Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier: h1Dieqd4WjtL7oqy2PTbZpUNyiAjjPk8m51e6EExmuk=
Subject key identifier: 9E:42:84:C9:81:87:B7:B9:D6:54:35:2B:33:48:DF:97:D3:1B:79:BA
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 019D28F26DE59C2A9A7C4D42455229BFDB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number: 1668
Signing time: Thu 26 Mar 2026 07:01:09 +0000
Manifest this update: Thu 26 Mar 2026 07:01:09 +0000
Manifest next update: Fri 27 Mar 2026 07:01:09 +0000
Files and hashes: 1: A6vGIJGT64W29On7fsToe2iuYDQ.roa (hash: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI=)
2: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (hash: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E=)
3: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (hash: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ=)
4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: BKZKrHcniY2n+IhgHvR2Erz2c7DxMAhV1RhADokY9L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6d:e5:9c:2a:9a:7c:4d:42:45:52:29:bf:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Mar 26 07:01:09 2026 GMT
Not After : Mar 27 07:01:09 2026 GMT
Subject: CN=9e4284c98187b7b9d654352b3348df97d31b79ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:cb:75:fd:f8:68:e6:38:56:a8:11:55:85:
f5:c5:d7:c5:af:97:1e:93:c9:8a:ea:da:f1:74:15:
91:9b:2c:40:c7:a0:cb:e7:d5:1e:6c:ec:8e:e4:1b:
ae:aa:93:cd:22:9f:27:09:19:28:b9:8d:df:8c:eb:
0b:c5:41:f9:a7:21:10:a5:ff:1b:cc:e7:06:e4:d5:
c0:7a:e2:d9:00:20:1f:96:c4:54:6e:5e:d7:42:29:
5a:38:c5:58:36:9e:fd:01:aa:87:4b:74:61:fe:0d:
6d:1c:24:08:03:83:9b:d0:3f:22:5f:2e:c5:bf:71:
68:7d:b9:df:b6:38:8d:ea:0b:42:96:dd:4f:d0:fe:
7f:90:a7:03:1c:d0:5f:1a:13:ad:10:7b:4c:51:2f:
5c:02:fd:d0:f7:20:02:20:dd:c8:7d:b1:42:44:cf:
59:56:23:3f:8f:c0:2f:54:56:f1:d9:de:6d:ea:d6:
9a:72:a9:21:46:32:b5:05:f0:a3:d5:cb:36:fb:6e:
ac:aa:98:b4:5f:f7:d1:4e:ae:25:72:5b:33:12:6f:
60:19:2a:a4:8d:2e:52:cf:92:26:f6:b1:e8:85:b1:
6e:a5:20:05:a0:16:aa:42:37:30:06:90:ce:76:23:
28:59:db:a5:97:c8:03:52:94:b0:41:e1:4a:8e:38:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:84:C9:81:87:B7:B9:D6:54:35:2B:33:48:DF:97:D3:1B:79:BA
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:27:45:f4:b3:8e:4f:11:05:be:8d:69:9e:6c:ba:36:69:17:
39:6f:b6:a7:a8:36:e7:03:c7:aa:80:72:1b:3e:b3:29:49:84:
be:a9:da:b8:f8:87:67:41:24:e6:2a:ab:cb:c7:2f:d7:29:1a:
73:70:4c:42:33:24:ae:3a:85:0f:2b:77:12:63:38:43:86:a7:
d2:0c:8d:17:c3:5f:c5:94:14:08:03:f7:61:dd:a8:be:d3:6c:
e2:ec:a9:ce:7f:53:0e:4c:02:d1:78:fb:0b:07:f6:e2:61:3a:
59:27:56:62:f7:9a:ac:06:d7:f0:d4:f2:64:02:9d:a4:d9:b0:
80:09:be:a0:23:5a:51:75:28:62:a8:a7:47:3f:c6:09:da:5f:
70:23:9d:1a:7d:78:34:60:bb:8a:bb:8b:f2:af:b7:b6:26:b9:
63:c9:5d:79:41:74:0d:f6:b0:42:d9:e1:ed:30:15:b2:8a:e6:
9d:ea:4d:da:f1:44:61:db:b4:06:e1:bb:22:68:9c:56:0e:97:
86:c0:68:62:af:e9:58:98:f9:33:ad:24:78:97:f2:11:a5:1f:
a8:4a:56:de:a7:ad:c1:84:2c:fe:27:8c:29:c9:4d:df:34:3e:
ba:df:81:b0:d3:df:0c:3a:20:96:db:ac:e5:9b:c9:50:cd:59:
7c:59:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:21 2026 by rpki-client