Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: R7KrIrg2GPxOAyqLMVrDbTR/WcHmoLJBsLRmW+5aX8g=
Subject key identifier: BB:12:B2:A2:93:D5:3A:F1:13:0A:FB:1B:8C:4E:68:F2:D4:34:4C:5A
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 019D25843BAFC6AA5B3B259AB56720AF5BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 063B
Signing time: Wed 25 Mar 2026 15:01:56 +0000
Manifest this update: Wed 25 Mar 2026 15:01:56 +0000
Manifest next update: Thu 26 Mar 2026 15:01:56 +0000
Files and hashes: 1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: DaT9R9+nBvGTBFfqit5Oev/yDYXtX40oysZ9+RNGyiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3b:af:c6:aa:5b:3b:25:9a:b5:67:20:af:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Mar 25 15:01:56 2026 GMT
Not After : Mar 26 15:01:56 2026 GMT
Subject: CN=bb12b2a293d53af1130afb1b8c4e68f2d4344c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:3e:f2:86:d9:89:b3:f3:c8:2c:39:3a:05:
f1:18:f7:df:03:6b:f5:fd:59:b3:77:15:98:22:9f:
61:3a:03:00:08:88:88:5c:bc:2b:a6:0a:0c:9b:af:
fe:1c:46:57:83:9e:58:9d:7b:1a:af:a3:65:80:82:
5e:9f:5f:a2:4c:5f:d5:23:b6:17:df:6e:ca:73:5d:
ff:8e:f2:b4:85:38:a6:b1:4e:56:c6:f3:a7:74:cf:
8e:60:15:f4:9c:ad:6c:13:23:2c:b7:cf:37:8d:6d:
d2:22:63:82:ff:59:33:17:e8:c5:d3:56:5d:8e:c9:
6f:e1:96:93:bb:f5:f4:6a:82:ad:4e:d9:12:46:2e:
dc:84:97:fe:78:04:04:f7:03:84:24:dd:9a:6a:46:
4e:73:89:f5:09:b4:a9:98:20:8f:53:31:b8:8a:23:
f9:24:b3:24:32:8b:28:85:0f:d7:52:0c:49:a2:56:
f3:65:a8:d4:26:ee:82:ef:c6:23:05:e2:d9:39:62:
18:1f:cd:ee:a1:ef:6a:d4:79:81:75:51:d4:9c:e5:
a9:62:9a:5c:52:e1:cb:60:a8:2c:f2:00:27:3c:4e:
ae:09:24:b4:ae:4a:d1:9b:2a:24:d5:2f:0b:2a:4d:
46:bc:ec:4d:ee:b6:30:e8:fb:8b:c9:a5:e1:da:4d:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:12:B2:A2:93:D5:3A:F1:13:0A:FB:1B:8C:4E:68:F2:D4:34:4C:5A
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:95:36:d3:ba:6f:fd:d1:02:4f:32:dc:23:40:b9:95:46:6d:
3b:ef:7c:fc:31:97:72:c1:3b:d6:1f:91:db:e8:38:61:fa:9a:
10:92:09:b8:15:cf:6a:74:d1:64:78:12:46:e7:2f:f2:71:b0:
45:e4:4c:02:05:3b:34:bd:85:c0:6a:1c:7a:c3:26:53:a0:db:
20:ae:20:1b:d0:dc:2f:cd:3e:18:90:cf:73:85:bb:85:9d:78:
cc:e3:19:36:50:a8:09:fa:20:9a:49:13:47:f8:e7:19:ab:4b:
ea:70:fd:e0:02:5c:5c:a2:35:32:f6:15:c9:5e:e9:0b:cf:f5:
fb:81:e9:a0:93:4c:f5:ab:dd:ed:45:9e:70:b2:ac:49:c7:a8:
48:f0:67:52:2c:d5:d7:bc:73:90:4e:70:33:72:41:ec:b2:88:
4b:c6:bb:2c:4f:d8:a2:ec:0b:b5:f7:61:02:ac:0f:26:f0:ef:
51:08:26:db:fc:0f:d2:14:a0:bd:35:75:9c:69:ea:f7:61:08:
9e:3e:03:10:c6:80:91:a7:25:1b:f9:3a:7c:72:f7:00:0c:b4:
f8:2e:2d:f7:41:1e:35:bb:65:5b:b2:93:9f:d8:d5:d8:f5:43:
f1:d3:ad:eb:d3:8c:45:36:81:03:b2:85:c2:47:f0:1a:81:eb:
30:52:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:03 2026 by rpki-client