Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: WRlG4fA2hu0QDf+a3TfnbRE5ua0SWJwDEOqr6qKLZDA=
Subject key identifier: D4:3E:A7:41:D8:20:8D:EB:BE:2E:E4:B2:95:79:B5:D7:68:34:6F:01
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 019D284D9024CACD4A8E427F76B9B14046C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 11B6
Signing time: Thu 26 Mar 2026 04:01:04 +0000
Manifest this update: Thu 26 Mar 2026 04:01:04 +0000
Manifest next update: Fri 27 Mar 2026 04:01:04 +0000
Files and hashes: 1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: k37PZUXf0FVjM1MOeBjLZIB23ezC0EW02fwiffsf+K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:90:24:ca:cd:4a:8e:42:7f:76:b9:b1:40:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Mar 26 04:01:04 2026 GMT
Not After : Mar 27 04:01:04 2026 GMT
Subject: CN=d43ea741d8208debbe2ee4b29579b5d768346f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:16:77:7e:31:f9:29:01:a9:db:03:94:5a:
2c:83:17:46:ce:b3:4a:81:10:c6:ed:8a:82:1c:ba:
7d:9d:90:e8:a7:e4:10:88:52:67:4e:55:47:01:10:
18:8e:d2:3a:a3:77:fb:e6:d4:dc:2e:eb:c4:6f:84:
44:61:c3:e9:56:fd:de:e3:b2:dd:02:1f:f5:6f:fb:
09:10:2d:a2:3f:f3:66:0e:41:db:b9:01:a1:db:10:
47:fc:ae:74:12:13:cf:37:d7:ae:8f:3c:d5:c5:57:
a7:c0:b2:e8:c0:97:f9:40:31:91:f1:04:0d:b5:58:
f4:82:a6:f2:d4:0b:26:54:92:25:a1:37:b0:4f:f8:
13:d6:d7:90:40:8f:a0:be:61:8b:48:ce:53:ba:36:
77:64:36:28:ee:d0:72:b8:c8:f8:2f:4d:e1:8e:40:
c2:72:2d:52:91:52:22:90:ed:03:9d:b5:39:9a:09:
1c:e4:7d:b5:63:d4:bf:de:43:57:7b:9f:32:94:2b:
71:e5:b5:1f:65:b6:c4:90:4f:19:a6:87:5b:f8:b0:
5b:e4:0f:0e:c9:f5:5e:bf:8b:09:be:53:76:0e:f9:
5f:4b:e1:bd:99:9c:b8:bd:05:a5:f6:97:06:2d:f3:
a1:78:b7:40:08:62:79:2f:02:0c:2a:ec:40:59:e5:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:A7:41:D8:20:8D:EB:BE:2E:E4:B2:95:79:B5:D7:68:34:6F:01
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:97:1a:00:8f:a6:de:8e:c6:47:1d:9c:1f:d3:96:11:20:76:
7a:81:c8:2d:9e:9a:b4:d0:7b:2d:eb:1c:52:57:02:1e:55:8f:
a0:1c:91:f0:01:0f:be:63:74:f2:59:53:33:bf:ef:71:44:ec:
e2:77:51:58:92:e3:ea:3e:b2:2f:32:bb:e3:4c:06:1c:4c:49:
e8:3f:20:97:0b:c5:bf:18:49:a1:a8:43:65:48:c7:e9:68:88:
15:39:4f:23:af:31:1d:7d:17:e6:82:de:49:c8:3b:0a:6c:29:
8c:93:32:75:9a:8d:40:4a:a0:67:45:c1:6e:cd:d8:79:9f:11:
77:ac:51:23:f1:33:a0:64:5a:a2:85:ab:c9:98:12:ec:b8:fd:
00:9d:5b:24:fc:65:51:53:79:f2:e7:16:f8:da:9e:c7:ee:92:
6b:2a:6d:bd:25:79:e2:e3:f7:d7:c9:6f:fb:b7:f9:32:45:a0:
b0:52:1e:28:e6:d2:6d:9b:43:ec:db:d8:36:d6:b5:e2:66:ec:
dd:01:58:e3:e6:15:c2:5f:7c:b7:5a:61:2c:c0:14:e7:c4:0e:
e9:eb:d3:7a:41:83:85:c7:fa:ed:df:c8:25:6c:4d:78:4e:45:
92:54:0c:34:d7:3b:c2:84:47:46:54:0c:ce:1e:0a:a6:af:fe:
15:12:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:44 2026 by rpki-client