Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier: izyhuP+Zpn1kmOdXAHDVaGRQ7tmgqhB/jIKmzy6n6MY=
Subject key identifier: AD:AD:0A:8B:A2:0C:5F:92:0D:FF:FC:1E:D5:DF:EE:D2:D9:14:9B:F2
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019D269602C3F88C69932B618BD9DD15E9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number: 0BFC
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=)
2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=)
3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=)
4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: hndPq4AIvdnqS0q61r31zf2lX9FFIjPlfIsntGFKncI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:02:c3:f8:8c:69:93:2b:61:8b:d9:dd:15:e9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=adad0a8ba20c5f920dfffc1ed5dfeed2d9149bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:16:06:4f:cb:ad:7c:31:6a:40:b8:21:c5:
9b:2c:c8:dc:42:21:82:76:57:f4:3c:5d:0e:1d:0c:
70:f2:12:89:1b:13:ee:bf:d5:79:05:b3:5a:a4:5a:
39:0c:48:f3:d7:41:e8:5c:3e:7f:d8:39:c2:d8:4e:
73:b9:6a:f7:24:cf:05:72:7a:ef:ce:a0:a5:4b:87:
db:ca:e8:e3:b0:de:24:85:0f:17:b5:bd:54:23:f5:
48:e7:43:13:8a:f2:ad:5e:10:96:48:be:c1:19:71:
47:bb:54:e5:22:c3:5a:9c:3d:1d:b9:84:4f:e5:af:
62:c4:2d:eb:0b:dc:fd:1c:08:5f:cf:95:46:f3:15:
84:2e:92:f1:02:86:cd:62:47:b2:ba:52:ff:a4:ad:
10:05:44:49:cd:b9:ec:2c:d1:88:c7:ee:29:45:9f:
8b:d3:2d:80:e4:64:73:7a:42:eb:cb:3f:7c:08:4f:
40:0f:b3:b7:97:48:23:e4:4a:a7:0e:30:93:8e:27:
ef:ec:9f:21:13:27:92:a1:44:cd:93:a4:17:ac:3e:
02:14:33:98:96:f4:c7:d5:e0:cb:0e:fd:41:42:d1:
c4:a3:59:07:6f:40:a7:9a:01:6a:5d:6c:74:ba:b8:
6c:9f:ed:5a:dc:07:73:cc:ce:38:cc:7d:3c:58:3e:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:0A:8B:A2:0C:5F:92:0D:FF:FC:1E:D5:DF:EE:D2:D9:14:9B:F2
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:43:f5:5c:3f:fb:68:b2:da:64:36:4c:6c:98:8d:ee:4d:64:
c5:61:93:98:29:db:e0:77:b3:9e:b4:59:14:85:97:d5:a3:c6:
d8:85:1c:0f:63:74:97:ca:00:7c:b0:96:e4:d8:72:75:a6:69:
2f:17:68:a4:26:ed:e7:93:29:6e:19:da:08:97:a1:26:fe:90:
f0:5c:69:04:1a:a0:c1:4f:e8:28:c6:6c:ee:81:50:0d:c6:12:
89:c0:a2:84:53:e4:f2:dc:d8:15:59:d1:46:07:2a:3d:76:30:
0b:1f:2e:6e:59:e8:cf:0b:6f:ed:4f:8c:cb:6f:67:e5:32:73:
c1:bb:10:ab:5b:22:e9:80:2f:ab:be:31:4d:ee:29:0d:0f:20:
43:a6:a0:f0:c5:97:fa:fc:4e:51:3c:06:f2:df:33:d7:37:49:
0d:40:f8:7a:04:26:e6:6b:5e:db:ff:ac:eb:94:93:84:c5:6e:
34:7f:3c:4e:f6:db:9a:6a:5a:49:c3:55:69:a4:58:e6:17:87:
38:a7:87:e9:dc:85:4f:ba:91:9b:e9:5b:2e:77:b5:e6:fc:93:
c8:98:31:d6:e5:0f:03:f7:ea:87:86:cd:8f:d5:f2:0d:c9:77:
ca:20:d0:13:4f:36:7c:4f:0f:ec:85:cf:2e:d6:92:4c:65:43:
1c:86:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:14 2026 by rpki-client