Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File: vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier: /LOocRpOe7GScskqI4G5MOsIZAZ5IW18FB9JlfCAIK4=
Subject key identifier: 64:4F:6E:88:36:E8:37:F4:A4:61:E4:39:8E:EF:38:03:7E:56:4E:98
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer: /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial: 019D2A7288F476C9CD30F6C39FF4732DAD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number: 0FB9
Signing time: Thu 26 Mar 2026 14:00:42 +0000
Manifest this update: Thu 26 Mar 2026 14:00:42 +0000
Manifest next update: Fri 27 Mar 2026 14:00:42 +0000
Files and hashes: 1: JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa (hash: fVzsbnVjjWl2LyjA+I2JSODFF87TDP7Iwxo6m2pjCvM=)
2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: MSf5Yr0NQ79/O+O8dwKjCecf0pJoMZYFGnYz5XTC/yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:88:f4:76:c9:cd:30:f6:c3:9f:f4:73:2d:ad:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Validity
Not Before: Mar 26 14:00:42 2026 GMT
Not After : Mar 27 14:00:42 2026 GMT
Subject: CN=644f6e8836e837f4a461e4398eef38037e564e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:9d:e3:73:05:5d:f2:24:b4:88:2e:dc:97:
4d:9a:2b:3d:45:33:f4:25:e1:02:88:ae:dd:89:2e:
e6:b2:ef:ef:db:41:f9:85:75:d4:9e:83:2c:39:da:
92:86:9b:2a:32:8f:56:58:52:3f:d7:60:6d:1e:11:
27:bf:59:29:aa:b2:dd:33:36:54:4f:0a:8c:3d:e1:
c8:6b:fe:84:fe:94:3b:ec:42:5f:8c:1c:e3:06:85:
b3:18:e0:c9:f0:db:ce:17:5a:fa:d1:29:2b:9f:17:
87:92:3e:b8:01:e6:11:87:69:48:a9:55:6f:a4:5e:
c7:cd:83:bd:d0:18:c6:c9:9d:bb:53:dc:2a:6c:5d:
08:fe:4c:d8:6c:29:95:1e:4d:89:1c:4d:30:c6:70:
ed:d3:74:e4:3a:4a:50:fa:a1:18:b7:97:66:9a:65:
f8:c1:e0:49:b3:37:a7:36:da:34:f1:f3:cc:89:ed:
1c:a2:b0:3b:a5:2b:85:33:e4:a4:5d:31:d6:8e:90:
7a:c7:2f:21:eb:97:ad:94:e9:b3:51:5b:f8:49:23:
ee:1f:ad:f7:84:b8:d7:19:8e:5e:2c:09:43:6a:ab:
ee:47:59:83:4d:fa:6f:3e:25:e0:2d:a7:f2:a5:a4:
49:94:e9:d1:fc:83:c7:37:1c:29:77:a4:d3:19:3e:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:6E:88:36:E8:37:F4:A4:61:E4:39:8E:EF:38:03:7E:56:4E:98
X509v3 Authority Key Identifier:
keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:52:66:79:98:2e:2d:ea:11:c8:95:7c:50:14:b4:38:f1:9f:
13:45:bc:f0:c8:8f:25:3a:70:52:7b:2a:f2:de:bd:11:4d:77:
dd:6c:ae:29:82:99:c5:b4:56:15:13:42:d7:8d:04:cb:47:55:
f0:98:fe:ae:9e:c8:66:3b:23:bd:9e:17:a9:72:06:0b:8b:89:
1f:c9:f4:a4:a2:19:ec:b1:89:82:f8:97:41:aa:c2:6d:d5:74:
75:c1:6e:44:70:1d:ae:a4:ca:60:1e:65:8f:eb:f6:79:50:ac:
2c:99:da:0d:f5:fb:60:82:50:8a:26:49:27:ea:ae:55:3c:ad:
a2:20:57:68:7e:68:18:a8:bd:b8:9a:d8:d3:64:cf:cd:ad:4d:
70:0c:50:37:61:6a:38:e7:2c:ac:b2:2f:bb:e7:68:32:02:56:
20:08:6a:5c:8e:82:5e:e0:1c:71:26:22:74:2c:df:4d:da:b8:
8c:8f:0c:7e:ef:ad:67:6c:9c:cc:08:2d:b5:4d:eb:76:35:23:
0b:89:71:52:e5:59:ab:4f:e9:06:0a:83:82:0c:c9:63:f9:21:
66:0c:2d:4b:25:59:1e:28:c0:48:f4:d4:0b:f6:a6:ff:0c:f0:
53:06:8a:16:12:8d:f2:7c:cb:bf:fc:c3:e1:a1:cc:de:07:fc:
f9:70:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:40 2026 by rpki-client