Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: cmlZVjoPFVApoGwAczmGEMKR9tFrpPk3GgkmZxz8Cdo=
Subject key identifier: 61:59:C7:2A:99:A7:2C:FC:C0:9A:26:83:CF:9C:05:41:4D:50:1B:47
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019D265F8938FF47D7010FDACFD2D4563D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0C87
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: aXt8dVVjMCWV6VAKyaUMyxoE62DYEKPEfrMtk6lqtsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:89:38:ff:47:d7:01:0f:da:cf:d2:d4:56:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=6159c72a99a72cfcc09a2683cf9c05414d501b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:a1:4a:e0:24:aa:58:64:b1:51:61:9e:a8:
c2:7a:fd:3a:52:6d:94:3a:a9:51:88:b1:e2:06:66:
74:49:d6:f1:5d:0a:0c:c8:b3:ea:2b:fe:58:76:6e:
f7:dd:81:2e:10:32:1b:a8:65:34:68:aa:1c:0e:d8:
3f:3b:ca:07:26:11:a0:d8:f2:5b:19:af:ea:ed:c9:
b4:ba:1f:d3:a8:48:d5:52:21:ef:0d:98:1a:f7:96:
81:85:36:e7:fc:26:f9:2e:88:03:8b:fc:d4:e2:20:
f6:e0:1d:63:5f:0c:ea:54:27:9f:28:d8:f1:5d:af:
3e:e8:9b:83:bd:cf:28:da:44:f9:9b:5b:0d:3d:45:
88:60:8a:1e:8b:c0:1a:0b:74:39:cc:0c:9c:e8:39:
6d:e0:9d:6b:b1:1f:d6:b9:99:cf:2c:4f:4d:14:90:
eb:32:42:b1:bf:81:e9:8f:b4:e3:ba:9c:1d:98:d8:
cf:ee:2f:6a:22:1f:85:31:67:2b:80:61:d4:e7:8d:
8d:10:0b:ba:76:4e:c4:d1:90:d9:a8:dd:eb:b8:1a:
ad:9d:70:7b:07:41:40:e1:d9:ae:49:bf:43:45:d6:
43:32:a0:b8:e4:6c:3f:f2:3e:b7:84:ab:b3:85:c3:
83:72:78:94:9c:13:b4:5e:5f:b3:17:09:9e:ae:f5:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:C7:2A:99:A7:2C:FC:C0:9A:26:83:CF:9C:05:41:4D:50:1B:47
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:90:7f:10:87:8e:af:aa:21:5c:19:1d:ca:6b:69:3e:ce:22:
a5:b7:53:c4:0c:86:f5:4a:8f:69:22:66:dd:e5:f9:cb:e9:5c:
f3:41:b3:d5:fd:a4:86:88:3d:06:a0:7c:30:6c:a8:54:20:de:
00:07:ad:73:1a:20:c7:82:5f:c5:71:84:9b:80:f3:fd:4b:d9:
05:6a:8b:b0:bb:c0:ea:f7:1f:90:5f:94:6f:04:89:ab:72:2c:
39:f5:42:ad:f2:ca:66:26:85:63:87:86:f4:08:a0:13:c3:6c:
22:51:55:73:8a:3f:6c:55:43:c7:e1:52:2d:30:68:95:7d:29:
16:4c:74:9b:3e:a5:10:8f:53:1d:05:d1:c1:42:83:6a:0c:f3:
f5:00:32:04:19:fc:92:c3:97:7e:16:4c:d6:a7:2f:e4:39:27:
fc:9e:93:ea:fb:32:1a:55:b0:ca:85:3b:9a:7f:c8:8b:e9:21:
89:8d:94:f4:af:9a:c9:7a:ea:d3:87:e2:99:d9:bf:ce:c3:9c:
50:b3:a1:27:2b:bd:be:87:05:68:f4:33:38:e4:35:74:6e:6a:
40:69:54:c7:db:8d:a4:03:73:54:f3:37:9a:39:9c:62:73:9a:
d5:20:10:d0:0a:4c:f3:e8:ed:83:ff:e0:0f:01:82:e8:64:bd:
ce:b2:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:48 2026 by rpki-client