Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: H7dB+xb6ZVVR3ERFN/lCFeKQd3oEAkb/fHN4bpahaGM=
Subject key identifier: 51:DA:EB:EF:D1:54:D3:4C:65:91:C6:38:1B:D0:DA:BD:D5:E8:8D:EB
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019D265F7D4A32A586C0DB61FC6492CEE24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 15D2
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: 341ViOQdsNCW-En8QgEMghW3CrA.roa (hash: ZDMhvpmhtSILebU2dF818x+O1gwwEqpIPXCs7VmgQH0=)
2: EwqvsuzaZqidzerK9hCEUFqmQ00.roa (hash: GDEyHKgpCdUpHrUWgA6Yr0loRQV7nfKi6qOOjAkX3eQ=)
3: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: GS8StbsXR9x42vaDaUcJGgBBv1vrOB4jX14UvMDYjLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7d:4a:32:a5:86:c0:db:61:fc:64:92:ce:e2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=51daebefd154d34c6591c6381bd0dabdd5e88deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:90:5a:54:85:4a:9d:2b:51:70:8d:41:e6:
ba:52:10:96:fb:3e:1b:ab:aa:ae:5e:9b:78:29:ec:
03:87:7c:93:31:42:27:48:6d:f7:20:3e:92:fd:73:
13:2d:f2:8a:a9:c3:75:9c:69:80:88:b4:49:c1:4d:
e2:83:b4:34:41:5f:91:34:6d:50:50:26:61:ae:c8:
03:5c:02:76:33:d8:ff:91:4d:f3:70:3a:50:5c:6b:
ac:ce:50:87:2e:8a:6b:ee:3f:85:be:25:da:4d:dc:
90:00:e1:6b:5f:2c:65:20:9d:87:ad:c2:51:a3:ef:
5c:3c:b2:6d:15:3a:c4:4e:13:61:22:e5:46:95:fe:
9c:8e:17:c6:8a:15:8b:a9:e0:42:86:1d:81:4a:b4:
57:79:4e:9d:ba:2d:9a:25:2f:bf:ac:70:a4:28:96:
a1:43:a2:c9:7a:8a:37:3a:4b:8e:67:21:0f:fe:44:
f8:d5:bd:d0:43:77:ac:a2:93:7f:1e:a6:5e:1e:2b:
20:eb:16:d5:a1:61:f3:2c:33:9d:de:ac:51:a1:7b:
f6:04:b6:a3:68:5b:87:bd:df:7e:d5:f3:c0:f1:ab:
cf:7b:bc:26:c9:e9:05:70:0c:a9:59:4f:79:7c:d8:
ad:3c:81:37:76:d6:bf:03:e8:51:37:f6:3f:57:27:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DA:EB:EF:D1:54:D3:4C:65:91:C6:38:1B:D0:DA:BD:D5:E8:8D:EB
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:56:ea:5a:b5:d6:60:f0:47:82:dd:0d:80:7f:60:c2:3d:97:
75:87:25:66:af:58:a6:cf:18:47:c8:79:7d:11:cf:72:cb:a8:
a3:17:28:c2:59:01:2c:d3:e3:30:ae:c5:01:b6:3b:8a:8c:89:
a6:29:7b:dc:9b:d2:40:f8:ae:f9:b8:91:59:1e:8c:07:e7:de:
a0:2c:4f:65:e1:fd:16:c1:8e:1a:6d:87:8a:5b:d1:3a:e8:c2:
b2:3a:8c:8e:d4:e8:23:57:99:44:66:78:ee:d8:8a:0e:40:d7:
80:87:7f:ff:ca:e7:85:50:fc:07:a4:74:19:0e:87:d3:22:78:
dc:52:b4:e6:4f:56:28:c2:f0:79:ef:98:39:99:0b:53:81:3a:
27:ce:dd:1f:eb:4a:55:ba:e8:e4:6d:1d:7a:97:c3:1b:75:85:
d6:41:6e:5e:8f:4c:f6:08:ab:d3:dd:2e:d9:d9:67:b7:6b:8c:
f8:26:35:be:1b:32:59:12:a4:aa:db:08:df:9b:d6:a2:37:15:
bd:e8:e1:f2:71:ca:d6:62:7b:7a:46:02:80:5c:70:0e:b4:b4:
df:3a:df:bb:90:9e:da:11:2a:54:e5:13:4e:7a:97:bd:47:bd:
85:6e:cd:ad:7e:93:ce:ee:d1:06:a0:e3:68:b6:02:c4:83:1c:
80:21:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:51 2026 by rpki-client