Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
File: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft (raw, json)
Hash identifier: PkHOHV6zwsuJVMJPEy+vPZdjgeTXvvpXQGUb/Hcbp0s=
Subject key identifier: D6:F0:41:65:86:5D:EC:F6:20:2F:BC:FF:7B:87:F5:6E:07:BF:6F:6A
Authority key identifier: FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
Certificate issuer: /CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Certificate serial: 019D25BA9B4A6BCC45589E67397DB259DAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
Manifest number: 36
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: _fyeIxDaafsDWMkS2A3N58AtJkU.roa (hash: H0SeTPFO1ojjf24io8wfPyjJHZQNS+KrdvYRVXD+DL4=)
2: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl (hash: cmHqQJIl1TOVohlVkGZidS9lxR0Y8en5WBRSkdnGqjY=)
3: lmvQRZHoT7SrToyMEi92PYv4lr8.roa (hash: 54xRyjzzMSSYWcjiwt5uthywu9zHlEe922Syj7kTVbI=)
4: uCsQuS-4rVdPYPXfgacBtl1GxKU.roa (hash: mSrfH4b/LZzb55AU3CME/vQpiQIKZvFXbFgXnOdMHJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9b:4a:6b:cc:45:58:9e:67:39:7d:b2:59:da:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=d6f04165865decf6202fbcff7b87f56e07bf6f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:eb:8d:1e:5d:11:3e:c7:f6:0e:0c:cd:dc:
e1:d1:c6:64:57:32:bc:28:ab:7a:94:99:56:4c:a9:
79:d7:02:e6:3d:18:0c:13:cc:b4:e9:1f:d4:4f:0c:
80:25:62:39:08:ca:01:84:3c:c7:35:ba:b8:be:ee:
4e:04:84:a0:e6:7f:ef:e2:0e:0b:58:0c:f0:32:f6:
89:ce:78:2e:54:12:20:e9:64:8c:25:88:9e:dc:6b:
3c:63:a8:20:96:b8:62:b6:b7:a7:c4:95:12:ac:a8:
cb:00:c5:ea:fd:44:58:b2:aa:94:7a:8e:6c:dd:fe:
d7:6c:74:89:6e:d9:85:10:a0:d5:96:b3:7e:94:ca:
c4:35:e5:65:71:df:8f:3e:07:7e:0d:ee:c0:e3:ac:
fb:22:7f:71:61:22:52:d1:8c:dc:2a:fa:78:2b:64:
ac:eb:ab:ba:c9:7c:20:68:53:6b:a3:47:08:e3:d7:
bb:bc:ae:a9:ce:ce:2d:b4:ab:a8:a5:28:ff:72:63:
f7:ae:01:be:ce:d9:c4:15:3e:f2:cf:de:ef:e9:d7:
ce:36:40:62:61:5a:ec:0d:d2:2f:c5:a3:45:f2:01:
e3:9c:72:c0:83:e4:21:b8:8b:71:77:94:c3:40:89:
f7:36:5a:04:67:50:91:4d:5d:9e:ad:79:57:72:7a:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:41:65:86:5D:EC:F6:20:2F:BC:FF:7B:87:F5:6E:07:BF:6F:6A
X509v3 Authority Key Identifier:
keyid:FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:83:94:d7:d0:ea:1a:55:22:e3:1c:bb:f3:a6:e1:1c:35:da:
61:78:b1:a7:43:ed:82:78:90:5b:9b:a8:2f:6f:fb:03:90:eb:
d0:ef:b2:86:d0:5b:cf:d8:c6:a9:5b:a5:e3:22:a1:4d:47:65:
75:f3:2a:75:3e:38:b4:ec:f5:a1:91:4b:3e:3e:54:15:54:76:
17:5a:31:15:77:18:db:04:16:c6:fd:91:a9:94:cb:cf:86:1f:
1c:6b:1a:70:6e:3f:db:fa:74:bf:e9:77:1d:0a:96:a7:5b:17:
ea:b5:d3:12:31:4e:b9:aa:a7:c6:a2:11:c5:4f:4a:00:ca:2f:
ee:85:40:b1:79:cc:24:7b:63:61:95:38:4f:3b:b3:2f:88:60:
0f:e8:f9:68:07:f3:37:15:c1:ab:ee:bc:ed:56:16:21:af:65:
2b:3f:31:50:35:e6:44:81:8a:01:89:14:bc:2b:a4:17:26:2d:
2c:2f:39:aa:2d:62:8e:ff:e0:34:45:06:44:27:31:13:52:ac:
9c:4c:6a:04:64:2c:8b:89:e7:44:6a:3b:e6:f3:fb:9d:bf:16:
b0:18:fb:94:7b:66:00:79:cb:e1:26:d9:c3:43:7c:51:5a:39:
0c:74:5c:e5:41:88:13:b1:5d:7d:1e:4a:66:74:b7:f9:60:00:
46:ad:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:16:10 2026 by rpki-client