Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: y/7DMc9Wuj1/nKsYGY5P2JO9sWeBXzhRWIJPG1U40Kk=
Subject key identifier: 9C:AD:24:B3:16:79:E8:3E:8E:30:28:AF:58:D2:6D:AF:96:A8:D4:EA
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 019D284DA9B8BEE65BEC115214B93F37A880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 03D2
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
2: viphXepqVOryff6ZwH483I13X74.crl (hash: QoTtiw7e2MAIaCe9C3Yrp9cF0rtN2FERuuW5MabGpq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a9:b8:be:e6:5b:ec:11:52:14:b9:3f:37:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=9cad24b31679e83e8e3028af58d26daf96a8d4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:d0:bb:f7:41:45:1c:46:07:1e:3c:f1:09:
62:25:92:58:26:92:d5:b1:04:f2:79:54:7f:c9:65:
a8:9e:7f:8c:52:e5:57:39:72:01:b5:a6:79:61:3d:
45:f4:a0:bd:3b:31:6d:d8:9e:5a:dc:31:5c:34:01:
7c:d3:87:e3:c3:b9:34:31:c0:e2:ff:ff:82:e3:1b:
a1:9a:29:b2:27:48:81:c8:5d:89:cd:2d:68:07:36:
24:95:1e:d1:67:40:e7:01:4f:66:fd:8f:aa:74:c7:
51:89:1a:29:8a:a5:38:f4:f8:65:81:c2:3b:ef:2b:
57:4e:75:25:40:4f:2a:a5:48:06:fe:69:50:be:80:
c9:c6:eb:c7:6a:af:ec:cb:06:b7:ea:15:bf:c2:69:
14:78:0c:15:dd:76:b1:9f:95:93:60:69:19:c4:1f:
77:2a:1f:e9:ee:ef:d7:8f:51:e3:2c:94:68:a5:99:
9f:b0:14:52:e3:e9:68:aa:b6:22:76:5c:98:07:e4:
b1:67:86:7e:5c:f8:82:62:e1:e2:6a:eb:67:a0:83:
4c:eb:f5:54:45:45:5d:98:16:c0:fd:eb:25:73:68:
cb:ca:6f:9e:18:12:83:df:dc:ef:bd:23:3d:2b:7b:
fa:3e:36:39:a6:c3:64:36:ae:f9:bf:0b:73:c7:b4:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:24:B3:16:79:E8:3E:8E:30:28:AF:58:D2:6D:AF:96:A8:D4:EA
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:65:47:0d:f8:b6:77:8f:b5:f1:1e:98:88:46:68:40:8c:93:
5e:91:51:0f:0f:c9:4f:52:55:1a:c3:dd:da:91:4f:15:00:76:
7e:85:0c:49:54:71:c6:8b:a8:a5:e0:e6:54:88:97:cf:63:20:
e5:f5:a9:ae:82:77:6a:70:da:b4:57:67:cf:a2:8d:90:0c:19:
ad:8d:a0:23:a4:c0:04:1a:37:e2:88:5e:41:87:31:44:3a:f1:
a2:24:4d:aa:ff:08:76:05:34:13:be:83:e4:30:ed:1c:d8:66:
d2:46:dc:2b:e0:0e:4f:c6:45:c3:ed:0b:b7:d7:ec:d8:87:22:
ca:ba:48:04:2c:71:74:b8:a6:23:26:db:75:3a:a9:b0:58:1d:
eb:57:68:4f:73:66:dd:a7:26:82:df:8c:87:60:20:c1:90:f9:
d4:9c:31:af:0d:ba:73:08:42:93:1d:cc:00:5f:9d:0e:f1:18:
ed:63:43:61:fa:e1:be:4b:e7:43:30:3f:81:0e:8c:51:c5:3c:
82:c2:cd:08:ac:16:46:25:c1:eb:74:50:ea:44:8f:7d:58:fb:
69:df:30:d5:61:4f:3b:9e:87:df:08:8d:fc:33:f8:ae:a3:a2:
e4:63:1b:fb:00:d0:3e:1d:3a:f2:ca:8f:2e:f1:2f:1a:86:51:
05:99:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:13 2026 by rpki-client