Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: 4WWlYZ95K8+mJRqrZ3+/e57JtXi4fARHLhfmhqbG+fQ=
Subject key identifier: B3:40:0B:64:82:EB:1F:97:74:AE:E7:F6:5C:27:8E:2F:8E:8A:47:05
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019D2A3C363A77B06347968BB892E201D3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0EDC
Signing time: Thu 26 Mar 2026 13:01:22 +0000
Manifest this update: Thu 26 Mar 2026 13:01:22 +0000
Manifest next update: Fri 27 Mar 2026 13:01:22 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: QuUW8bYTWegfOV9HhNzTGZkaFLCmo06jhKgulAOYq+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:36:3a:77:b0:63:47:96:8b:b8:92:e2:01:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Mar 26 13:01:22 2026 GMT
Not After : Mar 27 13:01:22 2026 GMT
Subject: CN=b3400b6482eb1f9774aee7f65c278e2f8e8a4705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:36:b9:22:ed:ce:2a:91:1e:88:49:81:39:
0f:49:57:69:f3:22:bb:3c:9c:8d:a4:92:87:d9:71:
3c:6f:45:1a:3f:da:cb:3a:38:e0:d1:54:d7:62:db:
f8:57:6a:63:5b:19:fd:11:9f:ee:22:88:38:69:fc:
cb:35:90:b5:3d:ab:b8:62:0d:19:39:e3:7d:6c:c5:
fa:f4:a9:ed:ba:6d:5e:ad:e2:63:6a:2e:0f:a0:cf:
57:6a:19:f5:95:57:66:36:4d:97:f5:ee:74:70:ef:
59:b7:f8:86:26:44:c9:56:e2:27:65:2c:eb:da:00:
84:ee:eb:31:a9:25:c1:f3:bb:71:eb:80:1a:c0:f4:
bd:a2:00:f3:f6:8e:2d:64:66:f4:ef:7d:a0:f5:37:
08:bf:45:06:4e:b5:86:9b:c1:4e:f8:29:7e:f2:16:
2d:e0:bc:22:74:8e:63:49:65:1b:3e:81:7e:9d:05:
31:a4:cb:38:a6:5e:6d:9f:d8:ad:2a:dd:38:45:28:
0b:64:35:6d:be:a2:a2:78:ce:3d:05:3b:2f:23:ce:
60:e5:f6:0c:bf:fe:e4:b7:79:b0:29:36:c0:82:f9:
fe:6f:85:6c:bf:85:de:f8:57:39:c1:2e:c9:aa:0c:
21:09:e6:df:0b:b1:1c:5b:1a:68:b2:ca:d4:95:70:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:0B:64:82:EB:1F:97:74:AE:E7:F6:5C:27:8E:2F:8E:8A:47:05
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:2e:ca:4b:d9:d7:83:87:c2:df:22:fa:26:09:36:76:a9:
c8:7d:42:d4:4f:52:e2:61:fd:86:82:f4:5c:28:a4:5a:8a:cb:
30:0d:65:ee:6c:cb:b0:ac:c8:de:c1:f9:37:b6:39:4f:e2:f6:
a2:37:ff:fc:7d:01:44:e9:32:09:c2:3e:f6:a6:37:7a:f2:ae:
14:99:88:5a:cf:ab:04:5c:dc:a6:a7:a2:c9:ed:03:29:39:5a:
45:2c:4d:31:30:aa:0b:92:99:a0:00:45:25:d6:0b:4c:e0:0c:
b1:b0:f5:e7:c5:41:6c:d8:00:14:46:dc:dc:74:1a:91:ee:42:
a4:4e:32:ab:82:ff:bc:50:b8:45:ea:65:20:57:10:09:5e:47:
ae:2d:db:53:b4:b1:a4:8d:38:a2:5f:e6:f2:83:a2:32:43:cf:
55:28:86:b2:bb:f8:75:a0:d1:30:2a:58:65:f0:79:f2:c2:46:
9e:ee:3c:de:51:26:0d:da:62:6f:30:3a:b6:a9:4b:89:5c:23:
54:8e:6b:b5:67:b4:ce:ae:99:69:cd:b1:6d:84:ab:4b:fa:e1:
d3:2a:35:15:37:ea:e3:96:8f:27:45:01:fa:d1:3c:25:45:52:
38:89:55:23:b0:36:00:da:22:11:04:17:b2:9c:c1:ed:79:d5:
86:3e:5f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPDY6d7BjR5aLuJLiAdPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlM2Y2ZDdjNmNkODMzYmVhNWRhZWQ1NzYyNTdkMmEzNDgy
ODI5NzEwHhcNMjYwMzI2MTMwMTIyWhcNMjYwMzI3MTMwMTIyWjAzMTEwLwYDVQQD
EyhiMzQwMGI2NDgyZWIxZjk3NzRhZWU3ZjY1YzI3OGUyZjhlOGE0NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0s2uSLtziqRHohJgTkPSVdp8yK7
PJyNpJKH2XE8b0UaP9rLOjjg0VTXYtv4V2pjWxn9EZ/uIog4afzLNZC1Pau4Yg0Z
OeN9bMX69Kntum1ereJjai4PoM9Xahn1lVdmNk2X9e50cO9Zt/iGJkTJVuInZSzr
2gCE7usxqSXB87tx64AawPS9ogDz9o4tZGb0732g9TcIv0UGTrWGm8FO+Cl+8hYt
4LwidI5jSWUbPoF+nQUxpMs4pl5tn9itKt04RSgLZDVtvqKieM49BTsvI85g5fYM
v/7kt3mwKTbAgvn+b4Vsv4Xe+Fc5wS7JqgwhCebfC7EcWxpossrUlXBQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNAC2SC6x+XdK7n9lwnji+OikcFMB8GA1UdIwQY
MBaAFL4/bXxs2DO+pdrtV2JX0qNIKClxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQt
NDNkMDE3MDk0ZTczLzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQtNDNkMDE3MDk0ZTcz
LzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzYuykvZ
14OHwt8i+iYJNnapyH1C1E9S4mH9hoL0XCikWorLMA1l7mzLsKzI3sH5N7Y5T+L2
ojf//H0BROkyCcI+9qY3evKuFJmIWs+rBFzcpqeiye0DKTlaRSxNMTCqC5KZoABF
JdYLTOAMsbD158VBbNgAFEbc3HQake5CpE4yq4L/vFC4ReplIFcQCV5Hri3bU7Sx
pI04ol/m8oOiMkPPVSiGsrv4daDRMCpYZfB58sJGnu483lEmDdpibzA6tqlLiVwj
VI5rtWe0zq6Zac2xbYSrS/rh0yo1FTfq45aPJ0UB+tE8JUVSOIlVI7A2ANoiEQQX
spzB7XnVhj5f9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:38 2026 by rpki-client