Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: vXHWCrG9/XRZ2kuKDs631Kr4+2uI5YieYg2rs1YuadA=
Subject key identifier: 63:8F:D2:C4:B4:85:D0:C0:FE:D9:68:9E:F3:FC:73:20:98:F0:10:2F
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 019D382DEFCD859FB5AA9680EE2F618D3A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: 6ly5xS7Crn95qS-sabxmTiXk0Gw.roa (hash: orel+0qepeeJDJ5TDLnEm1CeQiuPhxAXOKIcf81qcUQ=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: ulzGNQEw1CPPUkUHOWlKSJms5hyOv63WksNKlwj77PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ef:cd:85:9f:b5:aa:96:80:ee:2f:61:8d:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=638fd2c4b485d0c0fed9689ef3fc732098f0102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:26:dc:b9:5e:e3:59:e0:7e:14:a6:6c:33:
0d:dd:70:9f:ac:9c:d3:ed:d4:63:26:e8:5e:e8:32:
5f:87:9e:86:71:cd:2a:a7:dd:f3:75:91:3f:36:94:
14:7e:2b:44:5f:84:35:ca:d9:ab:53:84:37:14:70:
0f:96:c7:60:fe:24:12:db:e4:27:a1:ed:2e:cc:a0:
00:f8:f1:b3:81:57:8a:c6:33:40:bb:b1:e4:42:40:
40:93:55:14:8e:74:09:ac:b5:1b:d7:83:f2:e6:08:
f2:7a:df:21:ce:4d:4b:3f:58:6f:4c:28:f3:64:d5:
31:24:72:1f:ab:b2:b5:21:d7:0b:30:95:19:66:31:
10:87:7f:4b:66:6c:2f:c2:3c:b3:41:e8:82:06:fb:
2f:a3:6a:a4:8c:05:90:dc:7b:77:50:87:9d:6e:b9:
f7:6f:9e:ea:69:c6:a9:01:8e:5b:1c:fa:3e:2d:d0:
99:f5:88:b0:34:29:d2:81:d5:e4:39:f3:ef:68:66:
11:ee:2f:47:e7:e9:47:94:62:6b:eb:60:ac:7f:43:
42:95:74:37:0c:c3:5a:ae:87:46:86:17:2b:ac:0b:
30:08:86:a3:a8:f2:fb:80:82:ab:3d:d1:c7:2f:7c:
52:92:cc:72:b9:0b:2a:b5:8c:8b:ae:ec:68:d2:cc:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8F:D2:C4:B4:85:D0:C0:FE:D9:68:9E:F3:FC:73:20:98:F0:10:2F
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6b:18:93:c5:41:1b:72:95:1b:a5:c6:f5:54:32:a0:c4:e1:
6e:10:da:74:ce:5c:70:89:63:29:d0:28:a5:49:9a:5b:69:f6:
c7:58:ae:d1:5a:f3:0f:a7:37:cc:6e:2d:d3:28:f7:fc:3a:02:
9b:3c:99:9d:75:fa:68:0f:ea:fd:46:e7:36:81:16:09:9d:db:
54:6f:10:26:06:4e:15:97:93:57:5c:21:d0:2c:9a:ea:ed:75:
3d:8f:30:45:67:29:1b:0c:9b:37:07:7f:05:ce:62:47:79:11:
2f:29:ef:fb:d8:c3:8a:57:e2:24:b4:e7:fa:26:73:c3:b5:1f:
af:34:b2:a6:45:d6:7c:e9:07:80:a7:6f:45:fb:48:eb:46:65:
a5:47:9e:2b:7e:f9:1c:0f:55:fb:2a:18:07:d0:81:ae:67:cf:
45:c5:24:01:ab:09:0e:77:57:20:cb:85:65:51:88:3b:7c:57:
e9:bc:27:9a:d8:15:e6:7a:a2:0c:77:c0:92:5e:8e:4e:3b:39:
51:88:04:8e:68:cc:59:8b:18:f2:1b:c8:5b:4c:03:c6:02:40:
68:f8:a5:d5:9f:a1:ed:e7:ca:4e:56:c6:65:bb:fa:07:38:8d:
fa:ab:91:4f:e9:62:ea:72:8f:3d:7d:34:b6:c0:5f:ce:f9:9c:
85:1c:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:44 2026 by rpki-client