Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier: 88/5RI5ajmC94MyfrWz55E6jSHau/C9jr0MMI03ONPc=
Subject key identifier: 4E:D3:A0:DB:8B:BA:E4:F5:89:53:F0:07:B8:41:33:8A:8F:B6:8C:DB
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 019D38D2C3C99B47ACE860188A7E966A14BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: MJsBtMXDsOv4TTZ2efs5vOnxahY.roa (hash: jJGmnHuAyaWahhHhka2WAv2IAmrJwIOdndtEnTBheHs=)
2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: FOXMjjdVregLCFpDMtXI+DnASu3gVKjsQ9jq2ms1kzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c3:c9:9b:47:ac:e8:60:18:8a:7e:96:6a:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=4ed3a0db8bbae4f58953f007b841338a8fb68cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:58:60:b9:85:66:be:00:98:0b:16:82:6e:13:
35:52:47:53:c6:40:e8:2d:8e:9d:b7:43:88:df:0e:
c4:7b:52:84:54:3d:a7:86:88:45:47:48:cb:32:e0:
5a:ea:2d:d6:cf:24:c2:0d:82:96:dc:56:0b:0d:18:
17:a8:1a:a6:e7:46:a3:40:2e:e7:5c:c3:19:38:30:
c3:2a:df:d4:e0:72:85:4c:24:01:ee:ac:ae:65:18:
4e:e6:9a:39:13:22:89:b2:6e:9d:26:6d:7b:ad:41:
08:f9:c9:76:da:e1:38:a6:fb:53:db:0c:cf:39:59:
61:b6:4a:a2:4b:6b:6a:62:85:8d:c4:14:a9:2d:b3:
06:53:c3:6c:3f:2b:14:b0:f6:2f:37:3a:96:a6:a1:
ca:9f:d7:c7:0d:35:c3:0f:65:f9:ad:94:0f:d9:95:
31:24:15:81:e6:64:a0:06:4e:ec:f2:53:f1:d8:44:
06:80:8a:d1:6e:9f:61:5c:de:74:d3:79:83:f6:af:
99:79:49:cb:d3:fe:af:8e:25:8c:db:b6:f8:ab:b6:
2d:df:de:4d:d3:10:b3:6c:51:46:a0:6d:e8:43:69:
4c:32:c3:b3:70:17:84:1d:83:65:de:38:48:52:9b:
d2:f8:77:9a:83:e2:1a:ac:86:ca:59:9c:af:d1:3b:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:A0:DB:8B:BA:E4:F5:89:53:F0:07:B8:41:33:8A:8F:B6:8C:DB
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:4f:eb:bc:d0:0e:35:ef:4b:03:35:ef:e9:a0:4a:42:0c:
9b:85:27:7c:74:0a:65:1e:36:5b:b0:cc:12:ba:45:97:c8:5f:
5b:16:7b:e4:97:72:49:76:03:42:77:78:4d:f5:fa:9f:a7:69:
72:f8:07:1e:ae:47:39:cc:7f:71:1a:ff:b6:40:5e:00:35:f4:
18:4c:59:37:84:87:40:aa:ec:ef:b7:5c:b0:aa:5e:41:bd:d9:
bf:f0:f9:26:d9:e8:19:ec:2f:68:ad:1e:da:32:4a:01:04:02:
a6:e2:3d:44:6b:f7:7a:7e:28:44:8f:16:77:c6:d1:69:28:4d:
27:53:78:6b:58:7d:9e:0e:01:b1:22:16:24:5c:62:5d:c7:7e:
28:8d:29:b1:fa:57:cc:38:61:2e:ce:eb:f8:78:1e:05:4d:d5:
d3:74:84:48:95:ff:44:63:6d:9f:f7:c8:71:fe:50:05:a9:75:
c5:d3:56:a9:bd:a0:76:38:96:ea:10:f0:08:3a:26:98:b6:ea:
4f:6d:f5:e8:60:2b:bd:6f:fb:4c:01:e6:93:a1:08:9c:fb:bd:
de:bd:15:53:7a:4b:fe:24:5f:69:ea:b3:90:f7:c9:70:0e:a5:
2b:90:0d:26:83:5f:14:19:86:67:84:eb:b7:1e:62:bf:01:0c:
a7:d6:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:14 2026 by rpki-client