Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: RWud1p9faLEp4OmvE17ksmG/krOHhPraAK/q8hqCI4w=
Subject key identifier: DD:20:C3:F7:7C:C6:FE:F7:54:A2:15:9D:BD:84:B4:31:89:6B:25:22
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 019D3A8AA6C44673A0F7B3CCE75A848749F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 17:00:58 +0000
Manifest this update: Sun 29 Mar 2026 17:00:58 +0000
Manifest next update: Mon 30 Mar 2026 17:00:58 +0000
Files and hashes: 1: UIEwD2VfFc8CUBWRPi8avZckaik.roa (hash: 8TxOkmSlxviUZm8/elB/UjCoqFq67VcYcIo+38oGuL4=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: pNLHuMUkU5yyH5E52XLc2u/P8IsyN6OGlmoAo0u+izc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:a6:c4:46:73:a0:f7:b3:cc:e7:5a:84:87:49:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Mar 29 17:00:58 2026 GMT
Not After : Mar 30 17:00:58 2026 GMT
Subject: CN=dd20c3f77cc6fef754a2159dbd84b431896b2522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:b1:2f:78:6a:62:29:f0:a9:86:55:a1:cf:
3d:17:d4:f7:43:53:19:f6:bb:18:77:26:e2:2d:80:
5e:8e:53:bf:78:ce:c3:7f:40:27:42:5e:de:47:90:
42:1c:e6:3a:93:2a:92:89:c3:61:f3:b1:9a:0e:1c:
d8:f1:57:b7:08:2c:c5:3b:e7:71:2c:a8:0f:3e:dc:
93:c7:db:b5:4f:0c:9a:b4:51:cb:4d:a3:f4:6b:df:
b5:ac:68:5c:28:18:94:94:52:86:ed:a8:b6:da:08:
67:4e:45:f1:bf:9d:20:3f:f1:7a:e8:1a:b5:ed:d7:
73:2a:6d:fc:87:d4:6f:55:9d:2b:7a:a9:1a:cc:e0:
82:38:c3:d5:38:92:dc:8d:46:95:5f:4e:35:44:62:
66:c6:32:43:ff:1b:8b:a8:60:bc:60:9d:bb:4e:c9:
c1:85:5d:e5:47:47:ac:82:bb:f1:a8:e7:92:74:5e:
47:2f:83:ac:03:09:6b:7b:c8:78:77:5b:4a:a4:6c:
ea:ba:63:66:12:cf:e0:c9:b4:0c:cb:81:b9:75:96:
6c:61:fb:15:0a:14:38:fa:ee:e3:67:ae:c5:43:10:
9d:d4:11:5e:62:06:f6:36:37:67:46:d7:20:bf:8e:
0c:e3:ca:bd:1c:eb:c4:83:66:2b:84:ab:a4:e3:21:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:C3:F7:7C:C6:FE:F7:54:A2:15:9D:BD:84:B4:31:89:6B:25:22
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1d:05:02:ed:ac:e6:19:91:7e:68:3a:15:8c:47:b8:0d:22:
9a:e7:de:3f:ef:f7:69:f3:ae:e0:ce:09:22:01:4c:74:38:e5:
f2:e5:3d:f6:42:f5:b1:d5:cf:29:35:09:d1:00:5d:51:62:7c:
fe:11:02:82:2c:e4:ea:40:8b:b9:37:56:57:cd:46:37:b7:10:
f8:38:22:32:6e:ce:ac:87:88:ff:27:05:ee:2a:63:f0:35:50:
92:5d:5b:55:f5:af:ca:a5:99:79:0d:2e:84:0d:7a:21:ad:aa:
52:3d:50:15:cb:8e:d0:de:0e:12:26:1c:f6:c4:51:ac:ab:86:
65:8a:58:51:c7:d7:a0:75:ce:c4:6b:68:3f:17:75:57:b3:d1:
b1:2e:b6:81:45:7d:85:55:d1:57:bb:c3:5e:ce:6e:9e:6f:32:
87:a2:2b:6b:bf:d6:79:ab:b2:7c:34:6b:e9:09:e2:3d:ae:70:
b6:43:8f:66:50:0f:ed:2d:b8:ec:65:8d:e2:95:1f:cf:36:8d:
b0:2e:ed:01:61:6c:2b:69:19:db:65:51:cc:87:f1:fe:b4:5d:
19:3e:6a:9f:d9:2c:7c:02:8c:4d:5b:64:c8:af:37:a6:26:90:
a8:02:ef:13:b5:d4:30:9f:33:00:3e:ed:2c:fe:d1:0d:f3:eb:
4f:ad:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:10:57 2026 by rpki-client