Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: Gty70WSzaGU06uhQ/5lh+rWaNXwxSjHU+lxIstQQ9J8=
Subject key identifier: 29:BA:CA:2D:A2:70:89:DD:EA:E1:15:47:59:02:B3:75:6B:83:D1:3D
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 019CBE844E582C4ADB73A8CF7EEC7DC6BD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 1852
Signing time: Thu 05 Mar 2026 15:01:07 +0000
Manifest this update: Thu 05 Mar 2026 15:01:07 +0000
Manifest next update: Fri 06 Mar 2026 15:01:07 +0000
Files and hashes: 1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: gAN4zXufmemXNH/MFS5VLfymYV7ifc8NqL5DwLuz/pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:84:4e:58:2c:4a:db:73:a8:cf:7e:ec:7d:c6:bd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Mar 5 15:01:07 2026 GMT
Not After : Mar 6 15:01:07 2026 GMT
Subject: CN=29baca2da27089ddeae115475902b3756b83d13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:51:fd:b0:a7:13:e2:3f:cd:e4:f2:84:cb:
c0:9e:fc:85:bc:ca:75:5f:c8:bc:6a:23:df:61:1e:
b3:4e:be:a2:68:10:34:ad:62:97:5a:8d:53:3e:e0:
27:9a:dd:ff:09:3c:97:c4:ce:59:92:20:4a:a6:bc:
4e:e0:fc:d7:a9:83:d3:07:42:80:80:ae:25:9d:3a:
2c:8d:e2:6f:db:72:74:c0:d1:fb:ef:6e:2b:29:59:
86:91:bd:5f:f5:43:98:92:57:50:f1:f4:c1:b5:c1:
e5:4a:96:f8:15:3a:32:4f:56:d5:d3:42:66:7a:cb:
9a:93:36:21:c8:b2:1e:5b:1f:8e:ba:c3:c9:28:14:
3f:c6:92:39:c1:ad:9a:cd:38:c7:58:92:c4:5c:82:
6c:cc:71:89:2c:d6:e0:24:29:fd:32:9c:e6:79:ef:
77:cf:55:a0:8a:25:c7:17:76:40:ab:09:3c:e4:07:
fd:5b:46:78:76:99:7c:49:ee:0b:1a:ee:77:96:4f:
b1:60:01:fe:b8:9b:21:dc:53:ce:fa:8c:8a:02:17:
91:74:87:f6:9b:ba:0b:e8:43:d3:d5:bd:8c:7e:02:
52:03:3a:95:f2:e7:34:b2:0d:e3:2e:6f:23:50:f1:
16:da:df:b2:2f:79:9e:d3:0b:01:77:27:99:15:0a:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:CA:2D:A2:70:89:DD:EA:E1:15:47:59:02:B3:75:6B:83:D1:3D
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:60:f4:45:fc:0b:b3:a4:85:cd:31:cd:79:21:87:7b:05:1e:
d0:20:dd:9d:f6:4b:41:c6:68:ce:ab:88:2d:f6:b2:c3:68:42:
05:a0:36:ec:57:ee:81:d9:fc:a9:c3:55:1b:41:3b:39:c6:ef:
d6:76:a8:d7:da:73:3c:ad:43:e3:09:82:b4:60:dc:29:d1:f6:
b7:0c:c4:22:e1:65:ee:08:dc:38:b1:ba:0a:c2:23:92:5f:36:
f2:5a:fe:06:f3:b7:44:98:2e:75:ce:a7:f8:86:bc:10:26:33:
a0:12:b3:57:77:e2:08:aa:0d:56:eb:02:41:f9:06:c2:91:4e:
39:3a:67:7e:df:93:1d:be:db:3c:a4:27:a5:d9:d5:39:33:26:
61:9d:f8:96:02:05:cd:c4:d1:dc:d0:53:0a:d2:41:9e:d5:a4:
dd:04:a7:e7:fc:21:ff:27:24:86:38:28:fa:ec:e1:b3:76:14:
4a:fb:f5:8e:93:1d:d0:02:53:4d:7b:99:92:ec:98:9d:2e:f9:
10:6a:de:a7:73:61:ec:6e:7d:07:09:b4:69:ab:c3:f5:81:bf:
bb:e6:d8:3d:83:ce:41:a3:dc:ce:e4:4f:85:e4:93:51:a6:6d:
ad:ab:7f:36:7a:14:72:ac:25:1c:13:aa:71:4c:38:03:b0:6b:
96:10:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:05:44 2026 by rpki-client