Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: BAJ76dBfE2qlJ+H6gfIefOOPK3Yy0gW230MmLb0qvbI=
Subject key identifier: EA:13:99:1B:3F:CB:79:72:FB:55:5E:7E:63:3B:98:FA:2A:61:C4:9D
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019CC7BEAFD9E7A645119E68FDAFD1E6647B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 1857
Signing time: Sat 07 Mar 2026 10:01:28 +0000
Manifest this update: Sat 07 Mar 2026 10:01:28 +0000
Manifest next update: Sun 08 Mar 2026 10:01:28 +0000
Files and hashes: 1: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (hash: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8=)
2: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (hash: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY=)
3: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: 1QGPoaQs7VicUR/43C1kUe0jj/0NSKXpkNQrquXnCSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:af:d9:e7:a6:45:11:9e:68:fd:af:d1:e6:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Mar 7 10:01:28 2026 GMT
Not After : Mar 8 10:01:28 2026 GMT
Subject: CN=ea13991b3fcb7972fb555e7e633b98fa2a61c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:26:d4:5c:b4:ec:a5:ef:3c:a9:ac:38:4c:aa:
28:5d:47:4f:3b:68:ea:09:ee:f0:86:75:dd:b2:2e:
ba:a4:95:bc:f2:21:2f:17:ac:3a:92:e2:8b:38:9f:
33:98:08:74:f6:83:c8:f1:ef:52:87:b1:33:28:02:
58:82:ed:d5:b6:f1:7c:b3:82:a8:1e:38:8c:43:9c:
ac:e4:02:04:ad:27:7e:d2:7c:04:28:5e:8b:be:5a:
8b:3f:66:6a:da:17:a3:ba:d6:c6:a3:ed:ae:21:1f:
15:84:2a:73:ee:7b:61:ad:a7:d0:c7:ea:48:95:cc:
e6:28:3b:9a:45:7c:95:94:9d:df:e8:ed:6d:c1:ec:
19:e9:b9:00:3c:ff:f9:8f:c1:03:99:09:8c:f9:58:
09:e1:d7:fe:bd:c8:b4:dc:77:3f:af:9d:07:78:35:
ea:64:b2:53:d9:d6:76:35:f1:7a:b2:1e:0f:5d:6c:
59:e7:39:9d:f5:25:00:62:63:46:b4:61:31:0c:b3:
cd:b7:6b:10:c2:40:a7:ac:b1:e5:4a:d8:11:1e:b0:
91:71:eb:83:5f:64:34:40:43:8f:69:20:ec:3f:26:
ff:7b:ef:34:32:ff:5f:07:0d:20:ce:a7:cb:3c:d4:
64:7b:64:29:c0:b7:c2:b8:79:9e:30:26:b3:5c:01:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:13:99:1B:3F:CB:79:72:FB:55:5E:7E:63:3B:98:FA:2A:61:C4:9D
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c1:85:22:8e:31:4e:5b:15:74:e1:39:79:60:d0:51:b3:6c:
dd:45:a0:b6:7f:6f:34:d6:98:c1:4e:99:e5:60:66:02:f5:29:
34:01:af:15:e5:40:c9:1b:33:10:77:d0:55:8e:79:9f:5d:76:
8f:39:28:17:57:43:5b:b7:73:29:5c:ce:5e:f3:c9:82:49:b5:
3a:c5:bd:2c:e0:21:d1:80:d7:4a:14:c3:c2:12:c7:5c:c1:3c:
80:5f:21:00:e4:6c:25:27:f5:40:ab:37:d1:ae:df:04:4c:a5:
6a:ca:93:9e:df:77:bf:0e:df:82:c7:e1:bc:b6:04:3b:b3:3e:
65:90:a9:19:42:6f:88:06:29:c8:af:62:4c:e7:86:e3:06:0a:
3c:64:bc:d8:3e:dd:f9:ca:60:a3:b6:c2:16:43:2d:55:9a:04:
ec:5c:40:b9:3b:91:da:a9:e1:25:b9:46:fb:be:10:16:ee:7c:
0f:5e:50:01:06:0e:01:37:d5:d4:04:2e:cc:cc:68:85:63:43:
a4:8d:5b:50:51:bf:0b:8d:9d:69:eb:18:70:0d:54:fc:ac:62:
ef:5c:db:64:df:2d:b0:fb:b6:a7:b2:c3:f1:aa:fb:ba:33:f2:
1b:fb:5b:d3:09:45:40:29:70:86:4d:b9:78:fe:7d:f6:dc:46:
33:ab:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:01 2026 by rpki-client