Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier: eGR1+IyhX7gQbRKHLFjSAnJns4qi9Wq69OUGMhywXhk=
Subject key identifier: AE:40:63:63:3F:BA:1F:A6:D0:CC:51:2B:B5:86:7E:87:0B:00:0B:A4
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 019D389BD8AC2AAD42BB4F4092689D5259E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: 5DvFWn8hN7piazN1T8HIXkNFc8w.roa (hash: XsihtnWpKZygkLBke+BN9JF5neJLF/Mp9MsWC2DKCb8=)
2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: ersIjxBLzurvTVKSr+nqMWnv4y2awnKGDjFsxU2GJaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d8:ac:2a:ad:42:bb:4f:40:92:68:9d:52:59:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=ae4063633fba1fa6d0cc512bb5867e870b000ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:99:3b:63:10:96:55:5b:37:e7:46:2a:72:
9d:a1:52:bc:e0:57:be:d2:08:3f:b5:34:4d:d7:3f:
54:cc:2d:f6:51:4c:ff:a9:f4:0e:6e:4d:b4:30:d4:
af:fa:3f:c8:08:9b:ae:b0:d1:b4:23:c6:c3:5f:d5:
37:43:f4:fa:dc:72:6f:e7:20:db:af:b1:20:5c:96:
c0:e0:3d:3f:cd:48:49:22:09:1c:2d:29:55:bc:f2:
73:59:e8:05:11:5e:d5:41:a7:39:09:71:d0:a3:5a:
cd:f6:9f:df:ad:ef:85:e7:00:3b:9b:c3:ce:58:03:
78:28:72:91:fc:94:bc:49:0b:8a:c5:d8:08:80:08:
e2:8f:5a:6a:45:e7:7a:6b:48:bf:3b:7a:0b:30:e7:
10:a9:13:35:03:ce:0b:30:38:3f:f5:4d:49:0b:0e:
ee:cc:e2:97:75:b2:13:2f:34:c1:7e:c1:33:e7:97:
91:7f:80:b8:65:3f:50:01:76:6d:aa:bc:3a:28:c6:
4b:75:31:00:78:33:df:6a:da:ed:78:df:9b:61:43:
bb:1a:ff:0a:d4:45:af:37:6a:92:6b:e1:b6:93:07:
e6:eb:ea:f1:17:5b:e2:87:2c:39:9d:98:77:ce:eb:
bd:4d:84:2a:c6:39:5f:4d:6f:cd:70:24:3d:ad:e3:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:63:63:3F:BA:1F:A6:D0:CC:51:2B:B5:86:7E:87:0B:00:0B:A4
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:07:20:db:be:29:28:03:74:44:90:a2:4a:83:24:e1:6a:
a9:b9:18:98:04:b7:90:3b:aa:c2:73:72:ea:02:b1:81:a8:16:
d1:e8:a0:31:29:f5:63:01:91:ed:a0:a3:c1:6c:34:08:fa:10:
d5:f4:04:63:01:7e:f1:9c:60:74:bc:d7:28:d7:84:73:66:b2:
51:5d:31:21:20:fa:e1:ce:93:0d:e8:6c:7b:cc:7c:a2:c8:89:
7f:95:62:f9:9a:66:7b:0c:bd:29:c8:14:29:29:7b:bc:5f:46:
02:db:5b:d0:de:3d:13:fb:63:7d:4d:a1:2f:70:ed:a8:b7:78:
74:eb:77:7e:44:d6:a0:f1:88:ff:86:df:9d:d2:cb:fc:5b:14:
9a:bd:db:11:dc:b7:eb:22:cc:8f:33:9e:f0:33:63:ba:d4:19:
2f:dd:8c:ac:04:18:38:9f:44:6c:c2:98:5d:c4:af:14:85:5c:
69:c6:27:ca:04:ed:d3:a0:12:72:d8:6c:ea:41:90:8d:c9:ed:
13:a3:85:bb:9a:5d:cf:24:d2:9c:62:5c:7f:b0:d7:58:7e:08:
66:24:b0:cb:34:31:74:48:93:9c:09:ab:b5:44:19:a1:ed:80:
4c:c0:d0:b3:5b:9c:07:7f:51:56:2f:fe:18:77:26:f7:aa:11:
15:f2:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:54 2026 by rpki-client