Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: v7luverVtG0zV3rpVidPxQ6Gp/PD0SGpeBjeLj3zqBY=
Subject key identifier: 2E:3C:67:71:C9:F0:A2:AE:FB:96:47:39:6B:87:A3:D7:0B:A5:9D:FA
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019D28F25E7CEE5D47FB0E14342BCC19C338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 0371
Signing time: Thu 26 Mar 2026 07:01:05 +0000
Manifest this update: Thu 26 Mar 2026 07:01:05 +0000
Manifest next update: Fri 27 Mar 2026 07:01:05 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: l986NadCBmbMHQlSJq5kEUpOB7hKaw+JX5bWQ189lDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5e:7c:ee:5d:47:fb:0e:14:34:2b:cc:19:c3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Mar 26 07:01:05 2026 GMT
Not After : Mar 27 07:01:05 2026 GMT
Subject: CN=2e3c6771c9f0a2aefb9647396b87a3d70ba59dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:e8:b4:30:4c:37:b5:31:7a:c5:06:52:de:
82:fa:e4:15:7e:b2:e0:43:19:71:41:ef:fc:a7:92:
77:6f:52:ca:db:30:c4:2a:55:47:0c:a7:85:9a:d8:
ac:a8:4a:a1:f8:4b:ed:2d:39:74:c1:60:61:e7:92:
db:3d:7c:e3:37:77:c3:ed:f9:86:a6:cd:d8:ac:c4:
36:7a:30:10:98:bd:8a:83:0e:de:02:b4:17:00:ee:
17:9e:47:b1:c1:d8:6d:dc:02:86:7a:c2:96:20:69:
b3:cc:51:a8:52:1d:33:6b:86:3e:92:d9:01:cc:d0:
18:05:80:dd:e8:28:bf:16:39:7d:64:2a:e9:9d:4d:
16:0e:2a:52:61:66:2c:e6:14:c8:50:2a:13:de:b5:
37:d2:94:1b:97:a5:8f:61:6a:39:8f:f0:23:81:84:
b3:61:db:03:52:67:37:b5:7a:0a:32:e9:8c:5e:54:
7a:31:41:b1:c1:91:51:4f:27:12:7a:19:83:40:bf:
dc:e9:47:f3:a1:67:2e:95:6e:b6:f1:68:64:25:5b:
a1:f6:81:be:90:34:4d:11:70:8a:6c:90:04:b5:de:
cb:10:97:2e:b2:08:ae:e6:f2:fc:31:72:aa:cb:20:
ac:f2:bb:27:cf:53:f2:58:b1:2d:f4:88:cd:a0:ec:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3C:67:71:C9:F0:A2:AE:FB:96:47:39:6B:87:A3:D7:0B:A5:9D:FA
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0d:51:37:ea:d9:67:8e:63:e5:7b:4e:b2:61:25:57:28:86:
5b:cf:8e:dc:e5:bd:ec:12:94:bf:d5:8b:4f:5c:dd:25:5c:8f:
17:85:3e:2c:94:87:5a:ad:33:ef:11:77:2e:e3:bb:a3:da:b6:
59:9c:dc:4b:41:7f:e4:21:1f:11:f3:08:e9:ac:4e:7e:40:f4:
72:2f:46:68:4f:f6:11:e1:cc:39:60:21:cc:18:ad:45:f0:73:
1e:e2:cd:83:7a:8f:dc:90:f9:3f:ef:ea:6a:d5:70:1f:07:b6:
be:ad:17:86:d6:41:6a:13:e8:89:56:c1:e1:0d:21:2d:f5:fc:
13:67:55:fe:26:5c:4a:6c:48:13:59:9a:2b:05:21:50:de:ea:
a5:8c:24:af:89:23:21:60:15:93:f0:35:a5:5b:ca:23:78:da:
d5:7d:d8:ca:c1:09:7f:f9:83:26:98:5c:86:e3:a3:c6:4a:c9:
7f:ed:bf:d9:71:e0:fd:29:64:e3:69:eb:48:ad:b3:58:f8:d3:
1e:ac:14:c0:4c:51:58:e0:e6:2a:3f:9a:2a:f3:1b:51:d1:6f:
53:ee:08:db:1e:b9:eb:66:1e:d1:1c:e6:15:93:8d:f6:8b:61:
c2:90:22:89:cd:89:91:80:08:ee:3b:b6:9b:56:70:a9:dc:2f:
d0:03:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:23 2026 by rpki-client