Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: wGJYz7iGmzgL8XazQtqqBd9+E4MfqSnyCmPAlvFoQaU=
Subject key identifier: D1:7C:C3:7F:D8:8D:8B:D9:A6:04:B9:33:03:C1:FB:7B:4E:56:B5:51
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 019D28846178EAAB585FC0306857949BD0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: CzohGtSLcmDpSrKXCjf2wQpuklI.roa (hash: oSgq7hJ4clz8JZa9p9/cu2QQ6c0SU2FQe0lIPhhVo4k=)
2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: mfq/ISp6vCnOdKM+ruDhucbCrx/GoW0XBt/OOofjHqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:61:78:ea:ab:58:5f:c0:30:68:57:94:9b:d0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=d17cc37fd88d8bd9a604b93303c1fb7b4e56b551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:1a:54:a4:ef:be:0c:14:7a:cd:05:25:40:
51:57:13:12:8c:84:03:38:54:05:70:1d:22:ae:ec:
bd:99:ff:74:4d:5b:86:07:35:6a:da:cd:5c:67:7f:
89:c6:8a:b9:68:e4:2a:65:7a:9c:ec:45:99:dc:d3:
11:18:30:56:c6:d2:c5:2e:00:39:fd:9d:e5:3b:d2:
09:ee:45:90:7f:ce:34:8d:35:22:80:95:2a:c7:0f:
17:98:91:5b:b6:42:2a:07:d7:66:74:1e:48:0d:ca:
b0:f1:a1:df:39:b4:06:02:ae:a2:0a:43:ea:dc:33:
bc:96:22:36:a5:61:40:8d:44:57:bb:07:39:b5:e5:
93:0a:cc:6a:0d:e8:64:7e:a7:5a:b3:fe:6d:a4:ad:
fb:32:a3:09:9f:8b:d6:a6:fa:db:7b:75:b9:d5:be:
d6:0f:eb:bc:81:7a:58:bd:fb:a3:b7:77:65:cc:66:
3a:24:89:4e:eb:01:50:13:82:bf:17:48:2c:4f:71:
0b:2c:a5:b8:4b:24:0b:aa:81:f2:39:a8:9d:ba:d4:
f2:cd:97:a2:55:c4:eb:fc:d0:9d:c4:99:c0:df:06:
fd:60:f3:32:f4:66:2b:1e:78:cb:ac:01:ca:92:6e:
b9:f6:78:53:4f:14:08:e2:90:ab:48:78:17:3e:b9:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:C3:7F:D8:8D:8B:D9:A6:04:B9:33:03:C1:FB:7B:4E:56:B5:51
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8e:53:17:dd:4e:f7:37:80:76:5b:04:6d:3e:20:a6:4b:99:
42:ab:25:4f:63:b6:70:7d:35:35:bf:1f:f6:e2:bf:f5:08:c7:
e4:ce:82:c2:30:96:34:62:a3:67:d2:3f:29:15:68:54:c7:d9:
c2:21:42:14:91:4b:ce:9f:23:53:29:f0:7f:31:41:7b:e9:0a:
f0:78:4e:19:8f:64:6d:02:62:0a:d3:8d:da:0a:4b:48:f4:42:
5c:d6:e4:f1:93:63:6a:16:bf:96:75:f2:79:52:7d:2f:ba:a1:
29:f9:ba:f2:15:74:19:90:65:0a:38:57:f4:d4:39:c6:39:a5:
14:97:c8:15:cc:56:41:6e:be:57:ae:22:5d:13:0b:dc:02:da:
dd:55:ac:90:14:d8:63:fb:2a:2b:16:82:61:36:83:ce:06:61:
76:b9:df:27:76:2b:e5:64:66:e4:5e:b5:0d:ce:04:b5:e0:89:
ad:3e:91:e8:13:3b:d9:f0:c5:02:c4:a4:06:d0:ee:9e:78:b5:
b5:1a:f9:67:22:60:18:85:d8:d3:d7:cd:2a:61:d0:c8:de:0b:
90:c8:c8:80:3f:eb:87:1c:54:fb:9a:5a:34:11:b7:25:52:eb:
b3:aa:56:49:e1:ae:3c:69:0d:af:a0:0e:85:a1:d5:8c:b8:90:
62:bb:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:57 2026 by rpki-client