Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: xqi8KiWRJl9tYlo2gkwdDVYBgeJU+b+MbZWRIQ4UT4w=
Subject key identifier: 44:B5:93:6E:FE:6D:7B:B5:3C:1D:F4:56:75:81:D5:51:E0:06:DA:20
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 019D27048AC58CEDDF3ED48D9F72273C69DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: QZ1nQEGPtuWi9XAcZCDjVZxeYlw.roa (hash: QW6eD5LudJ7sNotpMCDqrxlbZtx90rILczwwlFeS39g=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: RB99vjgzGMLG8F+rt2te9A+7+RxN7dARB3CQDE9Mj2A=)
3: wJ1lzhD1F8_SwqyHPBj4dP90Gyw.roa (hash: ZZIVl+n5SFgzaFLgLDlSLqKT2aW65v2nj5QP7X4r9Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8a:c5:8c:ed:df:3e:d4:8d:9f:72:27:3c:69:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=44b5936efe6d7bb53c1df4567581d551e006da20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:4d:9e:2d:da:17:3f:ee:6a:78:d7:e0:b6:
e6:82:87:96:65:06:69:9e:d2:71:32:a4:ad:d7:b7:
c0:59:2b:ec:00:ba:13:c6:9c:35:dc:4b:ae:7b:b9:
a8:b3:23:d2:36:19:6a:17:86:00:e9:64:ff:02:03:
be:07:6b:4a:f5:c0:f3:fc:af:a1:60:ad:02:b4:83:
db:8f:1e:87:5b:6a:ba:16:c4:c4:3b:a7:e1:8e:db:
06:47:3d:eb:dc:3b:dd:30:a3:2d:f8:4f:b1:74:8b:
31:90:56:c5:a5:e2:e0:0b:84:ab:a9:86:7b:93:33:
d8:b8:4b:27:6a:d4:bc:cb:00:d8:5d:c4:49:45:a3:
6d:9c:ad:44:bf:45:41:10:66:1a:c6:9d:f5:61:e1:
c7:c3:89:5f:d4:59:b8:99:dd:dc:06:f5:3f:b9:93:
48:ba:35:c3:f1:f1:b7:17:d0:e5:12:86:fc:e2:f0:
81:a9:47:a9:45:b8:1a:c7:08:9c:d0:bd:1f:6a:43:
bc:74:9a:ce:94:7a:76:28:ea:7c:4b:e4:40:bf:22:
aa:26:1e:ae:77:8d:19:b4:d2:52:b2:c2:2f:d1:9f:
ce:74:c0:c5:72:23:2f:35:dc:9a:e4:07:d5:15:74:
12:ae:57:ac:a3:d2:02:13:21:eb:ae:c6:b4:8c:b8:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:93:6E:FE:6D:7B:B5:3C:1D:F4:56:75:81:D5:51:E0:06:DA:20
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:e3:6a:04:c0:91:1d:28:8b:38:64:d3:cd:86:99:98:c5:
e0:07:95:c5:b1:30:3e:4b:00:33:a3:19:bd:62:7c:19:6b:9b:
b9:a2:aa:3c:ee:5e:6a:8f:5e:a2:d3:5e:ce:1d:90:5b:3f:14:
1e:b7:65:4c:7e:2e:7c:d8:7d:04:f4:6f:5e:2b:5c:04:ac:f5:
b9:a0:a1:4c:2b:5b:dc:b0:dd:7d:30:7c:e2:5d:32:2f:86:0b:
72:32:10:a1:b9:0f:c8:93:d3:8f:2e:5e:ed:e6:6d:57:a8:15:
ff:fc:3a:5f:c8:53:df:13:73:39:54:ac:63:cf:60:7e:e9:ca:
9c:6c:c5:5d:d0:ab:ac:5d:ff:94:82:d3:19:d3:78:d2:aa:0f:
06:9e:bc:ed:2d:9b:6d:df:ea:07:13:92:e2:4a:26:35:61:3b:
c7:f8:48:d6:a5:70:98:0f:8f:90:03:9f:6a:99:1f:dc:c8:e1:
1b:63:2b:1b:8e:75:c1:6d:f6:30:ba:7f:32:07:fb:49:a4:63:
78:5d:27:92:49:d1:1a:27:33:e3:be:c1:73:03:e7:cd:46:8e:
17:07:63:41:f8:ad:ad:1b:52:77:97:12:6f:2d:a3:78:e5:0a:
f6:2b:37:d4:fa:53:12:56:96:83:7c:a2:44:67:06:e2:7e:b7:
1c:54:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:16 2026 by rpki-client