Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json)
Hash identifier: 5awzf9Wh5poFk6SGR3T/S6qXTQitWuTXEN2NW8SRAAg=
Subject key identifier: 3E:DE:66:6B:BB:D4:F9:B6:DB:8A:BA:95:A1:75:4D:68:4E:38:36:83
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial: 019D37F774EA8BDDB567AF98B7D125DC7189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 05:00:57 +0000
Manifest this update: Sun 29 Mar 2026 05:00:57 +0000
Manifest next update: Mon 30 Mar 2026 05:00:57 +0000
Files and hashes: 1: _qrU1bCSPRoOOveg6cKRbdBRuMk.roa (hash: EuanKU6jP53XoKKJyuThtthL9JW99aO6nJOSR8TpqPE=)
2: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: ekO4PwTfJ2nQZ69GQGh376WHSf7k7wg1K9dQr9lgrb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:74:ea:8b:dd:b5:67:af:98:b7:d1:25:dc:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Validity
Not Before: Mar 29 05:00:57 2026 GMT
Not After : Mar 30 05:00:57 2026 GMT
Subject: CN=3ede666bbbd4f9b6db8aba95a1754d684e383683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:e1:de:b7:86:d3:d3:3c:0d:ba:71:ed:d7:
7d:08:ef:00:2a:b5:01:8d:9c:e0:65:15:bf:41:8a:
f9:8f:d2:c3:5e:c0:0c:3f:f7:fe:31:bb:db:59:48:
c6:e1:d6:93:86:b1:01:23:42:cf:94:c5:85:7f:51:
d4:c0:aa:e7:79:c2:7b:62:91:29:db:e3:56:75:85:
a4:64:b6:8e:23:64:66:55:e8:6a:9f:b4:42:87:8a:
f2:0a:63:e7:d5:e4:a7:86:96:3d:3f:a9:b8:51:66:
8f:08:e6:92:da:ff:0f:38:73:b0:bd:b5:cd:87:88:
5f:ae:81:3c:57:8a:32:e1:a4:63:a2:64:00:51:37:
45:50:a0:8d:7c:cb:70:f5:c9:c4:57:c6:8e:36:a6:
05:67:d6:a0:67:44:89:83:9e:f4:51:09:47:b3:44:
f7:d9:a3:f4:28:0f:0d:ca:2a:39:fe:ed:ba:ee:86:
a2:2c:d8:c7:d0:c6:c8:a2:7b:2f:1c:f1:a9:32:4d:
83:4e:62:10:c9:bd:ec:16:04:85:22:e0:fd:9e:fa:
07:55:dd:4e:86:fa:3c:fd:7f:4b:8d:06:00:77:a4:
b7:5c:3c:52:7c:e5:87:09:97:7e:ba:d2:87:ec:82:
d4:ee:0c:fd:8b:8e:e8:cf:e1:e5:bf:24:6d:28:45:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DE:66:6B:BB:D4:F9:B6:DB:8A:BA:95:A1:75:4D:68:4E:38:36:83
X509v3 Authority Key Identifier:
keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b0:35:0e:38:c0:aa:aa:30:92:d8:fe:34:4a:7e:ac:b7:fb:
73:31:8a:d3:de:78:69:67:2a:ef:8c:c0:5c:4e:94:74:5f:0f:
8e:dd:2f:59:94:5d:93:50:38:e7:fa:d0:31:17:7c:84:40:c7:
4a:e2:d6:57:cd:39:3c:81:28:3c:de:ac:4a:f0:ba:25:95:4e:
27:0e:5e:a7:f5:8b:78:26:af:41:f6:67:55:95:9a:c2:c6:a0:
00:5d:26:58:91:d8:af:83:96:04:04:69:f2:8e:77:a5:bd:25:
55:16:78:37:0a:6d:6a:db:bb:f1:71:cf:43:1b:c8:5d:45:3b:
70:df:68:fc:2f:5a:03:1b:26:d7:1a:dc:0f:cd:88:27:52:d1:
59:c4:47:65:b3:b5:67:7f:72:63:cd:e5:76:c7:8b:3f:48:af:
15:c1:ff:9d:88:22:fa:99:96:ec:27:30:11:ca:ed:36:22:ef:
da:57:81:20:ce:3d:80:c1:19:7b:70:70:01:67:ef:57:79:0e:
0a:87:6c:36:5a:ec:1b:e9:9c:c6:35:65:8f:10:b9:50:22:c3:
10:ea:1e:26:b3:94:23:1e:09:08:28:c0:e1:bd:08:a0:d0:6f:
b5:85:d0:77:23:b7:f5:e0:4f:7a:b5:cf:70:07:a8:bf:e1:9b:
23:38:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:42 2026 by rpki-client