Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: uFsOY/J7cVtFvUZBm9zOOdxFJNChTXsDQHkqDtDcdEc=
Subject key identifier: 31:49:CE:36:51:FE:B3:AC:1A:A1:17:03:5B:36:09:13:B8:E4:0C:E7
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019D28BB8649E5ECE1BFF5CC44A17B4C5A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: KfNBAe8ac1ogPPZZ+yyQL7KOaFmZLg00R3MA6w3FqiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:86:49:e5:ec:e1:bf:f5:cc:44:a1:7b:4c:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=3149ce3651feb3ac1aa117035b360913b8e40ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:d5:d8:52:0c:eb:1e:83:c7:7d:ce:8b:df:
10:13:89:49:31:6b:90:fd:f3:26:3b:04:18:f0:6f:
4e:f1:aa:29:cb:b2:2c:e5:39:98:61:8a:5b:5b:e3:
65:7e:dd:30:7c:cc:53:8a:56:6a:9d:38:50:01:38:
f9:74:f9:07:fd:40:d4:f7:d1:12:1f:7f:80:de:13:
5e:89:aa:30:12:a1:cc:10:8f:ab:9c:ed:75:ec:1b:
bd:6c:69:d2:d1:24:b5:a1:82:aa:d6:95:a0:49:e8:
b7:0d:d9:20:20:07:17:64:54:aa:a9:25:27:9e:19:
02:21:5e:1d:b8:71:fa:44:3e:87:89:a4:63:d5:9b:
cf:41:3c:de:c1:e4:6a:7b:65:9a:93:b9:e3:03:f6:
a0:4f:51:f0:7c:d9:92:bc:94:98:6c:ae:0d:e6:de:
c2:30:f7:32:f4:72:32:c7:86:17:bd:8d:19:6f:e5:
cf:6d:e3:d2:9c:a2:b5:8b:3b:7e:87:f8:5f:df:e4:
bb:67:5c:fc:c0:37:f2:ba:47:49:b2:d0:5d:77:bb:
d3:33:19:b3:1b:06:51:59:e6:60:e7:d2:86:44:29:
5a:6b:e9:56:8d:d2:38:9a:d8:4f:86:59:83:b7:73:
51:79:40:b4:91:10:65:88:7c:0f:8d:e0:2c:42:2e:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:CE:36:51:FE:B3:AC:1A:A1:17:03:5B:36:09:13:B8:E4:0C:E7
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:31:41:58:4a:f4:d5:8d:3f:b2:fd:0f:d4:53:00:ba:e1:a8:
be:30:a8:61:dd:dc:42:ee:33:66:0a:33:2f:a7:bd:5f:15:9a:
f1:73:58:d6:18:04:7e:14:59:49:9d:4e:38:1a:78:01:2f:34:
7b:72:0f:88:a6:cd:40:df:dc:0b:5c:cd:2c:cf:40:db:13:03:
33:23:8e:31:39:98:c2:a8:32:c2:ff:81:c8:e6:2c:6d:2f:b6:
63:c0:a2:1b:c8:2d:72:b7:08:7a:a6:44:e2:0f:73:bb:36:bd:
6d:f7:90:af:f9:98:47:d8:3f:d0:ab:9f:77:39:c0:2d:c9:1d:
c5:7a:83:7c:b8:b5:ad:d4:86:9b:4c:44:28:c8:26:53:a3:bf:
3b:08:86:4f:46:86:54:5e:f0:45:a8:29:57:08:95:32:7c:3b:
e8:4a:2d:9c:c3:93:53:98:89:f6:a4:1e:c7:61:81:42:db:04:
20:35:59:50:8c:61:0c:96:81:8b:86:85:ea:01:05:17:be:09:
2a:12:ae:53:44:83:84:a3:15:0f:ec:72:af:f6:b0:31:88:98:
ef:f8:0d:a8:70:e5:83:47:0d:f9:43:00:0d:af:b8:65:01:c7:
27:9f:75:d4:09:6c:92:50:9b:6b:5e:c5:69:58:0e:c3:bb:e7:
09:d7:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:41 2026 by rpki-client