Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: 7T95XbI7i07KDBSdeZ2dFocmrKp5LVG8fnTJrudta+s=
Subject key identifier: FA:BA:90:98:96:B2:9A:85:B7:42:2B:A4:04:C4:A5:40:4D:4F:B3:85
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 019D2772297749BBAC4A465D571F9D186B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:26 +0000
Manifest this update: Thu 26 Mar 2026 00:01:26 +0000
Manifest next update: Fri 27 Mar 2026 00:01:26 +0000
Files and hashes: 1: MyEobwPvVlPZfo18i7oAV1Xhf8s.roa (hash: +PGToJCT+bUcRHVwTrA1c0sAhKUye1v74DJg5l+yDRc=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: 8skuvxFPWEFEIFL56SZoxpMz0ySJBIeUnKiFNXTK7f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:29:77:49:bb:ac:4a:46:5d:57:1f:9d:18:6b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Mar 26 00:01:26 2026 GMT
Not After : Mar 27 00:01:26 2026 GMT
Subject: CN=faba909896b29a85b7422ba404c4a5404d4fb385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:84:93:6d:c2:6a:58:b0:bc:98:3d:56:f1:
4e:b9:ad:ec:26:5a:9c:10:28:a4:28:60:ce:e0:94:
f8:b7:b7:64:be:8e:03:7e:17:b1:a3:98:c6:29:65:
00:ef:92:fb:ef:a4:88:7b:9d:3e:38:21:c1:ca:52:
b4:a2:e7:b2:e9:a2:8a:2c:7d:71:cd:67:a0:e8:c5:
f9:da:67:a4:b3:92:52:7b:dd:47:7c:21:27:f9:ca:
e9:ab:bd:33:c5:9d:34:8f:d3:b0:b2:73:f0:21:c9:
3d:e9:c0:29:52:d4:1b:f4:60:54:ed:7d:6b:b5:87:
41:5b:fb:09:00:13:16:a0:ba:3b:a1:81:5b:41:fb:
19:9d:32:52:3f:de:7a:78:9b:b1:e8:34:f8:17:48:
db:0a:33:cb:ab:ab:26:44:7b:13:dd:63:2f:cc:82:
b0:a0:9c:e0:bb:3e:72:06:a3:8f:01:44:b7:59:1c:
b1:ab:07:6c:69:8a:4b:62:7a:2c:c0:b3:2e:9c:3d:
f7:89:17:e0:6e:3e:66:30:c4:ee:db:5c:7c:bb:57:
54:06:7c:1e:7d:3f:fd:2d:f6:7e:84:ab:7c:d6:73:
6d:df:74:0b:24:f1:95:b4:59:78:31:0f:73:8c:b3:
5d:3c:bd:44:05:d9:6e:9c:67:3d:fe:08:25:8b:e9:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:90:98:96:B2:9A:85:B7:42:2B:A4:04:C4:A5:40:4D:4F:B3:85
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e1:73:7a:0e:10:f5:43:f7:1c:b9:65:3b:b0:02:02:7f:66:
5b:9c:3a:c6:a8:1c:62:ce:f6:4b:36:4f:ae:3d:38:a4:04:6f:
fe:73:20:b0:5e:3b:97:85:f3:d1:e9:17:09:04:a1:0f:ec:00:
c2:7e:14:2e:f0:95:e9:2b:5c:18:ba:b5:98:37:ce:cb:03:92:
81:ef:d1:d5:3c:fd:c1:f6:a3:cc:52:88:8d:ab:3c:f4:ea:cb:
1d:5f:e7:ff:da:f1:aa:74:65:64:68:e2:64:e3:9b:d3:05:73:
ec:41:82:54:c7:e8:48:5b:dd:1d:10:93:fc:2e:f8:80:1f:60:
00:60:ce:4f:b3:7f:5c:74:1c:0e:07:f0:49:04:f3:d1:63:79:
62:2a:90:69:55:05:dd:fa:56:27:69:c2:45:ad:25:cb:d3:cb:
80:2a:87:37:8c:f0:25:41:36:51:68:f2:38:8b:73:f5:64:65:
a5:e4:75:8b:12:62:6a:8d:6a:17:50:cd:cf:37:df:e6:76:b8:
e1:07:74:f4:0b:7c:7e:e9:cb:a6:ab:d1:eb:a8:10:62:c7:b3:
35:ba:21:6f:e3:10:af:f5:cf:88:36:0d:15:70:9b:1b:f3:41:
bc:15:52:80:a3:03:fd:8c:84:b9:85:a6:3d:2b:6b:86:10:c9:
fa:2c:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:02 2026 by rpki-client