Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: sy8GOfKIkhlSAlhbmD4OLnHg6HLJehqm1xEa3tz/6/4=
Subject key identifier: AA:67:D9:30:90:42:CD:C1:85:70:11:09:96:D7:C9:70:CD:4F:F9:F4
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 019D284DCA01FB753D44B4A9FAB84381E0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:19 +0000
Manifest this update: Thu 26 Mar 2026 04:01:19 +0000
Manifest next update: Fri 27 Mar 2026 04:01:19 +0000
Files and hashes: 1: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: KKY2W2bHGM6el1t9pQk/pqwcTsvIWpisC3WYe5Y/hNw=)
2: z7dvscAPc8RwI0qZ-f09vWYFrxY.roa (hash: cEZ+Bp7svftrWkfXKY4Q3ijh9mhZFUHispLnsT5moTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ca:01:fb:75:3d:44:b4:a9:fa:b8:43:81:e0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Mar 26 04:01:19 2026 GMT
Not After : Mar 27 04:01:19 2026 GMT
Subject: CN=aa67d9309042cdc18570110996d7c970cd4ff9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:a0:bf:44:29:27:f1:66:b8:7e:ce:c6:84:
90:4b:99:88:f3:fe:02:8d:68:3e:7f:a7:ae:82:af:
4a:2a:f1:3d:60:e5:be:4f:0c:fe:97:70:47:6f:3e:
f6:3c:68:e8:2f:15:38:5f:5d:d3:99:80:be:95:cf:
19:cb:28:d6:23:0e:31:3f:29:30:9e:d4:57:a3:fc:
62:93:f1:04:a9:fc:cd:0e:49:79:29:a6:82:b5:f3:
99:21:55:e8:f9:ef:79:c9:ab:ab:fe:2c:da:a6:31:
a0:81:3c:a9:40:46:25:5e:04:ee:d3:0f:43:56:ac:
d4:6a:73:63:d5:09:34:a4:d0:b3:80:4e:26:71:63:
1f:80:42:da:2e:0c:aa:44:72:e5:96:fb:e3:be:a8:
39:45:eb:6d:7c:6a:6b:a4:a2:e9:c6:c2:77:99:6d:
65:22:40:66:ea:d4:8d:6c:85:e3:0d:86:46:bb:1c:
db:96:bd:c3:89:be:c0:78:ab:bd:9d:66:b4:3b:ba:
14:0a:ea:d2:07:c0:b0:31:1b:02:40:82:f7:ef:52:
be:36:f9:54:dd:ad:81:77:06:d6:1b:5d:c2:de:01:
b9:22:38:23:67:40:84:13:9f:5e:78:4e:b0:31:c7:
a7:f2:84:b0:59:cb:b4:ac:4b:62:af:0d:50:9b:90:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:D9:30:90:42:CD:C1:85:70:11:09:96:D7:C9:70:CD:4F:F9:F4
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:55:19:53:95:91:8b:b9:f6:b9:94:a2:45:e0:79:d0:d0:2c:
d7:a8:6f:f6:17:f8:31:a3:03:92:af:d1:2c:9a:71:d7:59:ff:
12:e3:ff:b3:08:4d:7d:31:f5:8c:fc:6a:e0:a9:9c:64:d0:ab:
54:0b:cb:27:f6:e5:c9:de:33:29:b4:d2:b3:6c:77:de:5b:6e:
e8:0c:9b:c7:63:c1:0b:b4:38:c4:4c:84:90:a8:1c:8a:da:4f:
3c:5b:47:d8:f8:58:fd:50:43:93:cc:ac:1b:4d:30:a4:91:a0:
b9:fb:fa:78:1f:3d:2d:f2:07:29:6c:f8:93:45:4a:30:18:02:
bd:20:64:fc:a0:f4:81:88:92:cf:55:69:2f:96:d3:1f:6f:3d:
00:22:4f:8f:e7:8a:c4:05:fd:58:3a:e6:73:5b:11:50:2b:9e:
86:47:47:99:8f:8d:70:02:b6:3f:2d:d2:71:85:46:2a:0b:22:
15:7f:8d:22:c6:5b:a2:a9:f1:0c:3e:de:91:99:1f:e6:02:66:
0d:2f:6c:ff:80:09:62:39:3c:63:77:9d:9a:d3:62:de:62:61:
c0:38:af:5a:46:97:7c:f0:44:df:3d:37:ea:97:97:b4:2d:0e:
a1:4f:c9:97:cb:1a:a2:e5:97:c8:58:95:2c:11:c2:18:b4:67:
13:c5:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:28 2026 by rpki-client