Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: LKBFRTh/FHMus3hwVR++hi9cvI2t3l3OOAhlTjC3oMM=
Subject key identifier: F6:FB:B0:BA:83:41:03:C4:EB:1D:5F:8A:2C:78:CD:4C:E6:38:A2:6D
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 019D2771E14647B94D159CD7FFC5F0CAB88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 0jpOewhs5al4i2Un15buYjMlNLI.roa (hash: YIUbzKo2xMv9/Z1KjRiKTWnIZ7BfndO4Gvu0b8SDWI0=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: ynlfES7GZ6Prl62UttC8+hgbk4AZZ6g5Nnuovhd6bMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e1:46:47:b9:4d:15:9c:d7:ff:c5:f0:ca:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=f6fbb0ba834103c4eb1d5f8a2c78cd4ce638a26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:8e:62:17:a5:b3:e1:3a:56:c2:fb:5c:59:
e2:57:bb:80:f0:c0:2d:bd:5f:c6:d9:7d:24:86:5e:
cd:6e:a0:f9:28:39:e5:f7:07:bb:f8:34:d1:c8:ee:
a6:07:c0:ea:a1:ed:2e:bb:5c:12:e3:cb:6b:df:d7:
16:66:d2:37:29:7a:63:48:57:89:7f:bd:c3:5f:70:
08:29:1f:61:9c:39:bc:8c:b9:12:a7:ea:f8:99:7b:
dc:ce:0c:11:b6:d0:93:53:e4:e2:8e:60:16:19:df:
81:25:2c:bb:fc:70:cb:5f:fe:7d:e5:5c:9c:e0:ba:
16:68:fc:fd:1e:75:d1:25:a5:1e:de:47:1d:be:89:
b8:6f:6a:8f:96:94:49:1b:0f:d1:c1:79:9d:db:42:
00:fc:2f:c0:90:96:87:bf:41:9e:26:65:d0:24:27:
a2:ff:e5:a2:2e:cc:d4:d3:b0:80:fa:c3:49:ee:5e:
dc:41:ad:4e:03:a9:ef:af:ed:09:73:d2:f6:e2:3e:
13:f3:79:80:54:77:ea:45:8c:0d:f0:9a:94:c3:d3:
25:6e:f8:38:55:94:6f:09:9e:6f:dc:52:b7:47:8d:
c6:6f:02:b2:72:f0:68:ab:c5:a9:c8:fc:1d:41:49:
df:c7:6d:26:e4:cd:4f:4e:19:d2:72:7e:88:93:ac:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:B0:BA:83:41:03:C4:EB:1D:5F:8A:2C:78:CD:4C:E6:38:A2:6D
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fe:2f:3a:22:73:85:4f:19:74:1a:77:44:ba:be:e1:15:cc:
e4:5e:a6:28:40:90:66:2f:51:68:11:b5:f7:8a:2f:f5:5a:c1:
18:30:06:69:4b:93:16:ef:11:57:e5:de:10:f4:2b:26:19:4c:
53:1c:12:e1:21:33:da:4f:a7:d3:b0:1d:0e:a5:c0:65:8f:19:
b6:eb:de:fb:41:69:9f:7e:67:5c:30:1c:b8:e3:b4:e9:d9:c5:
05:ab:f5:94:e1:ca:86:ec:9a:7d:86:01:7c:89:57:fa:af:87:
85:82:75:d6:ae:42:4d:84:91:9a:b8:2f:c2:ec:9b:75:ff:1e:
e3:d0:b7:3c:6f:81:71:8b:59:86:e3:e2:64:7f:20:f9:7c:f1:
fb:6b:26:e2:88:2f:98:a8:f9:0b:fc:61:9a:e2:0d:10:72:05:
32:ff:5d:0d:69:ca:1c:eb:96:3b:0a:89:74:9d:3c:b4:62:4b:
3c:9e:e3:c0:94:fd:52:3d:60:eb:91:d7:5b:5b:bf:2b:97:9d:
36:2b:b4:1c:9c:01:74:8a:c1:1d:a1:61:f7:da:6b:bb:3b:5f:
ea:61:aa:fc:85:fc:21:38:e6:31:d2:fe:74:ef:84:33:7f:8d:
f6:55:36:8d:f7:1f:38:ea:41:ac:c6:d6:24:a2:50:cb:9b:96:
4c:8c:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:20 2026 by rpki-client