Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: nfBHxrqqbwlbKpx+pfJpGvzgcqrNMjmrhjgV/Hb1/sA=
Subject key identifier: 8D:A6:07:92:67:EB:68:FD:A9:7D:6B:90:31:34:5D:B7:A2:83:F1:84
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 019D2AA97DA3DB7A8C6DBF2D2E5451BBD308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:00:43 +0000
Manifest this update: Thu 26 Mar 2026 15:00:43 +0000
Manifest next update: Fri 27 Mar 2026 15:00:43 +0000
Files and hashes: 1: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (hash: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: 2auMFF/cMST48ZQy5Yuxg6yGuw4xMSzR5rWXlndWE7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:7d:a3:db:7a:8c:6d:bf:2d:2e:54:51:bb:d3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Mar 26 15:00:43 2026 GMT
Not After : Mar 27 15:00:43 2026 GMT
Subject: CN=8da6079267eb68fda97d6b9031345db7a283f184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:ec:a2:f0:fe:08:6d:01:01:d0:44:4c:20:
f2:2b:62:d3:bd:f8:69:b1:2e:ea:c0:02:ec:b6:63:
5a:57:c7:73:d9:4a:53:f2:fd:39:d1:7f:ad:23:e4:
4a:9e:db:4d:d3:88:9b:e5:a3:46:b3:bb:a0:95:4d:
99:6d:fa:75:61:d4:cd:2b:a3:90:1c:4d:60:a1:9f:
79:96:6a:d6:f7:2e:0c:79:63:09:a1:dc:44:8d:2e:
fb:8b:b7:52:c7:b3:dc:ac:f3:77:77:6b:4f:59:58:
2a:86:05:0c:9f:fc:b7:55:b2:b5:8c:e0:45:78:b9:
f9:e8:48:93:a4:36:0a:80:2b:52:8f:fd:58:8b:b4:
8f:40:a9:cb:a6:c8:f8:41:31:53:45:91:97:84:59:
27:37:ef:8a:ca:1c:7f:9a:57:f8:66:a0:e5:19:02:
d5:15:2e:e1:3a:7d:2a:6e:6b:3e:a2:e3:53:6c:28:
c2:1b:9c:5b:82:38:92:ab:5b:16:0e:ce:43:fe:22:
7a:50:34:c0:38:75:09:9f:e3:d9:81:a9:9c:f7:df:
41:81:82:1e:97:29:59:fd:38:fd:de:1b:7e:ac:0a:
90:cc:3c:8b:84:5b:65:ae:c9:51:8e:f9:ca:b9:e5:
6d:2e:59:dc:4f:d0:29:03:38:5d:29:17:1c:3c:f4:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:07:92:67:EB:68:FD:A9:7D:6B:90:31:34:5D:B7:A2:83:F1:84
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8a:54:8b:65:8f:fb:8e:e9:b7:f9:d3:0d:ab:96:77:6b:be:
0e:65:1d:0c:33:f7:b8:5a:03:66:77:b2:d5:9d:ab:7f:26:ff:
53:1c:52:2a:e1:29:83:e6:2e:18:5e:0b:76:4b:a4:e2:73:8b:
ad:52:06:12:bb:4c:13:da:c3:6e:b6:ef:a2:6c:82:e6:75:e4:
37:2a:18:99:c2:61:4b:2b:50:b9:a1:b5:3f:fb:60:48:41:4d:
29:d6:81:d3:e2:bd:75:8a:c3:c9:d1:52:e3:2e:d1:2d:68:00:
ee:7d:ec:62:fd:36:3b:64:8c:c2:56:3d:b2:b2:c2:9d:8a:0f:
ab:53:48:55:94:9f:5e:d0:aa:42:fc:53:35:58:5b:07:68:ee:
f6:43:3b:66:4c:b1:44:9d:09:75:5f:21:0b:40:b4:04:4a:c1:
f0:03:3b:d5:bb:4f:55:95:a4:36:d8:6e:d6:f8:68:54:b9:31:
bf:80:39:0b:92:e8:3c:c8:b3:09:82:d7:7e:3e:ec:e3:f9:d5:
b0:23:e6:39:5d:1e:02:f0:8a:7f:9a:d7:94:d4:a4:f4:51:3a:
dd:e1:5c:7e:87:2d:44:c7:74:8d:ce:e1:75:bd:ed:20:80:7d:
64:0d:cd:94:49:ce:69:85:5e:6d:e7:2f:3a:b0:9a:0b:74:cc:
ab:b7:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:54 2026 by rpki-client