Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: V/vRnIjadSVaIkMXAfGY1GVsbw4dHqB5dZH4e5H8JOg=
Subject key identifier: 98:46:E8:42:BB:E2:DC:49:3E:37:F5:82:E4:78:CE:CA:08:75:89:99
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019D29CE4BB51EDD82C1A1A25EC92B67713E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0AD3
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: vy+lbxfqFL+puI6vKdyB6l4ChP+8NvhKq15Ohd4Chlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:4b:b5:1e:dd:82:c1:a1:a2:5e:c9:2b:67:71:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=9846e842bbe2dc493e37f582e478ceca08758999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:0c:08:17:b2:53:69:a0:84:73:62:36:af:
bd:d1:2b:74:ad:ab:88:77:d1:27:f7:9c:ba:a7:1f:
ae:af:71:69:44:d4:72:de:96:7e:33:30:21:c6:02:
d1:17:e5:9d:88:55:df:27:0f:0f:df:ed:38:03:84:
64:fa:8c:ab:68:28:c4:c4:be:8d:56:f5:2a:1b:00:
2c:06:c0:83:af:69:fd:42:ed:02:fb:90:e8:50:84:
a4:2e:3d:87:29:b5:a9:57:54:e5:1a:69:ce:45:bb:
a1:0f:89:39:1a:39:9f:b7:0d:11:61:29:6a:1a:a7:
3d:94:85:29:ad:99:82:b6:ff:09:c6:9e:cf:37:32:
7e:4f:71:36:15:23:d4:31:7b:69:9d:c0:9f:1e:04:
94:fd:9c:b5:b1:e9:02:dc:c7:09:99:f7:54:ab:c5:
54:68:43:3a:80:c9:87:9a:52:d1:ad:52:3f:d0:43:
af:e0:85:0d:a5:73:e0:b0:06:da:55:ed:c4:e2:82:
2e:74:a7:30:7b:9f:cd:65:38:c2:61:83:82:6d:62:
2a:6e:95:ea:8f:21:dd:02:47:c8:64:85:f1:0c:13:
be:0b:eb:70:9b:81:d8:34:ae:ce:56:cb:ad:f8:99:
18:03:35:45:ef:72:b8:68:47:d3:29:28:1d:09:0c:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:E8:42:BB:E2:DC:49:3E:37:F5:82:E4:78:CE:CA:08:75:89:99
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:19:a1:df:9f:11:57:e7:ed:99:e1:a2:32:49:0f:8c:82:6e:
31:17:75:1c:21:9b:5e:64:8f:ff:c1:7a:8a:68:7f:16:82:57:
1b:2c:17:6e:a9:ce:3e:30:a4:93:0b:02:a9:47:67:60:72:d6:
fb:90:0c:e6:79:1b:dc:64:cd:0e:a3:a1:bb:2e:1e:36:bc:6d:
fc:fb:83:0a:fb:31:34:0a:55:a9:f4:61:a8:36:a3:2a:b9:65:
65:b4:d0:dc:d5:99:4c:20:df:d7:86:8f:2d:8f:d3:34:28:00:
10:36:53:0d:e4:9d:06:30:57:9b:4f:d8:39:cf:a2:3a:f0:9a:
d3:b4:61:f2:76:b2:98:10:d9:29:ed:01:0f:5f:0d:02:27:a9:
29:2d:7c:68:d6:d4:ac:76:b6:fb:49:2d:2e:fd:9c:51:1a:07:
d9:24:b3:e2:97:62:db:3b:60:e2:7a:14:f9:e9:55:b5:cc:76:
4d:0f:bd:84:c4:7a:fd:c4:25:a7:8e:7b:bc:aa:2c:cd:73:31:
f6:51:17:9d:7a:3e:1a:3a:f9:32:24:40:30:77:f3:a8:f4:bd:
9c:97:2c:45:69:c1:a4:74:6b:a0:43:94:4d:cd:af:4b:74:66:
4b:f3:0b:26:f1:81:1e:cd:b0:bf:1c:4f:3d:c5:29:1a:42:28:
00:ed:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:51 2026 by rpki-client