Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: m2GLXS03gfJkK9OBjcguujWng/yEbn/Z3goPgceGE8c=
Subject key identifier: EC:5A:3F:C4:22:67:8C:E1:41:58:35:26:34:C3:3A:D2:0D:6D:71:CB
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019D26CD3FACF620A727B3948F43647C1F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: 3hz5kQ5AKRJZODWtKApFF3DoZujUOF/OzHlYIJq1/hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3f:ac:f6:20:a7:27:b3:94:8f:43:64:7c:1f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=ec5a3fc422678ce14158352634c33ad20d6d71cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:55:ef:70:f8:af:67:85:cc:6f:72:a0:18:
b0:ba:72:69:3f:9c:8a:32:60:7a:25:5b:f9:2b:9e:
9c:49:9e:5f:50:dd:49:2b:cb:83:56:38:04:e6:03:
6a:b1:23:89:f8:c8:14:4f:84:66:99:aa:b0:0e:9a:
a3:39:a6:46:b7:65:ba:1f:48:b0:b1:a0:cf:0e:4d:
b2:4e:2e:70:5e:1a:e3:c3:c4:66:1a:82:66:76:fd:
fd:a7:16:09:5f:f6:61:b4:1b:3e:98:1a:b2:7a:9e:
08:37:d2:79:b3:89:b5:b4:6e:3d:02:c2:91:50:b2:
66:fc:da:e3:6f:7d:05:89:6e:44:45:82:b1:da:40:
60:2f:59:e4:fb:4d:40:c0:da:c6:c6:81:25:6d:d2:
ba:8a:4b:1f:46:61:ba:02:29:a6:1b:49:38:6f:d1:
7a:c7:ad:da:84:96:95:da:77:8e:1a:7b:8b:a5:d9:
65:3a:dd:df:9c:a1:b5:8c:48:f7:fc:93:ba:7a:fd:
42:4a:f6:cc:00:c9:1f:5c:ce:e8:f3:cf:26:6e:ce:
fc:1b:ce:d6:8c:e9:5a:da:c6:72:0b:46:82:be:d4:
41:97:36:15:ae:f9:5f:4a:4b:21:a7:3d:d8:c9:35:
12:c2:fe:8f:a2:f5:9b:91:76:8d:72:97:09:f7:55:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:3F:C4:22:67:8C:E1:41:58:35:26:34:C3:3A:D2:0D:6D:71:CB
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:31:f5:54:0c:b8:9b:ca:58:fd:7a:75:48:1b:a5:41:9f:9e:
bb:f2:e9:b5:92:58:64:a6:0c:d0:20:f1:cb:0d:62:6a:56:a5:
b6:42:f3:49:aa:20:ab:34:bd:99:51:bb:2e:3a:a1:bb:dc:67:
29:7d:8b:5d:5f:69:49:01:6c:de:21:26:67:39:c3:76:7c:b5:
7a:24:e5:f4:5e:77:9e:db:fb:23:22:8b:b9:9e:9d:5f:4a:ec:
64:bc:48:6b:00:38:1e:c0:4c:04:6f:51:65:86:93:f1:b0:c2:
dc:bb:89:95:57:f8:06:69:94:6b:50:f6:9d:04:28:79:f2:cd:
32:23:bb:98:6b:f0:b2:2f:d2:0b:b3:cc:0e:76:7f:1f:7f:30:
94:3c:85:23:4a:2d:43:6b:ea:20:d8:4e:ea:40:3c:26:94:89:
68:76:dc:61:bb:4e:f6:0b:02:ca:6e:fc:3e:1a:ab:ea:fb:71:
f4:2e:d5:cf:51:a7:2b:fe:e2:c5:e3:31:f4:93:f3:7a:28:56:
9d:94:08:70:77:db:e5:bc:aa:cb:48:e6:ec:78:ef:95:9f:67:
84:1a:ef:e2:08:91:d6:0b:ea:e6:e5:84:65:e5:02:fd:e9:8f:
7d:ad:7a:62:72:82:ff:90:6c:cd:19:0f:b4:98:a5:e2:0a:6f:
de:0e:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:55 2026 by rpki-client