Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
File: vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json)
Hash identifier: 7EyZUtyaYnVd2w0bf4Auc82sKL2SCAPfVr7yoO4Ifvk=
Subject key identifier: 16:B1:29:0A:1F:FB:8B:1A:4D:3F:BA:6C:C4:57:02:60:4D:21:82:90
Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
Certificate issuer: /CN=be370733b8db614daa760a002c24048028300e2d
Certificate serial: 019D2771BA17DC3C77E63296DBC112B56A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: D-LoIPh4w6ZRPr6EB3oORu8b_qM.roa (hash: IJEKqU/hmkuGGlwqmZo6DWM0XWvE4LTwDePizqu7MS0=)
2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: HHKQlUQFXtP+ijAaXLI2ubBBz1np3rz29lSzIcLIhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ba:17:dc:3c:77:e6:32:96:db:c1:12:b5:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be370733b8db614daa760a002c24048028300e2d
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=16b1290a1ffb8b1a4d3fba6cc45702604d218290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:7e:e0:d1:d1:12:5a:d3:59:c9:98:3d:9e:
b2:5b:46:ed:d0:86:f7:be:3e:e0:25:c5:7c:d0:28:
f0:00:fe:a1:32:b1:95:a9:5b:db:1b:be:d5:72:08:
c4:dd:6b:cc:30:3a:38:de:64:92:d0:35:1a:b5:8c:
cf:b1:1a:83:da:43:55:cc:b8:07:81:e8:47:db:7f:
e5:22:92:cb:6d:1f:cd:7f:b7:cc:09:a1:4f:9e:74:
1f:0e:05:c1:1c:35:bf:fe:34:32:21:40:3a:ea:5a:
9a:0e:63:be:bd:67:bd:c2:26:e7:f3:dc:3b:76:a5:
7c:27:d0:3e:47:fc:78:ad:63:6b:d6:e3:9f:72:8d:
12:9e:44:ac:ec:5e:58:f0:30:4a:08:3a:e9:44:6d:
c8:84:9a:de:06:08:7e:6b:9b:5f:29:0b:2a:3d:d0:
57:de:46:95:64:68:c5:8c:1d:ce:4e:65:53:2c:06:
65:b7:34:12:4e:75:4f:32:32:0f:1e:2d:8c:75:6a:
87:db:f9:d9:c4:16:82:d6:a2:c0:cb:3b:a6:85:b2:
37:11:55:32:b8:27:48:b4:3f:a5:d4:58:71:0a:b2:
0f:a8:c7:cd:af:fa:58:34:3d:6c:32:2c:0a:1d:f7:
63:43:74:5a:3a:57:e1:b9:ea:b1:5e:1e:66:7b:12:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:29:0A:1F:FB:8B:1A:4D:3F:BA:6C:C4:57:02:60:4D:21:82:90
X509v3 Authority Key Identifier:
keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:09:6a:d2:a3:d2:75:d3:55:69:d5:1c:75:fd:98:43:7b:e9:
28:80:dc:f4:95:44:57:74:43:e2:7f:7b:43:dd:82:9b:9b:af:
5a:ca:de:c5:4e:6b:1e:61:76:d0:50:d7:3b:e6:05:e8:c1:05:
46:c2:84:0e:cf:bc:ef:a4:7c:05:31:09:89:46:13:01:d1:08:
23:e7:c0:ae:fd:d6:36:30:8a:e9:ce:cb:8a:b3:b6:6d:01:4e:
d9:fb:35:da:f2:00:3e:ad:d3:ab:20:3e:2c:fe:9d:a3:69:4a:
23:4d:e2:c6:de:55:3c:6a:ea:0b:0a:c9:e1:e2:b3:fe:26:18:
ae:d2:07:ca:25:7a:78:c7:ff:c8:d4:b9:a1:30:57:2d:9b:1f:
95:0d:96:51:9c:65:79:40:91:fe:20:02:ea:5e:19:f3:60:aa:
74:59:1b:51:0d:f5:38:b8:27:f2:4d:ed:fb:30:bc:7c:b5:b8:
b1:53:3c:c6:80:4a:8f:f0:81:80:d9:ba:2c:e0:86:6a:97:31:
50:a7:7e:77:4a:17:aa:91:dd:08:4d:41:40:e7:20:ed:68:d9:
18:99:82:ba:4a:3b:e9:2d:88:43:4e:38:ef:e4:4f:5d:98:4c:
c3:0a:53:53:70:70:7a:0a:13:e2:97:e3:dd:c6:95:06:2c:ef:
64:33:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:21 2026 by rpki-client