Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: aA3P0mCIt3HgQtYIiws4y+46FXBmCf6wtlvPSuwsP/w=
Subject key identifier: F9:54:25:A5:87:F2:86:D5:DB:33:49:5E:FD:98:8E:AB:0B:41:6A:61
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 019D2583832868F08491A5CEF40F813DADAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 06BC
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: oj97Ng3JgLvsyAIw1yTVTtpM69s.roa (hash: vIQENoGSkGXr7OaQKpDZcQK7eabU4UndqxZJRNZu8JU=)
2: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=)
3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: Mf2O6+TwGZylyt9lJXmY35m9f/pFGUHwDBhdUPD2+Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:83:28:68:f0:84:91:a5:ce:f4:0f:81:3d:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=f95425a587f286d5db33495efd988eab0b416a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:be:3d:32:f6:40:96:8d:4e:c7:f8:7a:e0:
19:b0:36:4a:7b:de:a6:91:c4:69:f0:e7:50:c7:21:
69:18:87:62:1b:5c:b2:22:2b:5b:8a:5b:20:af:bd:
ee:dd:a7:3f:36:d7:63:95:ca:5b:25:c9:7b:6f:2d:
95:6f:0f:09:3d:97:01:39:cb:f7:1e:a3:61:65:a0:
00:77:68:c0:c1:9e:db:71:80:b0:01:4a:37:20:e4:
b3:99:06:18:9f:0f:50:83:cc:c2:4a:6c:3e:37:1a:
c2:a2:70:66:c1:42:8e:3b:b6:6e:0c:56:18:b1:a5:
99:f7:fc:a2:aa:0b:2d:b3:9c:d3:ca:69:52:f3:53:
25:2a:f8:d0:11:85:e5:fd:e6:d3:12:37:a8:11:e1:
d3:8e:b7:17:2c:61:c8:4a:2b:a1:71:e5:2d:2b:4e:
55:ee:36:99:e6:55:b8:3a:0e:f3:21:a9:59:2a:6c:
c0:4b:96:60:8f:25:55:72:77:65:d2:81:fe:d4:1a:
be:21:0c:f2:b4:55:47:97:de:f4:99:dc:64:49:d5:
77:fb:b9:28:b7:2f:17:a6:92:0c:b8:6d:dc:b4:93:
43:73:ed:3c:f1:d6:1e:be:3e:2a:22:e6:ca:99:08:
ad:ce:11:66:69:8b:0f:26:56:8b:4f:df:f2:a5:22:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:54:25:A5:87:F2:86:D5:DB:33:49:5E:FD:98:8E:AB:0B:41:6A:61
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d6:eb:eb:0b:f8:7c:06:94:f5:29:77:d6:dc:8c:4f:fd:dd:
fa:c6:de:ec:93:7e:da:72:df:e9:71:24:0b:22:96:77:6c:60:
f4:a4:cd:ba:a5:32:fe:81:dc:93:6e:d2:20:32:69:0e:4e:26:
a4:f0:71:a8:d6:34:56:e0:c1:e6:13:9d:f1:72:88:06:67:13:
01:a8:96:e2:7e:43:2e:f6:69:90:1f:f2:93:1c:98:be:63:d8:
31:00:83:56:5f:12:99:bf:a5:74:ec:84:79:b8:ae:ed:f1:4f:
28:d0:ba:4a:58:86:c3:d4:d4:f7:e1:bb:51:e8:b2:ce:24:d9:
6f:ea:d9:91:3a:7d:29:9e:5a:49:dd:f8:c9:d8:86:69:58:40:
d9:60:19:96:6f:82:c9:c0:87:cf:59:4b:0d:20:e2:ce:5a:c7:
ab:f7:f7:df:33:b8:22:42:91:6e:d1:78:f3:df:06:67:39:71:
ca:17:10:11:be:0f:61:69:76:c9:8e:2f:64:2b:3d:8e:30:36:
4b:45:7d:d2:19:b2:6c:39:2e:4f:79:83:27:0e:a1:45:84:91:
31:1a:c5:28:56:73:76:be:4e:ad:35:1e:a3:32:27:18:84:1b:
a2:8d:7c:b3:c8:3a:ca:b5:2b:cb:48:ec:67:b6:da:c9:87:50:
ac:7e:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:21 2026 by rpki-client