Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: PiodTRVBYXfauz0EiM2ewj9AGEZBtqIJZJgYWBomFzE=
Subject key identifier: 59:B5:1A:E8:1F:9F:10:54:F6:92:F9:A5:67:AF:BB:4A:8D:75:60:D5
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 019D25F0EB8446EA0E8AE5C9DFA97DC1FFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: tpUHmTWZfbWIB8VUGZPotcMUmeZ6Ou7gPSsKUfAm1+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:eb:84:46:ea:0e:8a:e5:c9:df:a9:7d:c1:ff:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=59b51ae81f9f1054f692f9a567afbb4a8d7560d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:44:88:09:a5:14:8d:13:7b:ce:68:fa:2b:
d7:d2:f7:a3:34:62:6d:2d:ff:b7:46:10:5f:d7:4a:
ce:4b:8a:ac:9f:cf:de:8b:37:be:cb:a8:21:68:7d:
a3:d9:90:e7:ff:09:85:4b:68:fb:38:e6:50:ad:f9:
2d:c1:ce:4c:96:e4:08:d0:d5:8a:42:f9:b6:b3:be:
81:0c:a6:c7:26:ac:1d:80:15:99:38:ee:82:e8:bd:
aa:e8:5b:6c:6a:6c:6b:d6:33:c4:db:73:9a:3e:e6:
0d:ce:13:a6:da:c7:65:f7:4d:06:9f:0b:d9:f5:18:
9d:5c:a0:41:36:36:55:9b:30:30:ce:65:7d:7f:38:
51:3e:60:88:b6:6a:c0:90:42:5c:e0:ee:28:bf:3c:
fe:a9:27:de:4e:d3:55:f9:a8:2e:e2:f1:ad:87:b2:
9b:aa:35:18:ad:dc:d7:a8:99:e0:16:26:96:46:cc:
51:35:53:57:57:e1:04:c0:53:49:0b:77:61:36:76:
95:85:72:c8:32:2b:b9:10:15:86:27:1d:6d:6b:50:
00:fc:d8:a9:51:b4:08:c0:9f:e0:1f:9a:7d:4b:24:
94:70:78:cd:79:fd:16:29:e3:a5:2a:fa:f2:08:01:
1f:7c:3b:a1:aa:17:81:97:b9:5c:af:17:25:12:bc:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:1A:E8:1F:9F:10:54:F6:92:F9:A5:67:AF:BB:4A:8D:75:60:D5
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:7e:53:dc:08:ef:51:aa:8c:e4:3e:37:d8:ca:9b:93:f3:
ff:19:a9:e4:0c:1b:07:94:26:23:05:c4:e8:4d:a0:e2:82:b3:
4b:21:c0:f6:de:a1:3c:04:d0:4f:15:01:4c:b6:d3:a9:ba:f4:
70:70:3a:02:94:19:7a:d2:8c:15:31:a3:7e:47:aa:e5:8f:4b:
d2:bd:fe:7e:d6:a2:30:ad:0f:89:b8:87:09:d8:57:99:ff:4d:
c1:54:60:d0:db:c7:0e:76:34:ae:91:67:55:fd:ef:ce:1f:c3:
55:37:b9:cd:97:40:a9:6c:f4:fe:ba:e0:c1:d2:64:02:55:c5:
c0:5b:42:4c:bc:de:5f:50:75:2f:7b:f4:7a:01:dc:c9:3d:04:
73:5b:ca:ba:99:d1:2a:12:68:5d:ff:5e:d5:59:33:c0:74:f7:
eb:6e:c2:59:ae:ad:8b:7c:8f:3f:61:d6:51:a2:ca:2b:9b:6d:
44:3d:97:7d:b0:64:d4:60:0d:f5:2a:b5:f1:db:7f:75:ef:b0:
a8:1f:2c:ca:3b:91:f1:9e:9b:90:e2:d7:96:66:b5:42:6f:df:
0f:9d:06:5c:b3:64:c8:4e:ec:90:3c:41:7f:98:35:96:a6:6e:
43:5f:58:6b:67:a8:28:ea:be:da:1f:23:eb:82:8c:66:81:e2:
b5:14:74:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:16 2026 by rpki-client