Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: +gfovVO7oyVk5MnHBmBn53kIW3mmRcrHFoCzQUEV70I=
Subject key identifier: 20:9D:86:51:CB:81:AF:6E:BE:8F:57:48:96:24:F1:BE:97:4A:BE:70
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019D26CD292F32292D24F9680D82AB4DD08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 08B7
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: MZeI3fx7Rs6vgWADfZ3b9x-IPrw.roa (hash: 88TFwnxWocrDYKNiW9RVsE1t/Ul4aE3DSPX0lbd55Bc=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: Yst1UYda/izPcXRv1bRsjMgi15xnxXG7XoJVsfTx7ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:29:2f:32:29:2d:24:f9:68:0d:82:ab:4d:d0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=209d8651cb81af6ebe8f57489624f1be974abe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:bb:ac:21:56:50:3e:0a:8b:b5:bd:c1:02:
db:6e:71:05:35:0b:f6:49:b2:10:16:30:a7:ff:98:
7e:e7:ed:a3:d2:69:7e:d3:5d:e1:43:7b:d4:fd:ca:
80:0e:4b:4f:86:89:08:02:3f:61:8e:69:8f:04:6e:
e6:51:88:d8:a3:ac:b9:1b:b5:2f:8c:a1:c5:b9:7b:
ea:df:4e:35:ed:7b:f4:9a:5b:3c:65:2f:80:c8:74:
df:dc:00:40:e0:c1:c3:0a:cc:6f:8a:53:18:9e:e4:
e5:e0:89:ac:be:dd:44:93:fc:20:8a:37:eb:a1:3f:
41:97:19:1d:03:f7:0b:73:f1:a5:2c:72:5d:73:19:
5f:d6:40:fc:e9:5f:d1:7b:e3:71:ec:44:bc:40:dc:
7c:dd:8b:ab:dd:e9:82:73:34:f9:e2:40:6b:ba:ec:
5f:31:d8:60:5d:1e:25:5f:4b:4e:35:dc:72:09:92:
6b:8a:a7:cb:8c:05:ab:42:78:a6:89:6e:41:34:f8:
30:1c:fe:52:a6:40:79:00:2b:47:56:c3:a8:06:9e:
6b:88:b6:16:51:32:aa:05:05:8c:5f:f9:24:e2:a1:
00:f2:bd:60:59:58:71:8a:39:3b:3e:32:21:6e:30:
6f:e5:de:a4:ec:28:81:09:fd:69:84:c0:72:90:7f:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:86:51:CB:81:AF:6E:BE:8F:57:48:96:24:F1:BE:97:4A:BE:70
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:29:aa:ee:ca:4c:ba:b4:a6:c3:74:a0:76:7b:e3:4c:d6:26:
58:6c:be:0c:b2:b6:c6:ec:07:c3:c8:d7:0d:e6:c5:76:9b:89:
58:d3:a8:79:15:4c:06:a1:7a:2f:8f:79:3f:70:6d:7c:d2:e9:
d8:d8:5a:6b:bd:05:4d:d1:63:37:d0:92:02:37:40:4b:17:0d:
d3:ab:7e:4a:f5:b7:7b:df:9a:06:aa:3c:4b:ac:6e:96:af:8f:
ce:c6:78:fb:ad:2e:9e:2e:7d:8b:f4:61:05:34:e6:40:c4:50:
fc:8d:d5:9c:cb:ca:77:5e:4d:b6:d4:af:91:08:e6:0f:78:0b:
ea:dd:e6:f5:b9:f5:13:d1:42:ea:45:7d:e3:92:71:fd:96:03:
a2:1c:e6:a4:7d:23:86:b3:4e:9b:5e:45:cf:ec:de:05:38:12:
c6:96:a5:b3:b2:be:cd:24:18:d3:1f:53:c3:aa:87:d4:e7:20:
70:34:e3:99:6c:3e:2a:5b:3e:c1:d3:5f:4a:a0:b9:9b:3e:43:
c0:2c:0b:66:e5:aa:64:33:19:70:05:13:b0:b0:88:a4:c4:00:
c3:74:fe:d5:6d:d0:58:c4:55:f3:32:74:0c:c4:17:41:18:17:
81:56:1c:3b:65:84:52:fe:3b:75:1f:82:40:13:a3:15:c9:08:
c9:73:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:54 2026 by rpki-client