Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: exrnLuU8aK2rpdg08UIfbM75NVQzMz2XV5Ij1uYH9/w=
Subject key identifier: F4:11:43:2E:46:52:75:69:A1:11:BF:59:07:D9:82:BF:86:C6:01:A4
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019D058AA8A1E4D749F22A42DF1E77450B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1877
Signing time: Thu 19 Mar 2026 10:01:06 +0000
Manifest this update: Thu 19 Mar 2026 10:01:06 +0000
Manifest next update: Fri 20 Mar 2026 10:01:06 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: ZU6d2wbqNDp02KwF3x9ZqLzKsbz9nJ/b447cz3vejCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8a:a8:a1:e4:d7:49:f2:2a:42:df:1e:77:45:0b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Mar 19 10:01:06 2026 GMT
Not After : Mar 20 10:01:06 2026 GMT
Subject: CN=f411432e46527569a111bf5907d982bf86c601a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:84:51:9b:67:dc:6c:d8:50:e9:ac:4e:de:
13:38:41:c4:ce:73:93:93:f1:4f:a1:b0:40:d0:70:
29:4a:af:1f:f0:71:bc:f9:ba:d5:a0:ad:a2:ba:aa:
e6:4b:0d:64:4a:48:0d:4f:11:3b:b5:fd:10:5d:6f:
91:3a:ee:a1:b2:6d:2d:af:69:59:62:57:f1:81:2d:
db:cb:8d:35:af:da:9b:ce:6c:59:f8:bd:70:42:61:
1e:a4:92:98:30:cc:6f:1e:6c:7b:9c:29:78:a3:43:
60:7a:02:ff:68:63:d7:05:7c:a4:ca:37:e8:44:b4:
10:d1:e1:1a:21:f3:00:4f:75:35:ef:c4:51:73:58:
c9:b4:10:2e:f9:2a:3f:59:fd:7e:10:5f:2d:cf:a0:
89:6b:2b:cd:68:0e:a9:7e:49:af:95:44:14:9f:b8:
50:b5:79:23:bc:a0:cd:75:8c:62:72:42:49:bd:fc:
68:cf:81:7b:72:06:b2:f3:1d:bf:ef:be:a4:ee:fc:
50:67:88:72:37:34:dd:d8:77:93:be:49:ad:cd:1a:
bc:8f:91:48:b3:f2:31:32:d4:40:48:37:c2:ce:c9:
2a:cd:5c:59:6b:06:f4:68:9f:24:19:52:59:68:e3:
9e:94:79:e4:50:ef:4f:2b:e1:37:21:53:f0:02:53:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:43:2E:46:52:75:69:A1:11:BF:59:07:D9:82:BF:86:C6:01:A4
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:f0:61:ce:3d:57:6b:15:7c:f5:e6:b2:69:95:b5:2b:03:
4a:aa:f0:52:6d:d0:32:77:9b:a5:29:f7:1b:da:64:ee:18:e2:
87:72:03:95:cd:4f:2d:ef:f9:78:76:01:7e:5a:bc:50:f5:52:
ef:5b:ae:e8:d0:d6:80:d9:6a:18:24:ef:80:de:83:b0:28:de:
19:23:45:b1:a7:dd:51:36:47:b7:d0:40:da:81:ea:81:98:26:
29:38:92:cd:b3:72:7d:8e:51:0c:73:41:71:8f:21:e4:b0:f4:
cf:5c:42:57:92:4d:d4:d6:74:73:17:81:ed:b1:6b:8b:b1:50:
97:88:e9:c3:c0:92:01:02:70:93:0b:02:96:59:45:c4:6e:13:
5b:c4:18:0f:fc:06:93:76:5e:e6:dc:d1:f1:d9:7b:af:f5:05:
64:f0:e5:16:07:52:ef:e7:1a:11:32:2a:bf:e1:87:e5:5e:8d:
73:45:4a:fe:79:3e:c1:a1:95:d5:9b:f3:d8:45:f4:50:42:28:
58:32:ba:78:ac:97:6b:e5:68:c9:1a:26:11:50:62:b8:18:68:
62:19:7c:c3:40:07:a5:6f:a2:b7:cf:97:21:ed:74:6c:f2:c6:
22:d4:63:6d:fc:c0:c4:11:b8:b8:26:c6:6d:0d:aa:dc:d9:8a:
29:94:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:16 2026 by rpki-client