Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: mS1Kaw+o+XQtvUJiBRhCGrMOZBE3gY4X78mH+O7QKgg=
Subject key identifier: 24:DE:9E:2E:F2:D7:27:D1:0F:D9:73:66:28:36:34:1C:FB:1A:33:FD
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 019D2771D0221A26B58366DE542BCA9D5739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 1694
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: PYuODH0zBuvAiK-JKuXaExSuhvY.roa (hash: j4fDEw0K8kYxrAUmB58fcgklFQjA7X3SeZOjGCv6B9g=)
2: r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa (hash: q8BWxYBDwimUfBX5rZs0mS3SnxWzlL9k3GvkEkEzIbs=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: MgqGDD+C7s+fRKwJG50aOd/ARKLfd7ts4mtLAveHHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d0:22:1a:26:b5:83:66:de:54:2b:ca:9d:57:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=24de9e2ef2d727d10fd973662836341cfb1a33fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:64:5c:08:d1:07:11:ba:2e:70:20:15:62:
09:4e:27:d3:7f:fc:44:29:d7:a6:68:b6:aa:61:11:
19:fb:01:dc:10:ec:76:61:44:f3:3b:03:a7:fd:aa:
31:e4:9f:78:cc:29:73:2a:fa:e6:45:5c:f9:24:60:
26:31:4d:64:5e:00:86:c6:12:ea:c5:80:80:32:7c:
ea:f8:24:9e:2c:4b:d9:fa:bd:6b:cf:fc:ed:fd:a7:
0f:cb:81:7d:03:98:67:da:55:4e:f2:01:5e:5e:3b:
a3:bf:f7:af:81:f6:e4:0c:f5:60:a3:7f:66:90:64:
ab:b7:9a:2b:68:ef:3d:ff:64:f9:0b:93:bb:a4:6d:
03:37:8b:27:f2:a8:dd:bf:58:3b:96:7f:d3:5a:04:
6e:c5:0b:4f:e4:a0:9e:f6:7d:15:59:21:00:30:4e:
9d:77:46:0a:7e:bc:ae:b3:2f:aa:d2:95:e7:d3:ac:
a9:a5:a5:7b:b6:12:74:b4:b3:cd:3f:73:2c:d5:00:
0c:21:6c:e5:22:62:0b:8e:bd:16:c5:fa:dc:e2:fd:
48:fd:50:d6:99:c0:d5:2e:2e:21:5a:3b:6c:9f:de:
92:9d:d4:69:d9:3e:ff:9c:91:f0:5c:11:cd:7a:f8:
b0:a7:29:d6:86:bb:36:55:9b:30:69:05:e4:46:93:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:9E:2E:F2:D7:27:D1:0F:D9:73:66:28:36:34:1C:FB:1A:33:FD
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6f:86:65:8a:a9:e5:16:a3:99:99:84:6c:c7:ec:fe:ab:ad:
fa:c4:5e:ec:77:20:dd:e1:72:c6:7b:0c:9c:cc:71:e0:ad:d3:
09:7b:4c:e6:e9:ae:00:8f:30:5c:8d:18:65:2a:06:ec:40:f2:
21:bd:7b:8f:e4:ac:b3:ec:c0:0b:4d:dc:81:00:3d:41:13:e1:
4f:a6:31:e1:3f:f1:31:89:d7:19:3f:57:ea:b2:7e:26:4f:20:
fd:a5:8c:46:df:7f:8a:bb:45:4a:1f:47:2e:de:34:15:63:0b:
5f:32:be:c0:9b:27:22:06:ec:64:5b:54:8e:89:46:37:3e:af:
e4:87:bf:38:f9:fb:3c:c5:94:c9:36:8e:57:77:26:12:e6:95:
25:70:f4:cc:83:c5:ad:3a:b1:18:d0:be:c3:cd:1c:cb:48:dc:
2a:e5:ae:3c:21:49:a4:42:af:f9:da:b0:8c:29:19:dc:b3:2d:
8a:60:d9:51:3f:9b:fe:3a:ce:05:df:c2:d5:4a:15:3b:02:54:
f5:47:20:5a:f6:49:91:9a:a8:77:54:d6:80:7b:ba:83:04:7e:
c5:da:1d:86:a5:d4:84:93:74:c2:0f:d1:55:91:58:16:e4:d8:
ea:c0:b2:29:46:59:32:0b:ba:df:89:90:19:5f:7e:20:1e:95:
94:8f:39:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:30 2026 by rpki-client