Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: hVsAIZcH1XrfNgcgYIVQTWLI0NMhVhH7m7YFvlSF6pY=
Subject key identifier: 68:12:6A:84:8C:87:53:DC:0E:1D:2E:7F:39:1C:70:3D:19:94:DE:9A
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 019D3865BB3CFF5429C8C344AF3235094C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 0814
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: aENpbZFMMBWYCci1um8I0GEZSKc.roa (hash: bJqlLgnRm20xht7mBqwuocxi1HbSlACC3bpe5sLs4l4=)
2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: 0kuEPvVYjs4pmWNRMMBHiJ6OIu74JyAd36/8PoLFMQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bb:3c:ff:54:29:c8:c3:44:af:32:35:09:4c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=68126a848c8753dc0e1d2e7f391c703d1994de9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:fa:b3:1a:d1:dd:80:e1:08:0f:50:84:0b:
b2:16:7f:6a:e9:0e:7c:2b:66:b0:51:28:28:72:ca:
a7:d3:95:1b:a0:ab:ae:48:d9:bd:10:25:a2:9b:2c:
f2:85:13:2a:8c:70:34:3c:4b:fa:1d:3c:ed:c6:2e:
df:bc:bf:e3:f6:15:2f:18:07:c8:43:0e:ac:a4:66:
0e:e4:e1:11:2a:12:31:12:0d:6b:1b:b7:43:b9:79:
19:f1:d0:91:fd:88:52:0f:a9:72:7c:e4:34:67:a2:
bb:49:3a:6a:07:f3:13:89:aa:fd:75:23:2b:e2:14:
fd:dc:f3:dd:f9:91:42:21:ab:61:03:0a:ae:85:a6:
78:79:4a:d7:bc:17:41:dc:32:4c:19:d4:26:d8:59:
90:14:16:79:9e:21:a4:71:e1:80:5f:35:3a:03:a5:
91:c6:f5:91:5a:ac:0b:67:e7:58:f8:93:86:f9:fd:
c8:30:4f:70:21:1f:5a:53:cb:26:0a:93:5a:74:7a:
2c:87:2d:87:3f:6c:bf:fb:28:89:e9:ad:84:e4:5b:
fd:45:4b:42:55:f5:a2:5c:32:d7:09:28:cb:3e:cd:
6b:b8:da:84:d4:55:51:75:df:67:07:70:80:3a:72:
0a:a4:c7:30:5c:d7:54:49:85:f6:21:b9:3e:18:7a:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:12:6A:84:8C:87:53:DC:0E:1D:2E:7F:39:1C:70:3D:19:94:DE:9A
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:01:4b:c5:93:e3:69:cf:01:e5:c9:86:7c:9b:fa:3e:b3:
b7:53:bd:c2:3a:b8:05:fb:33:ea:97:0b:ac:82:47:2a:68:07:
e7:19:63:cd:dd:12:0c:3d:90:c5:03:9b:20:27:94:e3:eb:53:
35:ea:d9:4e:1e:a2:50:4f:5c:3b:61:53:b9:cc:28:e3:67:dd:
1f:67:44:77:0a:b6:de:77:09:f2:b3:7d:74:61:e2:ed:e5:42:
e8:a6:a7:2f:62:36:75:d8:2d:06:33:a1:03:54:30:6e:40:d6:
8c:49:29:10:d1:4c:01:cc:20:9f:c4:d3:61:47:b9:a3:a3:6a:
91:08:7b:1d:51:58:79:ae:4b:1e:9f:e5:27:57:ac:b0:ef:09:
97:a5:1b:57:c7:4c:6c:29:5d:f3:cf:53:a6:ca:05:f3:2d:ba:
f1:f4:57:45:ce:ac:9b:ae:af:13:68:e3:66:6d:91:23:94:b3:
c6:ad:e4:f4:97:7f:9d:f0:0d:62:a9:3d:8c:21:94:2c:d9:ff:
83:a8:4a:95:6c:72:b0:6f:6a:57:a5:eb:84:0e:ac:08:2e:0d:
75:dd:a4:86:26:02:f8:34:0c:6e:6c:0b:b3:28:27:d1:67:3f:
33:fa:b1:ce:ce:88:d4:76:09:35:81:31:23:56:f8:18:3e:e5:
e5:6d:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:39 2026 by rpki-client