Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json)
Hash identifier: RoqaX6ZomXVRCNl+UMjSyaSZgI2bvD5zkargTkUkgEQ=
Subject key identifier: C7:E6:70:08:69:74:AF:8F:61:FD:3C:B6:D2:72:8F:09:BE:35:4C:47
Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Certificate serial: 019D25BAB820AD4283C2319C341870E5DD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
Manifest number: 0829
Signing time: Wed 25 Mar 2026 16:01:26 +0000
Manifest this update: Wed 25 Mar 2026 16:01:26 +0000
Manifest next update: Thu 26 Mar 2026 16:01:26 +0000
Files and hashes: 1: D6FT3UwTdLs9gC1WiQiwIa_7mEs.roa (hash: Jy9CPzSOcDSc04gWq+va5Hkkp73DOKaunLfx7olDL2k=)
2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: JhxR5jjnKu7F2u46vCA5m4J0j6ALjJRZc6vygWxDEPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b8:20:ad:42:83:c2:31:9c:34:18:70:e5:dd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Validity
Not Before: Mar 25 16:01:26 2026 GMT
Not After : Mar 26 16:01:26 2026 GMT
Subject: CN=c7e670086974af8f61fd3cb6d2728f09be354c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:ff:f1:31:65:b0:72:40:1f:1b:4c:fb:7a:
53:2f:1a:67:98:be:3e:b8:2a:6d:29:5f:67:65:33:
66:78:5d:55:df:05:66:4d:db:8d:31:c3:39:2c:78:
b5:09:aa:c1:d6:66:c2:04:dd:0e:73:e8:25:fe:b0:
61:44:8b:79:59:74:15:65:03:eb:81:03:b0:c0:86:
b1:7d:35:c7:5e:c0:cc:e0:08:c2:5b:81:87:e0:70:
97:5e:6a:f9:30:ba:c0:8a:41:72:ef:f4:96:ab:d7:
50:39:9c:4c:ea:fc:71:14:b2:10:68:33:c8:78:23:
f1:6b:be:27:e0:88:a8:73:70:e0:6c:c4:de:5d:29:
c2:cc:1f:89:fe:e7:ea:54:ec:a8:3b:91:a5:b2:2d:
2a:e2:5e:46:d9:9a:32:39:4d:35:99:a4:32:51:9d:
41:89:0c:67:6f:0f:c5:6a:be:86:b3:37:41:70:1d:
aa:33:3b:fa:bd:5a:55:05:cf:dd:24:e9:23:29:90:
f2:d2:a4:13:29:65:21:cc:fb:09:1f:8d:57:d8:99:
ae:8c:42:4e:e6:5a:f7:ae:eb:bf:97:b4:89:9d:bb:
08:68:bd:02:64:47:36:e9:47:7f:16:a1:1e:69:34:
ee:b3:42:f1:7f:98:47:4c:a6:1f:b6:f9:40:53:e7:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:70:08:69:74:AF:8F:61:FD:3C:B6:D2:72:8F:09:BE:35:4C:47
X509v3 Authority Key Identifier:
keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:50:65:7d:44:6b:fd:91:84:37:49:c9:32:6a:45:59:a3:79:
7f:d7:4f:e5:7b:30:68:28:b2:27:f4:18:e7:6f:c2:dc:66:bf:
62:50:79:4d:09:0f:ce:57:c7:92:c7:23:45:fe:5c:8a:a9:0f:
a3:47:52:9b:1b:98:07:69:d0:a8:01:63:81:05:93:e8:5e:0b:
f5:96:53:78:70:46:11:b3:f2:c9:7e:dc:3d:eb:08:4d:6c:39:
b4:9c:6e:27:58:c9:2a:3b:36:3a:cc:0d:f1:57:14:25:30:90:
f7:bf:e0:3d:dd:61:73:91:9b:57:ea:ed:59:46:1b:94:e9:7e:
71:46:00:bd:8c:28:a4:23:53:f0:1a:ea:37:ea:cc:51:eb:cd:
88:77:f2:29:a7:59:4a:07:e7:15:1b:c8:71:3a:0b:2a:ac:2c:
15:54:6f:f2:9e:c9:b2:bb:10:c2:16:3e:90:d6:dc:bd:29:a6:
a8:b6:13:64:1c:8c:da:43:94:7d:50:86:27:3a:7b:cc:13:2d:
68:c0:6e:3f:8e:ec:61:8a:8c:9e:c3:df:5e:42:b3:9c:d1:15:
e2:75:cc:f2:f7:a0:85:94:db:ff:c0:bf:ae:54:38:64:78:12:
a1:16:35:f5:be:93:0b:00:34:fd:31:55:02:38:a1:b4:0f:81:
e3:97:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:32 2026 by rpki-client