Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: H6UvnS0g0emeRdUESGJFuTxrylp4Dynk1PtYMOqTNbo=
Subject key identifier: 04:84:16:9C:C7:F9:68:20:E3:7C:2B:05:49:9E:22:03:D8:B4:C5:8B
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019D2A051B8A4E24660B2FA6A679EA79643D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0627
Signing time: Thu 26 Mar 2026 12:01:10 +0000
Manifest this update: Thu 26 Mar 2026 12:01:10 +0000
Manifest next update: Fri 27 Mar 2026 12:01:10 +0000
Files and hashes: 1: EJFSOtkmc_lWhhNXUUs4nruRB1Y.roa (hash: mFAyY+U8ccrimuAI66qBOmKYa7OrPg3wRggOsTclU6Q=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: yq3UHlE0Xout9Wc3WCwZBPkclUMAxQI+iee0D8HVV34=)
3: zafpGp_sXGMh4yV6m5qLy7sLUpc.roa (hash: 2igpnziXWmq3SSWSag4FaHfVQQZsNnQ4/MO8icdVPHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:1b:8a:4e:24:66:0b:2f:a6:a6:79:ea:79:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Mar 26 12:01:10 2026 GMT
Not After : Mar 27 12:01:10 2026 GMT
Subject: CN=0484169cc7f96820e37c2b05499e2203d8b4c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:39:68:c1:05:76:16:b6:f4:17:0a:d4:2c:
f6:3c:b7:99:4b:51:2b:5f:f5:73:9d:3b:b0:d4:f5:
97:da:0f:7e:3f:2d:2e:fb:3d:a7:17:84:f9:aa:77:
8e:ef:6e:6e:8a:7d:2d:3d:f1:84:73:db:1d:ee:f6:
2e:ea:d9:73:fb:e1:5c:09:1c:f3:3a:d2:9f:1d:28:
c3:f4:f4:c4:3f:00:99:9c:bc:a5:f9:2d:36:9c:92:
fb:cb:d1:8a:c5:4e:33:ba:4b:48:88:04:52:76:cd:
84:86:20:1b:af:bd:d7:0d:60:f7:b7:fc:21:53:0d:
ef:7f:3e:7e:bc:b0:76:44:55:f0:77:84:91:0e:2f:
e7:82:19:e2:ca:0c:21:90:e1:97:c0:c4:33:f7:3c:
d3:02:72:ed:11:32:8d:73:10:dc:f3:6e:4b:5f:bf:
2f:c9:59:27:f4:3e:63:12:6f:4a:eb:f6:ed:af:e6:
ba:08:9d:e4:5b:cf:0e:37:e6:6c:36:84:a0:61:eb:
2c:c7:1a:3f:0b:4c:41:25:ea:6e:fa:b8:0a:70:c4:
f3:a5:2f:04:32:4b:f1:82:61:b7:e0:92:a4:d4:a8:
8b:98:57:b9:c9:ca:6f:78:3c:4c:18:d4:e3:92:ad:
19:d5:e5:1a:f2:9c:aa:a6:83:1e:7a:f5:c9:e0:f3:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:84:16:9C:C7:F9:68:20:E3:7C:2B:05:49:9E:22:03:D8:B4:C5:8B
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cd:ee:f0:8e:c9:81:0b:61:d6:5b:bf:73:5e:c6:21:18:42:
fa:c5:48:25:35:45:56:3b:01:17:93:41:82:d0:e5:26:a7:b8:
4b:9a:47:b0:a2:b9:be:e0:ad:20:ca:59:0e:10:5a:df:0a:e9:
21:e7:12:ba:f6:f7:d4:89:b6:b3:f3:86:05:25:3f:55:0d:ce:
7b:65:22:22:40:41:15:7f:14:00:74:60:3b:cc:c1:6a:08:ec:
fb:7b:5f:ba:90:48:df:cc:cb:72:f9:00:24:ed:2d:b4:93:7f:
e2:0f:e4:b0:55:28:9b:e6:ff:17:f7:6c:c5:78:97:b2:e6:70:
95:42:36:77:2c:cf:fa:31:92:d6:b1:1b:91:16:54:20:ed:ec:
2b:49:ca:2e:bf:20:ee:72:e8:54:90:de:33:94:da:0e:8f:ac:
0c:8f:61:4f:a6:52:10:01:49:2f:79:d5:64:c3:00:50:c6:7a:
d5:29:0c:67:0b:87:9f:a7:e6:54:b5:a3:52:e9:bd:23:1b:4a:
85:13:20:f0:cb:44:46:bf:ba:24:29:4d:1c:9d:8e:04:93:6e:
4c:f4:9d:a0:29:7c:12:e3:d0:a3:68:f0:03:c2:c1:98:e2:f5:
d4:60:58:c1:3d:3d:55:72:20:56:0b:70:f0:2a:82:4b:f4:ec:
39:9c:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:38 2026 by rpki-client