Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: 4WertH/81KCHBt/gKhzkhCIfe81ygniZW5IT0RjT5ME=
Subject key identifier: 88:0B:80:ED:80:76:FF:76:49:51:04:76:6F:A8:A2:E3:D8:A6:7E:54
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 019D2960CE6562D7C562FE93684CFF750C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 1664
Signing time: Thu 26 Mar 2026 09:01:43 +0000
Manifest this update: Thu 26 Mar 2026 09:01:43 +0000
Manifest next update: Fri 27 Mar 2026 09:01:43 +0000
Files and hashes: 1: smH8IDaU7mi6eo7ubYIhaO6o_IM.roa (hash: zUmgtKSpqk5n2lEgS4LMSnmGpaSRvnHOfoCAI5v+7/g=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: sZrggNRASjB7eZ/A0ThUt/PZ5R25GnLKofiqwl5HtxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ce:65:62:d7:c5:62:fe:93:68:4c:ff:75:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Mar 26 09:01:43 2026 GMT
Not After : Mar 27 09:01:43 2026 GMT
Subject: CN=880b80ed8076ff76495104766fa8a2e3d8a67e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:17:2f:52:d5:93:58:23:cb:22:b7:89:d9:
99:8b:b3:90:c4:ec:72:ab:4f:40:89:8e:b6:7e:bc:
13:92:4b:68:c1:b3:fd:84:a5:bb:74:42:b9:5d:e6:
f4:58:21:bf:ff:40:21:f9:a3:ea:75:b0:8c:5a:ea:
f3:c5:80:7b:2b:52:2b:af:2a:e3:37:be:b8:e4:c5:
34:67:96:5a:ab:81:25:30:56:40:79:76:68:db:ba:
05:cd:20:b3:5a:3c:64:2e:ca:2f:4c:b4:85:2a:38:
46:43:c4:0b:c5:d4:11:fa:c6:39:01:dd:99:96:5d:
10:40:d6:fa:37:fe:6c:c2:92:0e:6a:f1:15:35:ed:
75:32:d4:9c:95:07:74:77:a3:c5:8e:88:9a:1d:6a:
6f:7d:da:e7:5b:da:15:9c:d9:76:93:ea:b7:63:eb:
14:02:9d:17:bf:23:16:68:b9:1f:43:82:ee:de:4b:
ed:fa:b8:cd:fd:0a:c8:40:28:95:df:5f:f8:c7:bb:
ff:ea:60:be:d4:3b:ff:8d:d4:c0:b6:54:40:d4:48:
e4:c4:97:ef:5d:ed:85:2d:1b:49:f7:fc:0a:d1:4a:
ab:c2:7b:ee:cb:9e:df:a8:ad:43:f7:e2:ae:93:74:
b1:27:b0:19:2f:ef:eb:59:68:18:8e:65:d8:57:b3:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:80:ED:80:76:FF:76:49:51:04:76:6F:A8:A2:E3:D8:A6:7E:54
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d4:a9:b6:8a:0b:26:ac:3e:e5:0d:39:f1:2e:34:75:e1:39:
fb:fe:d7:5b:d1:00:20:e1:f7:5f:e7:60:fe:77:8b:47:d9:48:
be:c4:41:03:52:d2:30:6a:bc:3b:ab:ca:1e:72:6e:81:65:68:
46:54:64:8a:a4:2e:b5:ed:7e:63:35:62:81:f8:21:15:62:31:
3a:fc:1d:12:c8:b4:32:40:42:73:83:8b:37:56:20:d9:98:08:
04:b0:17:47:e2:38:7d:bf:f7:94:a8:78:7f:48:3d:b2:84:a4:
d8:91:d7:b0:e8:fd:74:c9:c7:97:58:ae:94:cc:d6:99:3b:65:
cc:de:13:25:cb:dc:e0:37:db:bb:c4:8a:29:82:3c:4e:4a:21:
cf:62:e4:b8:37:04:2f:d8:7a:6b:43:dd:14:1d:16:8d:f0:c1:
a1:ca:71:b4:42:18:c3:39:ba:9a:42:cd:c6:05:5f:c8:c4:8d:
13:07:3c:a2:43:41:18:69:c4:e3:d1:5a:de:cb:19:2c:de:0d:
55:ec:66:5b:44:ef:4b:bc:57:72:a0:31:9d:ae:92:8a:46:a7:
2a:bf:28:f9:21:d3:34:18:36:95:3e:92:03:47:c3:fd:32:0a:
11:73:66:5e:e5:17:fc:7d:14:e1:53:ff:cf:7a:ba:bd:75:38:
14:2f:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:09 2026 by rpki-client