Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: XUW1dmbqbSyaHJYMlVVIkGe1rft/rMGwY7Jyuiibxss=
Subject key identifier: 37:62:AD:62:BB:12:F8:55:0F:6A:43:98:B8:E1:0C:EA:5F:B5:AD:D6
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 019D26CCD435C40CCDFCB4FB98582A183E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: QOx2LcItYAde8Bu7yyYezAd_b5U.roa (hash: recLbl2iES5/0aXRvjtkzbHI5bXaE/LjpnXC8P4lC98=)
2: QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa (hash: q6REhdk2/z8f63MlyAEiLr/0oQ0zIK2tSS3WmI/QIxA=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: nM0lGEsUqu75GRMtQX4yyYV3xZXPXyCgDSkQuobcZxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d4:35:c4:0c:cd:fc:b4:fb:98:58:2a:18:3e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=3762ad62bb12f8550f6a4398b8e10cea5fb5add6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:ae:6a:64:3b:19:98:4d:8e:b4:cf:d2:cc:
f9:c3:ed:91:37:9c:b9:8d:10:4b:7a:65:59:d0:cc:
50:b2:b4:78:cf:2f:e6:56:db:37:7f:fc:7e:dd:62:
ad:b6:18:e0:ef:b6:41:b3:27:5d:59:0e:16:7c:ad:
ae:80:c8:ab:65:38:84:97:53:e5:e8:8d:22:92:54:
68:fe:9f:37:0a:0d:29:b9:85:a2:fd:f5:71:3b:75:
f4:97:92:f0:a6:7c:b1:46:dd:bd:19:c7:23:e8:dc:
75:b2:15:4b:78:16:17:f3:43:3c:45:f4:3a:b0:24:
16:a5:9c:ee:bb:48:4c:3c:c6:aa:16:85:45:81:46:
e5:11:bc:6a:78:d4:e3:67:bd:83:75:3d:fb:8b:70:
28:08:4e:89:8d:6f:2e:e9:93:3c:c5:50:87:21:c8:
ed:fd:81:ea:ff:46:44:60:90:06:92:74:10:ab:09:
7c:e1:d5:22:6b:9b:fd:49:16:0c:9f:e4:a6:a3:64:
01:ac:d1:4a:20:92:9f:c7:5d:a6:6b:67:e8:1b:df:
13:5d:94:a6:ed:ba:34:f8:e5:6b:ea:c2:bf:63:cf:
6c:33:14:ae:d4:60:eb:ca:e5:ef:f4:ab:6f:11:ba:
43:b0:05:8b:d1:d2:8c:98:74:20:23:67:c4:0d:1a:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:AD:62:BB:12:F8:55:0F:6A:43:98:B8:E1:0C:EA:5F:B5:AD:D6
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:62:7e:6a:ca:3b:a3:96:9e:97:73:f7:5e:57:8d:77:50:a7:
36:c0:ce:c1:49:8e:93:f7:f5:5a:d5:c0:9f:41:6e:16:05:0b:
72:d3:24:18:d6:94:c1:aa:0c:1c:8e:74:ea:96:4c:0b:73:4f:
06:f4:65:58:52:8a:36:ee:1d:86:aa:70:8f:90:7a:b4:55:79:
d1:89:ef:3d:dc:3f:4d:0f:39:55:23:51:fa:e6:17:33:b6:94:
04:d0:d4:53:66:23:5d:18:ef:1f:ce:ed:0f:8c:9a:b8:be:2f:
e6:2d:24:9a:a0:83:38:35:75:2b:d2:3d:6b:df:16:a5:b9:68:
30:c1:91:b4:9b:dd:6b:14:ab:a7:9e:70:2c:31:d5:da:bd:63:
59:c1:99:07:23:db:a0:9d:f8:33:25:c0:df:7f:db:73:cb:41:
6d:79:ba:4e:8d:75:2e:50:79:90:15:38:2c:b9:df:c4:51:b1:
0b:fb:9c:7c:17:77:96:39:06:1c:91:04:52:73:9c:7f:dc:e4:
c1:41:74:bf:7e:b7:dc:33:38:c0:e1:a3:2b:26:c2:d9:fd:cc:
b2:8d:00:12:4e:42:4c:03:1d:fd:3e:e4:52:7a:8f:0f:03:4e:
4e:70:ef:97:25:d4:bd:a7:d6:1c:d6:76:f4:c4:23:ad:95:94:
2d:ee:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:15 2026 by rpki-client