Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File: vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier: qPlW43+vSVe/8LsXAa3C+sY+u7XSOIOlx46eHVKBB+c=
Subject key identifier: 1D:14:62:B2:06:CA:3F:B5:6B:46:91:79:BF:68:5C:2D:12:8A:EA:5C
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer: /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial: 019D37C12B2E0688D1F21CF70BD0BABF2BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number: E1
Signing time: Sun 29 Mar 2026 04:01:39 +0000
Manifest this update: Sun 29 Mar 2026 04:01:39 +0000
Manifest next update: Mon 30 Mar 2026 04:01:39 +0000
Files and hashes: 1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: 9F7zaJMBweWDR9DvfN/68mKEcFPuqI/RiUTrsV2cOpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:2b:2e:06:88:d1:f2:1c:f7:0b:d0:ba:bf:2b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Validity
Not Before: Mar 29 04:01:39 2026 GMT
Not After : Mar 30 04:01:39 2026 GMT
Subject: CN=1d1462b206ca3fb56b469179bf685c2d128aea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:8a:b6:e6:af:02:9c:f8:b4:a3:2b:6a:f4:
3f:f6:98:68:08:cb:fb:f0:d8:04:f2:51:04:00:bf:
b6:f9:da:99:91:76:f0:99:c5:c2:41:95:60:04:d2:
46:22:f6:70:9c:d0:93:64:cb:75:81:fa:22:6a:76:
55:5e:c4:08:5a:e8:5e:43:84:25:f0:78:f2:93:b9:
ef:89:70:c8:15:86:db:27:63:b6:ac:17:e1:f4:b0:
fd:5d:d4:07:54:45:4e:6b:f7:67:44:c1:80:b2:94:
ff:45:fc:53:2f:9b:81:30:69:b5:86:60:1c:11:f7:
b1:bd:c7:5d:58:7d:2b:55:78:f6:78:e9:e8:93:19:
45:2c:95:73:40:19:e2:0a:73:42:19:a0:ca:80:16:
f4:1c:7b:15:6c:f7:bb:86:72:3d:56:e3:75:09:7e:
ac:f4:55:c6:0e:f3:09:8e:49:07:45:8f:80:23:2e:
cf:3d:ae:aa:96:97:c9:a7:fc:dd:e8:bb:e6:db:01:
90:a1:7d:d9:39:35:4c:a3:d2:a8:88:a6:0c:ce:56:
11:a2:07:ee:ee:0a:d0:9b:d2:4d:4b:5d:48:30:03:
de:25:7f:de:e7:f2:1a:63:33:e2:de:30:d1:9f:c8:
ff:76:43:57:f3:ec:63:04:7d:e0:4b:78:23:40:d4:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:14:62:B2:06:CA:3F:B5:6B:46:91:79:BF:68:5C:2D:12:8A:EA:5C
X509v3 Authority Key Identifier:
keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:8d:09:97:5f:9b:d2:33:4f:2c:62:d3:a3:5a:19:e7:9d:
54:82:6c:c9:6a:3d:47:b7:38:e5:9a:8d:b5:e6:12:a8:f4:70:
fe:cc:50:d3:9b:8a:f2:5b:bd:f0:7f:6e:90:ea:ce:49:c7:ef:
dd:a7:be:de:db:50:3d:2e:7a:58:33:b9:24:38:d6:00:1f:31:
73:bb:ca:45:4d:b9:0f:b3:b5:9e:ba:3c:ad:e8:75:4c:4d:67:
03:e3:94:cd:28:0e:f9:4c:88:d7:3c:34:ad:e4:78:3c:5c:7a:
05:f6:27:7a:8b:d4:1f:ca:c0:5f:19:32:ec:3d:e1:b5:ea:01:
92:5b:d9:c6:98:4d:e9:92:87:26:15:9a:4d:ea:ab:ef:33:07:
b7:33:13:95:46:95:f4:87:eb:07:dc:01:35:4f:d1:bf:e5:70:
7e:7e:2d:58:4a:be:f4:bf:59:30:c6:8c:98:de:89:ac:78:5c:
7d:a0:27:5e:1e:b9:1c:d5:58:00:e5:08:3b:e9:ed:a7:a9:e4:
4c:6a:3a:c7:2e:5e:cb:f8:68:a6:e9:4e:73:6e:f6:54:a1:ad:
ba:78:0c:88:eb:31:30:23:fb:17:b4:91:d1:e8:4e:12:88:21:
0b:06:10:b5:cc:eb:1f:23:3f:99:d6:9b:76:3e:01:5f:ab:79:
b4:bc:03:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client