Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: L+Pyl/D4ntX5ExNWwaN8cio7nkMm+Roin4tvLXQgci4=
Subject key identifier: BC:DC:07:4F:19:09:A1:86:CA:28:AC:8F:39:78:A8:5F:4E:49:DA:52
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 019D375258E2AB164A3385519BDF3240D493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:36 +0000
Manifest this update: Sun 29 Mar 2026 02:00:36 +0000
Manifest next update: Mon 30 Mar 2026 02:00:36 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: Bb5HfqDi3NUWKuz9HnOVaBJilM1mzkvBTs+aQg9E1cI=)
2: UYxV8QSgYZ229nA1vzJ1qGvwQXc.roa (hash: LcGONu3wOoaVH6EWybaw4+qxO61czSJNIoY1SzqQdQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:58:e2:ab:16:4a:33:85:51:9b:df:32:40:d4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Mar 29 02:00:36 2026 GMT
Not After : Mar 30 02:00:36 2026 GMT
Subject: CN=bcdc074f1909a186ca28ac8f3978a85f4e49da52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:05:47:fd:40:4b:a8:a3:42:7f:16:ae:eb:
1d:ae:46:5f:fd:21:76:d1:c1:66:5b:8e:70:0d:27:
8a:8f:33:a6:2e:72:ae:4e:4c:f8:93:6a:38:71:0a:
2b:06:ec:6f:e7:fe:e6:81:f1:4e:0a:59:72:cd:0f:
f0:aa:4f:54:de:43:45:ac:82:7e:4d:21:59:26:2f:
4b:e5:fc:5a:c1:36:4f:60:a1:2c:08:2e:14:a0:03:
2e:f0:1a:33:17:0f:df:8b:63:ae:48:c2:7a:48:f2:
5c:25:8d:4b:ce:05:27:61:6f:b0:6b:52:4e:30:89:
77:68:a5:f3:dc:f6:8e:67:61:00:08:2e:6a:7e:d3:
77:be:94:5e:41:c6:5a:ff:56:90:c3:c0:33:db:f3:
2d:95:a2:c4:9e:aa:ff:4f:24:c7:ae:83:f5:93:09:
a4:ff:c6:8a:34:c3:98:97:b9:0d:2c:99:b3:0d:94:
a9:a9:52:65:9b:54:ec:f7:a7:7b:29:1a:63:9c:0c:
a9:ed:f6:a2:b5:c0:f9:92:e7:6d:02:0f:70:e0:f1:
e1:a9:a5:1b:ae:21:1c:f5:be:06:c0:81:52:6d:16:
2f:ec:35:f2:4c:15:39:5e:2b:8b:65:a7:28:de:b2:
56:3e:e7:93:96:4f:f5:9e:0f:34:45:b4:b9:0a:ad:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:07:4F:19:09:A1:86:CA:28:AC:8F:39:78:A8:5F:4E:49:DA:52
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e9:11:cb:69:28:6e:9b:25:92:5f:60:74:6e:d0:33:d8:8f:
8b:7a:73:c7:44:32:56:24:33:1f:85:d5:15:e0:de:08:6e:67:
75:07:c9:89:0c:11:67:ad:d6:36:b6:fa:da:14:f8:ba:0f:ea:
34:95:ba:f3:36:8a:53:72:23:07:84:7d:ac:b1:ba:5a:3f:b1:
40:db:c6:b4:06:58:d4:d7:3e:83:77:68:1f:8f:62:ad:3b:d2:
3a:ac:e7:cb:d8:6c:01:29:4b:18:41:bb:53:58:b1:76:c4:28:
f5:62:e4:53:52:88:7d:1a:b7:c4:4b:4a:51:ec:18:92:ee:1c:
c3:6a:74:8a:2f:1e:71:b9:89:bd:1e:a5:28:4b:0a:23:f9:79:
0d:56:16:21:e3:3f:6a:70:63:72:58:bb:42:f2:78:54:04:90:
cc:92:f6:28:47:df:32:48:b1:49:ce:29:ba:0d:75:6e:d5:6d:
7c:6a:31:42:20:8f:c9:6d:14:73:de:d5:82:15:be:e8:ed:33:
a0:72:af:04:81:21:95:7c:be:31:5d:9d:62:b8:e4:a8:0e:b4:
76:4c:62:27:c5:54:46:11:46:d0:6a:51:bf:cd:1d:11:8d:e7:
f2:1b:a0:0b:1a:9d:ee:19:34:cb:bf:a6:d6:00:2a:c3:6f:57:
ee:4e:22:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client