Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: Ms/dPsO+PYVXESRSp1vm1Y799MMIakTRvqDsxxG3NfA=
Subject key identifier: A0:B1:89:C6:C9:3F:FF:33:0D:D5:CB:36:CA:97:32:28:07:08:D9:42
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019D2583BD69522320A2F3791D3B221C65A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 12A9
Signing time: Wed 25 Mar 2026 15:01:23 +0000
Manifest this update: Wed 25 Mar 2026 15:01:23 +0000
Manifest next update: Thu 26 Mar 2026 15:01:23 +0000
Files and hashes: 1: bC2nxaXOoHLRq70D4NmWbSzAMRA.roa (hash: Rlixk9Fe/cWKW5omfOghhyxI9gFtiGAWS+9ajtBV+dc=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: 94mOHwqk9OeTy9S3hOciACscQepH1cYITtTi3dKku/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:bd:69:52:23:20:a2:f3:79:1d:3b:22:1c:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Mar 25 15:01:23 2026 GMT
Not After : Mar 26 15:01:23 2026 GMT
Subject: CN=a0b189c6c93fff330dd5cb36ca9732280708d942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:55:03:42:0f:0e:b4:1f:cd:eb:93:64:96:
b3:b7:f7:ad:e1:59:63:3f:40:7d:0f:b8:e7:c0:51:
8a:c3:5a:d7:41:e6:05:31:b1:b9:bc:5b:3d:9c:a1:
ea:f9:5f:25:02:d4:4b:af:5d:32:38:06:91:b0:41:
82:ea:f1:25:7c:bf:34:f3:ec:36:2d:75:ea:48:5e:
17:70:8e:dd:76:63:2a:13:39:cd:14:21:c5:fd:05:
41:7c:10:02:25:39:0a:b1:89:ae:45:2a:99:51:56:
b3:1e:5d:df:f4:33:9e:98:a0:46:97:20:c8:57:6f:
6e:93:8b:ae:13:21:2c:b9:6f:aa:3e:52:78:68:b6:
11:98:ec:89:65:ee:09:16:fb:01:ba:e9:fa:27:95:
84:86:5f:d2:5b:39:74:f4:fc:9f:45:94:59:54:52:
db:f7:50:f9:00:bc:61:bd:a9:d4:c3:eb:b0:57:9c:
b4:35:77:4b:af:eb:8e:d7:0c:6b:60:22:24:d1:04:
cc:eb:02:02:2d:44:f4:49:67:be:83:95:6d:09:8c:
fe:cb:14:4c:30:a1:f1:2a:37:6b:d1:4c:01:45:45:
57:a8:9d:1f:93:ca:2c:e0:08:31:f0:b6:c2:12:40:
1c:eb:2b:6a:c4:b6:55:bd:0a:1c:ce:2c:22:2c:fc:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:89:C6:C9:3F:FF:33:0D:D5:CB:36:CA:97:32:28:07:08:D9:42
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b1:8a:5d:82:0f:ae:3c:37:08:3c:6d:2c:13:20:d2:2f:89:
d4:50:70:4d:7b:f1:91:6f:cf:92:f8:79:9c:2a:18:4f:e2:ff:
5f:07:42:32:24:b1:e0:f6:a0:0b:64:b1:67:82:9b:ac:60:bb:
58:c9:3f:61:d0:67:15:66:20:b8:9a:6f:b3:ce:57:7e:a4:d7:
d7:df:90:79:95:16:d7:1d:65:e8:8a:e4:20:51:d8:70:c0:7a:
1b:d4:f6:f8:ae:24:d6:b5:33:40:65:e6:00:ed:8c:3b:9b:90:
0a:bc:e7:a0:6c:ae:d7:7f:fa:0b:1d:72:8e:f5:eb:5a:62:d3:
08:ac:98:ff:1d:84:df:e1:1b:09:76:17:4d:22:da:09:44:7a:
4b:e3:4e:3f:be:15:f7:7f:e9:28:32:b9:98:2a:de:12:5d:ab:
54:e3:c4:92:d1:ea:86:4d:ec:a5:9e:e3:86:2a:7c:ae:16:c5:
21:de:83:30:7c:54:8d:dc:9d:10:29:07:e4:3c:70:12:45:c8:
ab:63:da:75:c9:f8:b4:1e:4b:af:8b:18:86:4e:ef:af:02:67:
8a:17:5d:8d:db:32:37:c6:b3:02:4d:e3:e0:64:59:b5:83:1e:
c8:77:f6:da:e0:ed:ac:e2:5c:79:ca:78:89:72:43:d2:5c:04:
93:de:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:54 2026 by rpki-client