Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier: FjeYUluOpU2tMRSudchwboso/hg1m9RcxtqAzjM2kCw=
Subject key identifier: 7E:2D:90:2D:E2:96:99:EE:6C:C8:09:70:60:B3:71:4D:35:47:1E:E9
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 019D296151ADC01017CC71C1B6954A96340B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number: 0AF2
Signing time: Thu 26 Mar 2026 09:02:16 +0000
Manifest this update: Thu 26 Mar 2026 09:02:16 +0000
Manifest next update: Fri 27 Mar 2026 09:02:16 +0000
Files and hashes: 1: CMYGKasLmsjGblCK6IVsYcoAi1Y.roa (hash: 5I3la7dVRWMx/gZhUW1jrF5r1NdUNZ+7mT0gXM18zsQ=)
2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: 8PyTRRVYDe4W0GaZhJiXnGJ4l29YrDi3cwNtEe2MRX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:51:ad:c0:10:17:cc:71:c1:b6:95:4a:96:34:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: Mar 26 09:02:16 2026 GMT
Not After : Mar 27 09:02:16 2026 GMT
Subject: CN=7e2d902de29699ee6cc8097060b3714d35471ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:c3:00:d7:49:43:14:4a:82:11:d6:dd:07:
e4:01:90:67:da:30:81:4f:1c:cd:69:7d:8c:7c:9c:
63:cd:ad:e2:36:2b:ca:12:40:65:f5:40:78:4b:fd:
4a:f6:b4:cb:54:ed:79:5c:82:3b:60:12:97:8f:f3:
53:8e:64:de:5f:96:5b:d8:a6:57:80:7c:6d:88:d3:
a6:7e:28:bd:0b:9c:66:cc:83:c3:06:0c:94:a1:5b:
8b:ff:d1:8d:47:13:18:80:e6:bc:e2:80:01:ee:16:
ec:80:ba:0c:a6:db:19:2c:0b:a6:ed:29:5c:2a:48:
44:c6:c2:61:d6:bc:38:a8:2b:be:8b:4a:bb:e2:d8:
b5:52:2c:09:68:1e:ed:ef:01:49:3d:36:0b:42:e0:
09:ca:5c:e6:18:0a:32:28:83:3d:ad:eb:17:93:3e:
3f:8b:fb:03:f0:42:86:2a:14:26:70:a8:2a:7b:5f:
33:f9:9c:0c:6c:5c:71:19:fd:b1:8e:1f:e1:41:c0:
a2:b4:70:72:4c:0d:c1:5f:c1:d0:d7:2f:d6:be:90:
5d:c0:99:27:37:34:f4:46:04:c9:5e:e6:0d:15:d1:
fc:88:53:f9:57:18:ee:d0:9e:cf:52:cb:79:2a:b5:
22:03:0a:cb:8e:de:31:3a:25:6e:03:ef:43:3a:53:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:90:2D:E2:96:99:EE:6C:C8:09:70:60:B3:71:4D:35:47:1E:E9
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4e:50:4c:41:2c:53:ec:fd:28:b9:ed:e9:88:3f:58:f4:3d:
99:28:f8:39:2d:0b:c2:6b:a7:1a:2c:ca:88:28:da:29:56:3e:
39:c6:33:b7:58:9d:54:f1:a3:55:51:f2:db:70:24:af:7b:0d:
8d:a9:8d:27:42:62:77:cd:74:8b:43:0d:a2:0c:75:f8:08:6e:
56:59:a7:04:5b:76:a7:a9:11:ef:1d:3c:16:81:a4:d7:45:68:
1e:46:3d:8c:52:59:2d:6b:91:65:fe:de:c7:15:f8:b2:57:5f:
87:9a:71:33:47:71:af:af:95:46:04:77:ce:1a:5d:cc:5e:99:
a3:72:88:00:db:99:13:d6:e1:ad:6e:32:c8:5d:c0:eb:1e:96:
da:44:f0:f8:3c:c4:ac:5f:6c:66:8c:1e:d6:24:c4:81:28:87:
2e:cc:24:4a:a0:1f:24:02:e2:bc:cd:f5:f1:d8:a2:5c:e2:88:
28:e7:80:7a:ec:f1:d3:82:65:83:c1:a9:84:5b:ed:b0:49:6a:
85:e1:45:2d:60:8a:e9:23:58:5d:d5:87:cf:ec:f4:95:fe:26:
6b:6a:74:b8:4e:dd:24:94:f0:2d:26:a7:bb:52:10:9f:5c:eb:
ab:25:ad:b1:2e:76:ce:83:8f:9f:5c:77:17:3d:3f:fa:44:f5:
61:d7:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:12 2026 by rpki-client