Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: pjvEddXmi2CB3KUyoqiJTo793seCZpYoYoNSh9bMnvg=
Subject key identifier: E7:24:E2:78:5A:79:B9:82:2E:91:52:64:81:AA:A3:B4:33:53:24:81
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 019D389BE15B326C399E2CCC54BB25118E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 1436
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: nu2lbW0g95yVXBtDFUgDrkJzEwM.roa (hash: 8SMpinprSw+0Hderswh6JaQ9jOtPmZtb2eKAdki8fbU=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: k8CwzFIr+2BVV1P/mlqE0wCN2A0LpNv3Mg4FQtorQg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e1:5b:32:6c:39:9e:2c:cc:54:bb:25:11:8e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=e724e2785a79b9822e91526481aaa3b433532481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:c2:32:9f:35:93:38:d7:c8:ae:b5:5c:f4:
32:f8:4c:19:c8:b9:57:22:74:6b:12:33:08:5f:c6:
6d:dc:84:9b:8e:63:de:9c:2c:72:9c:f9:fa:92:2f:
60:fe:bf:cb:29:b2:e2:00:92:46:62:4c:62:d6:ad:
3e:6b:77:d4:ac:31:3e:ef:a5:2e:bc:8f:51:35:f8:
9b:72:ed:07:d5:ec:b6:90:ef:1c:76:4d:3e:fa:78:
58:5a:91:f6:d8:10:5e:d5:98:23:55:8e:6c:d4:f4:
2b:35:1c:af:00:b5:45:71:bf:3c:26:6b:44:0b:56:
12:2c:20:1d:93:99:9b:fc:c1:f4:ce:ff:85:ef:3f:
8d:75:79:5f:5c:6d:61:8e:d2:dc:42:59:57:84:9e:
dd:a1:0d:5b:8b:4c:e4:5b:85:eb:13:17:6d:f7:80:
a3:be:91:16:9d:d6:6e:12:d8:a7:98:f8:b7:b9:81:
1d:cb:46:3b:81:d1:9b:64:0a:61:78:81:f2:b1:2b:
0d:22:b2:3a:fd:11:76:df:31:6d:a0:af:83:12:c3:
ba:d4:2d:22:f9:eb:df:02:06:b2:2d:de:84:12:a3:
7b:66:f8:81:a1:00:3a:f7:16:92:8a:2d:00:bc:15:
e5:2b:03:43:e2:1d:fb:e0:c1:a3:81:08:4f:75:7b:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:E2:78:5A:79:B9:82:2E:91:52:64:81:AA:A3:B4:33:53:24:81
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:69:dd:21:c8:6b:16:5c:b2:82:b4:80:ad:0d:5e:a4:ed:8d:
8b:4d:54:5f:01:79:17:68:64:82:05:b2:38:26:3c:1b:43:57:
bd:b1:a1:eb:2c:ed:ba:a2:d4:fd:27:20:b4:32:b7:0e:4f:1e:
1a:b4:ad:bb:c5:bc:4b:ae:bf:9b:d0:3d:2d:42:71:94:70:05:
87:df:29:ce:d5:4f:f7:45:71:33:13:f9:09:b7:5f:2a:66:f2:
dc:ec:e3:19:2f:f9:3b:57:25:8e:da:3a:8a:55:65:af:35:fe:
cf:ab:65:e3:80:93:35:16:0a:19:7c:fe:fc:5b:d0:fb:57:15:
d4:38:52:d4:6c:7a:6a:e8:48:5e:9f:6f:ab:0f:36:69:d4:54:
65:9a:b8:26:5d:0f:c9:8c:f1:90:02:39:12:91:98:8c:f6:7e:
17:0c:8a:66:b5:fd:c8:c6:db:03:23:81:0f:ae:4f:65:2b:39:
44:0d:a1:eb:e0:c9:86:48:62:92:a7:e5:97:24:f4:32:12:4c:
2e:ba:65:4e:5f:5e:8c:91:5c:1e:1f:0f:d7:bd:5c:c2:50:37:
cb:e9:1a:aa:46:46:b7:5b:23:dd:da:53:e8:ae:ee:36:1a:19:
ed:6f:b8:a8:95:25:c0:bc:67:47:a3:99:bd:74:9e:a3:bc:16:
b8:b3:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:01 2026 by rpki-client