Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File: 92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier: 5d1cwh3T/hF4uAH/gGtBtSGorI2UnPb66qXgmWRTlaw=
Subject key identifier: E8:FA:85:9C:B8:72:B7:80:31:E5:0C:28:8D:C2:78:A4:07:38:23:EC
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial: 019D27DFD5D9A454546A2C0577C02C4662EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number: 109E
Signing time: Thu 26 Mar 2026 02:01:13 +0000
Manifest this update: Thu 26 Mar 2026 02:01:13 +0000
Manifest next update: Fri 27 Mar 2026 02:01:13 +0000
Files and hashes: 1: 3RUzNJxN8N-FLHx-HBIM3ssFpQs.roa (hash: SC6R0zqJ1csv36Fng7Scp1JucKAec+aLRs2P091gAAQ=)
2: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: 2uaHPV165IG7UQqh2AuzQzSdfxlvl3PqEy2jQylkljw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d5:d9:a4:54:54:6a:2c:05:77:c0:2c:46:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Validity
Not Before: Mar 26 02:01:13 2026 GMT
Not After : Mar 27 02:01:13 2026 GMT
Subject: CN=e8fa859cb872b78031e50c288dc278a4073823ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:83:5b:2a:3b:46:3d:56:8e:c4:e0:61:76:
de:fc:ff:ba:5d:5f:fe:cd:fa:f3:d6:e5:6b:94:32:
5f:b8:d6:df:a4:10:65:ac:7b:d6:08:ff:40:59:80:
22:fd:8e:e4:7f:7e:bc:21:97:3a:41:ee:f8:9b:21:
1c:f3:b5:05:44:e8:d5:8e:41:06:a8:c6:e6:9b:a4:
1f:8e:9e:fc:f0:e9:ff:d1:9e:d0:85:cd:8d:52:28:
ed:24:76:54:8c:2d:f8:76:75:61:6f:bc:95:d4:b7:
4b:e1:98:af:d0:da:92:30:73:67:f7:c4:8e:02:2d:
06:0c:85:70:87:b6:53:c3:e0:3d:d4:36:31:14:ba:
1c:25:68:5e:9d:d6:ad:24:9f:f8:e1:14:f8:7d:15:
10:94:8c:3e:36:87:e7:85:66:05:9a:a6:bf:25:8d:
00:c9:97:e1:5e:72:d9:c7:0d:29:b5:d9:2f:9b:f0:
c7:d7:55:05:43:cb:e5:20:23:6e:c0:98:df:8b:05:
52:9d:7a:85:d4:8e:4f:b2:2a:8c:f8:51:29:7d:11:
ff:4c:fb:15:d8:e2:df:60:1b:6d:ea:80:15:b3:4b:
ec:af:3f:2c:c1:7e:ee:69:4d:bf:17:7e:7c:a0:1a:
6a:2e:30:d9:4b:0c:20:b5:52:4b:1f:16:56:6e:68:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FA:85:9C:B8:72:B7:80:31:E5:0C:28:8D:C2:78:A4:07:38:23:EC
X509v3 Authority Key Identifier:
keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:61:84:a2:80:00:1d:10:a6:77:8c:51:71:0f:ef:a5:de:
5e:9e:f8:46:57:b4:dd:4e:33:31:94:4c:e1:8c:b0:3a:a7:da:
af:0e:ef:87:ed:1c:98:d4:52:a0:8c:7f:c9:28:43:72:ba:63:
d8:ed:90:e8:97:1f:b7:1c:39:35:f0:51:0c:31:30:25:72:4e:
cc:09:18:9e:cc:36:6d:91:62:4c:55:d5:fc:e4:8e:57:2a:60:
33:eb:f2:ff:d8:e4:61:4c:fe:68:ab:f7:8d:28:b3:01:3d:4a:
c2:44:80:98:95:d7:d8:f9:1d:62:c2:04:c5:6e:fb:df:36:e8:
89:b4:73:eb:08:ee:6f:1a:b4:b2:15:f3:28:ac:61:db:69:29:
89:7d:98:eb:40:29:c1:65:0f:f3:2d:21:ef:28:bf:89:99:33:
63:d0:60:84:b3:25:48:71:cf:c9:fa:96:2a:68:55:9c:76:27:
52:a0:b4:42:ef:e4:bc:e4:1c:44:d6:3d:52:36:80:e5:48:ba:
b7:ba:88:6a:8f:09:43:25:2b:18:7f:dd:af:7d:a2:02:c9:87:
45:a6:52:53:ac:28:fd:b5:50:0f:24:ba:39:a9:7b:7e:41:88:
e1:59:49:02:2f:a8:81:55:bb:aa:b8:6f:e2:67:aa:5a:0a:29:
c5:6a:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:42 2026 by rpki-client