Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: paiBGa0SZlKd/CpgFBfg0V9g0I7pH1/95/AGL6LeFuo=
Subject key identifier: AF:2B:2B:7E:34:78:C7:B6:8C:21:ED:1B:04:90:44:33:0E:41:15:63
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 019D378947C531B98AFF0C5B51A60918352A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 0C89
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: Ijr3U5L9A9kBoRZapHHN7HH4TTDMqnt+Sluv0fEoh0k=)
2: wEItEwxXTo8UEkPrbbqheWRaMG8.roa (hash: yoZaY3FJD2E2HyfnXNJYmTTSvlkSy7fNejE8EJiOlJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:47:c5:31:b9:8a:ff:0c:5b:51:a6:09:18:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=af2b2b7e3478c7b68c21ed1b049044330e411563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:6d:e0:05:db:4e:a4:85:b2:5a:ea:37:5a:
27:bf:9e:36:b2:f2:b8:3a:e9:df:52:16:c2:42:47:
40:59:92:53:30:85:43:df:36:7b:b9:d4:e3:f8:e3:
67:43:83:ec:71:71:cc:1a:76:4f:1f:6c:2c:bf:e1:
01:6c:f6:96:18:f9:fa:00:26:09:30:df:19:45:2b:
ca:a0:1c:62:3e:a7:4a:e4:5e:69:e1:53:97:68:02:
fe:47:02:77:b8:3a:d0:8f:87:30:8c:53:d6:e9:2d:
85:90:a0:97:97:50:0b:2c:ef:04:8c:eb:66:06:e9:
aa:58:da:3b:11:a8:44:f2:3f:9f:a8:42:27:c0:5b:
9a:1c:57:13:1a:e2:97:8a:4e:4d:da:7b:fc:70:1c:
57:71:3a:45:8f:db:4d:7b:eb:88:e8:44:b6:d8:cc:
e9:4b:ce:0e:cd:32:35:5d:29:6d:1a:13:ed:f3:d7:
0b:8b:39:34:c7:a2:75:41:8e:72:67:37:b7:53:4a:
e3:46:44:40:5d:78:fc:60:d4:e2:f8:d7:cf:bf:59:
55:39:32:d5:09:7f:45:80:ad:c7:ca:22:b9:ba:83:
ed:1c:9a:1d:c7:a8:7b:6a:74:2c:c2:f3:db:d4:1b:
b1:7d:ca:32:51:1a:e4:53:af:51:78:16:07:ee:b5:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:2B:7E:34:78:C7:B6:8C:21:ED:1B:04:90:44:33:0E:41:15:63
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:fd:9f:1d:86:ac:0d:f3:17:9e:33:c4:dd:91:6c:c4:f6:
a4:ce:89:14:1a:28:50:71:f4:2a:c5:ba:1c:11:71:86:93:c9:
2a:e1:22:fd:b8:af:a8:a5:24:2f:3a:f6:71:d1:02:2a:3f:65:
87:ac:99:d7:6b:59:4e:84:24:f3:ee:00:af:5f:4d:65:f5:e8:
dd:f3:86:1a:32:48:00:74:80:ed:6d:8a:0e:ec:2b:14:45:34:
f9:b8:b3:22:6f:21:b0:98:21:83:e8:7a:6e:bf:93:99:ef:8c:
70:65:d1:6b:05:76:03:dc:23:97:61:a8:25:9b:85:5a:3a:27:
69:83:58:f8:24:44:23:4b:aa:bf:e6:c4:9f:c4:2f:ba:9d:3e:
d1:a6:14:10:7b:59:23:2b:e8:8d:24:c6:a7:b7:21:66:59:5d:
2a:2f:1c:55:3c:4c:38:12:af:d4:e4:ff:d4:00:08:51:d8:25:
9d:17:50:3b:46:d4:e8:31:b7:bb:4e:5e:3c:2b:68:81:f4:ad:
76:88:ba:47:d5:7a:d1:91:25:63:ad:aa:2b:5c:d2:86:1e:0d:
f6:45:71:33:eb:73:59:5b:b6:0a:cd:ee:b7:76:19:39:7a:d5:
6f:ab:5b:86:7f:8d:cc:d9:dd:39:8e:86:d5:dc:d1:17:6a:a5:
de:43:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:11 2026 by rpki-client