Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier: +pxYr07Gmpray2xgckJhY32+wtjiVt2+sGQEPh7ltgc=
Subject key identifier: 74:5B:96:F0:F7:14:82:B7:28:9C:3D:1A:22:8F:24:67:A1:65:B8:F8
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 019D38D30D45DBC8691A36786A7618D25551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number: 0CC9
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: bmMSflL-eMQuMBI3gu6949ZANPM.roa (hash: IDrbZuLc/19ByTc6qymrXkkUxTTGRdkMTB5oi5VuL5U=)
2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: OZ2KAp/9awVauXoNSbkruZHzmr2firYIpsMdB82JsYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0d:45:db:c8:69:1a:36:78:6a:76:18:d2:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=745b96f0f71482b7289c3d1a228f2467a165b8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:41:15:0c:9a:7b:d7:0c:2c:40:22:22:6f:
62:66:d2:09:ab:a6:9d:39:63:a6:1c:9a:1d:05:7e:
96:1a:7d:7e:02:81:94:b7:26:bf:e2:58:9c:b8:dc:
8a:60:6e:67:82:aa:ae:ba:83:25:b9:c0:ea:00:78:
a6:d2:f0:9b:72:17:31:bf:0a:5e:55:26:12:c8:a2:
ab:c1:88:03:ab:2a:a2:e9:c0:66:48:a9:9b:9f:b5:
8a:6d:80:b7:fc:22:f4:68:fe:b6:11:15:d3:da:45:
2b:27:01:3d:c2:c1:7c:8c:63:5c:14:37:d8:0f:4a:
fc:c4:0c:90:8d:b1:16:53:cc:55:94:0a:99:49:46:
ac:b9:c3:df:53:5d:d7:c5:5a:92:9b:d1:62:08:cf:
7f:16:bb:be:93:90:06:6a:16:06:91:44:fa:7f:07:
4d:aa:4e:48:d2:34:74:32:9c:f1:26:7b:10:ba:74:
52:09:9f:e5:14:22:bc:47:51:fe:32:59:7d:d7:07:
12:34:4b:e8:0a:b8:8c:a3:d9:23:bc:82:b8:7b:54:
57:d9:43:c0:05:2f:98:e3:57:59:03:45:41:e1:c9:
01:ef:39:5a:fc:90:ac:9d:db:a8:e1:f3:8d:c9:24:
a1:0f:6d:3f:f4:1b:02:03:fe:e0:9f:f0:9a:8e:bb:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:96:F0:F7:14:82:B7:28:9C:3D:1A:22:8F:24:67:A1:65:B8:F8
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2f:05:2a:b4:70:d7:ac:83:f4:30:fc:16:56:53:61:47:71:
96:f2:e8:25:d5:07:97:8e:6c:06:a2:2d:06:a6:c0:47:fb:c6:
63:fe:b4:44:6c:83:30:37:97:98:a1:72:01:2d:7f:03:b9:a2:
09:0f:c2:2d:76:c5:c1:18:da:78:f0:b0:51:25:95:f6:dc:25:
dd:3f:36:2e:fa:12:ca:8a:39:52:f7:e9:23:63:a9:eb:5e:5c:
9d:c4:6e:0a:c9:23:64:7a:24:80:0a:63:53:b2:64:35:c3:84:
17:df:0b:83:7b:b8:07:49:f4:45:e0:be:90:7e:33:c0:b6:58:
84:c8:8f:49:67:0b:73:e0:69:22:ba:4c:38:ee:80:5e:0e:4f:
9c:b0:d6:3a:7f:60:8b:7f:8d:d4:85:8b:c5:6c:9d:06:83:61:
25:b1:33:9c:7f:41:f7:0f:1e:34:e1:05:59:2c:c1:41:d6:fc:
3c:8b:19:50:c4:39:e9:34:f6:3f:23:74:70:91:df:fe:f6:75:
6e:b7:3f:14:e4:0d:f7:24:41:ba:15:86:9d:42:12:7b:3f:52:
77:3b:50:7e:b4:c3:d1:71:de:ba:71:fc:f1:76:21:46:31:39:
3a:72:18:90:0f:b5:8f:22:51:29:69:25:87:08:42:eb:af:ee:
eb:01:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:26 2026 by rpki-client