Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: 0Ae5Qxa86gvF3wua1wrHTTTdiiv8eS5FinOoA3QXCUE=
Subject key identifier: 55:3E:18:71:BF:F9:94:F7:FA:1D:A7:47:F9:9D:FB:8C:6C:93:84:56
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019D281640A6FD501FFB5A6F7FCF2B440AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0626
Signing time: Thu 26 Mar 2026 03:00:40 +0000
Manifest this update: Thu 26 Mar 2026 03:00:40 +0000
Manifest next update: Fri 27 Mar 2026 03:00:40 +0000
Files and hashes: 1: EJFSOtkmc_lWhhNXUUs4nruRB1Y.roa (hash: mFAyY+U8ccrimuAI66qBOmKYa7OrPg3wRggOsTclU6Q=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: ArFwRYRFwg91khSm5t8oE3QAiLdC8hrnk6qvI6xNPIg=)
3: zafpGp_sXGMh4yV6m5qLy7sLUpc.roa (hash: 2igpnziXWmq3SSWSag4FaHfVQQZsNnQ4/MO8icdVPHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:40:a6:fd:50:1f:fb:5a:6f:7f:cf:2b:44:0a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Mar 26 03:00:40 2026 GMT
Not After : Mar 27 03:00:40 2026 GMT
Subject: CN=553e1871bff994f7fa1da747f99dfb8c6c938456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:1b:97:21:b4:77:fb:63:ed:e7:99:c2:d7:
12:1f:80:27:e4:40:6e:e4:7e:34:f5:72:3f:c2:fd:
76:98:3a:22:bd:82:fd:82:cb:90:0f:1e:27:b7:02:
ca:af:ed:a2:60:e1:5d:4c:a1:b6:9c:f0:81:91:02:
b1:69:9a:57:93:d7:ca:55:d1:7c:67:93:95:87:14:
cd:83:fb:70:b9:f0:dd:79:ed:2e:76:a4:43:37:de:
de:6e:29:74:b9:8b:b9:0b:79:d1:8a:3a:31:3c:87:
0d:3a:64:3e:3a:97:a1:59:02:97:4f:b0:fa:fc:27:
be:a3:45:13:f0:d0:98:a3:53:f2:dc:f7:26:ee:b7:
51:38:4d:d8:9d:1f:9e:2d:18:e2:d6:7a:9b:7e:28:
3c:b3:08:39:3d:c0:e5:76:ff:19:4d:c8:7d:23:41:
c4:bb:f0:e9:69:38:ff:c4:86:b7:b6:ad:e9:cb:87:
bb:e0:ab:5b:83:07:7f:82:e4:20:68:79:03:56:f5:
d7:e7:b7:9c:10:51:00:00:f6:e9:e1:0d:b0:52:14:
a0:01:79:56:ef:1e:4d:4a:2a:57:94:c5:ea:d9:ac:
0d:75:98:88:e3:50:f1:ed:36:d5:7c:1b:19:54:1d:
2c:55:48:fc:ea:cf:c5:e5:87:57:97:12:51:af:1b:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:18:71:BF:F9:94:F7:FA:1D:A7:47:F9:9D:FB:8C:6C:93:84:56
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:e9:e6:7e:dc:32:3b:c2:8f:37:a6:90:89:ff:31:92:46:
e8:e3:35:9d:64:40:23:70:1d:be:c8:92:f7:3d:8b:c6:de:2d:
5d:ba:a1:96:28:67:2e:ec:95:a9:83:b2:d9:1c:e1:b2:2c:c5:
31:a6:01:71:b9:bd:7b:14:5e:0a:bd:8b:44:d1:06:22:ef:c2:
47:13:88:4f:cf:52:8f:6b:58:cb:84:42:59:f3:02:c7:0a:96:
f4:7c:88:ee:f5:b8:28:ff:e6:7a:d6:9d:f8:66:80:66:08:7c:
f0:be:b8:79:b3:d8:e5:8b:3a:4d:e3:6d:c2:30:2e:29:41:20:
51:a5:f8:d6:9a:87:59:07:07:50:fe:63:21:dd:07:ec:74:c5:
5b:a1:a0:54:ec:fc:ba:04:12:f7:c2:d2:eb:a1:be:ca:a9:54:
bb:1c:c4:23:6f:a7:6c:df:2e:19:1c:9e:b9:65:48:41:b6:72:
d0:ca:f1:5b:d5:f3:73:d1:9e:f8:f5:57:4a:a5:e2:d0:3a:db:
14:b3:90:51:3c:a5:ea:66:33:a0:94:d8:27:ff:0a:0b:72:43:
c6:d0:bb:96:ad:86:3e:26:06:3d:15:56:eb:35:a4:44:3b:d7:
c1:b4:f1:75:cd:f7:d8:9e:2e:df:1e:bd:4b:ff:d1:57:05:ad:
b8:e4:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:37 2026 by rpki-client