Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File: Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier: zqhxvKP28GFrV5XOXaKQ1P14nMdfvLNaG3gOjIxWmJg=
Subject key identifier: 83:1A:CE:1C:7D:F0:4A:40:EB:70:83:5C:21:57:EA:5A:9D:30:6F:5B
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 019D3A1C7963CA685673AE519BAA73458A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:00:37 +0000
Manifest this update: Sun 29 Mar 2026 15:00:37 +0000
Manifest next update: Mon 30 Mar 2026 15:00:37 +0000
Files and hashes: 1: TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa (hash: Qu2IYNlx3K5ylZfshukrlEjDYd3s5hf2xdzeBfabSNs=)
2: V7ODURGwxz4tURBL4H9BoCPbplc.roa (hash: lDSKkdtVb6mF6CecrHvF/q0QF6YgykJ09spaIwO99EU=)
3: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: c6vit9DOBmH4uDBY8YLegYP09Q1XM9JPieqkgLSTqt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:79:63:ca:68:56:73:ae:51:9b:aa:73:45:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Mar 29 15:00:37 2026 GMT
Not After : Mar 30 15:00:37 2026 GMT
Subject: CN=831ace1c7df04a40eb70835c2157ea5a9d306f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:0c:4c:d9:6e:3c:ea:42:98:95:b1:31:07:
bc:5b:ef:81:4c:cd:54:dd:79:d8:56:00:19:39:8c:
e9:dc:a6:1e:af:ba:82:ef:4f:54:ba:e8:82:5d:d0:
b6:2e:b9:bf:08:50:21:e5:58:bc:97:9a:cb:cc:60:
95:4a:6c:d7:8e:00:2a:a3:9f:5a:a7:a5:25:b8:ea:
6d:8e:99:7d:98:8a:7f:a2:5d:11:e7:ab:6f:51:e2:
b9:67:73:7f:32:a5:98:a8:c5:5c:18:2b:35:30:83:
f4:92:5e:73:cb:e2:a8:61:af:eb:d3:d7:44:35:76:
97:e4:9b:94:77:b6:ca:00:7e:eb:d5:99:f1:03:2f:
b2:7a:ef:04:49:c3:f6:f7:39:22:b9:e0:f2:14:bc:
26:81:ec:1d:03:17:46:d8:98:82:d6:5e:f6:be:2a:
6d:c6:d6:b4:a4:fa:ba:70:ed:68:9b:43:c7:c7:c8:
0f:95:c4:93:db:e3:7e:cf:b3:17:b0:b9:31:41:8a:
d6:da:87:d4:83:97:d7:46:d6:2f:39:c3:50:36:85:
9c:e1:22:04:5b:92:36:d5:37:4b:50:7d:bb:f6:3c:
5e:cf:b8:b8:c5:dc:24:e6:0d:80:a5:2a:67:fd:92:
e6:cf:49:c8:2c:99:8d:b5:8a:46:21:a8:f2:db:5a:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:CE:1C:7D:F0:4A:40:EB:70:83:5C:21:57:EA:5A:9D:30:6F:5B
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:89:48:37:5c:ab:8b:9a:cc:ae:eb:fc:f3:42:a0:91:93:
d5:3f:a2:8e:79:03:f6:51:52:1e:77:f0:04:b1:64:36:df:9e:
3e:7b:ee:39:9b:71:28:b5:4b:c3:e0:ac:d1:af:b2:4a:84:92:
6b:d4:5c:e8:29:0f:ad:4f:79:5f:85:71:84:47:a2:55:c4:2c:
d0:29:c8:d3:e6:da:e7:3d:ea:82:98:18:07:74:a7:c8:d2:34:
a3:1c:56:a8:9d:e6:da:84:cc:5e:44:f0:44:ac:0b:2a:39:31:
67:7e:a6:8a:9b:a6:e9:7d:37:66:9f:5a:cc:fa:50:7e:3a:4b:
9c:7b:7c:00:d9:41:f4:2f:25:38:73:74:de:b9:b9:b7:88:c2:
bc:51:fc:2b:f1:61:c6:17:54:e6:2b:1d:65:21:e0:96:2d:93:
f9:e2:35:4e:30:b8:83:0d:d4:a7:21:da:bc:4c:47:82:9f:5d:
d9:98:93:0c:21:ad:80:c0:50:d2:b1:92:ff:e6:31:b0:3f:54:
81:25:03:87:55:33:f2:fc:bb:c4:9a:29:ff:3b:38:99:be:3d:
98:1a:a2:7c:1a:cb:4d:0b:37:88:84:86:11:c9:16:fd:84:20:
f3:7f:77:ef:01:b5:3c:0b:a7:41:81:2a:3e:8f:33:aa:a8:16:
34:7d:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:30 2026 by rpki-client