8c:
60:c6:04:46:ac:99:df:f0:7a:6f:e5:c4:4f:a8:69:e9:a9:bb:
da:0c:82:fd:ad:81:c6:71:33:e9:22:fe:26:03:da:0d:6e:93:
30:4d:03:0f:8c:ac:df:0d:5f:26:05:17:e7:14:93:57:21:59:
f9:06:a0:e0:d7:ae:40:e3:2f:98:7f:b7:4c:82:2e:de:80:58:
71:73:1b:79:44:20:ee:e0:6a:2d:6b:18:5e:21:75:91:00:9a:
ba:50:9b:c8:2c:db:48:7f:2c:42:5f:ee:23:7f:ef:48:77:d2:
dd:92:10:58:38:9d:a0:62:46:12:76:ee:8d:bd:ca:9c:4b:63:
5e:35:34:9b:d9:97:98:73:d4:4d:16:25:6c:0d:3f:6f:ce:ca:
f7:06:8a:1d:d6:da:f2:39:ed:aa:db:b0:de:83:25:1c:d2:b5:
3e:a4:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:38 2026 by rpki-client