Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: 1Onbp310GD7FixsWw27jUeNw5UVt6ia3KE2ERJxbtXo=
Subject key identifier: D8:00:2C:B9:D5:4A:6C:67:38:5E:64:10:F7:F2:C1:7F:C4:46:7B:10
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 019CC184F2BD11DA10DF481DE2DAB2E74990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 0228
Signing time: Fri 06 Mar 2026 05:00:41 +0000
Manifest this update: Fri 06 Mar 2026 05:00:41 +0000
Manifest next update: Sat 07 Mar 2026 05:00:41 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: yxeklUnVojRS2hm63rxTWrUZeJcEF3WGt2dug9rNlkI=)
2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:84:f2:bd:11:da:10:df:48:1d:e2:da:b2:e7:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Mar 6 05:00:41 2026 GMT
Not After : Mar 7 05:00:41 2026 GMT
Subject: CN=d8002cb9d54a6c67385e6410f7f2c17fc4467b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:fc:52:62:da:c3:11:6d:ce:50:9b:56:4f:
d8:f1:c4:e2:e7:e9:30:91:e3:79:c4:89:33:e7:04:
96:80:38:95:8a:67:6d:1d:4c:04:8c:9a:8e:8e:59:
2a:6c:72:76:b1:24:06:36:db:26:92:32:c5:11:34:
83:2d:e1:39:fa:01:72:fc:fe:b7:77:19:d4:e3:a4:
65:af:8d:01:ad:32:03:28:27:4b:e3:48:3a:a5:82:
fb:58:5e:50:38:47:e3:a7:3a:cb:73:02:cd:9c:24:
00:d5:d3:da:8a:63:2d:4b:e7:13:e3:68:0c:05:0b:
9e:0c:49:89:ea:f3:9b:6d:ad:f3:19:ee:01:fb:24:
81:db:e1:8c:0f:5d:e6:47:02:22:f6:57:ee:71:38:
9c:9e:79:26:17:50:14:a0:b8:eb:81:eb:aa:f5:33:
90:91:d1:59:3f:9a:2b:90:35:a6:19:ff:1e:d1:e7:
22:25:4d:fc:5e:5f:f3:12:c7:6b:1e:0e:5e:ad:f5:
c2:95:df:8e:51:ca:fc:a4:03:fd:cb:fe:6c:9b:de:
fc:aa:2b:b7:fb:96:6a:b9:e6:a4:13:41:5e:5a:df:
66:2d:dc:d4:2d:af:d9:ce:e0:ad:da:15:8e:d4:fd:
f1:8d:78:f0:ff:5d:b3:77:35:2b:a6:b3:f1:19:36:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:2C:B9:D5:4A:6C:67:38:5E:64:10:F7:F2:C1:7F:C4:46:7B:10
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:97:c1:8e:a1:e9:58:72:66:f0:f6:55:a7:a0:1b:6a:ae:d9:
7a:71:dc:d8:1e:d3:5f:16:99:77:66:de:be:08:30:6b:31:23:
12:57:3b:a8:a8:84:f3:e9:7f:34:66:d9:d1:8e:82:1b:a9:05:
d9:9a:ff:c7:0c:b1:26:db:40:53:54:64:66:e0:aa:83:e9:fa:
4a:ee:1f:9b:0b:1d:ff:51:fb:ff:97:7d:21:2e:8f:f7:90:a4:
7e:fb:86:a4:70:1f:15:78:b5:aa:c8:88:42:00:62:4a:33:89:
ab:c6:65:07:2a:3e:87:58:b1:c6:6f:41:b9:88:9e:c9:d9:89:
0e:19:75:7e:42:b6:a9:97:11:aa:10:d1:a4:c5:06:52:52:72:
ef:05:a9:48:d0:2f:d8:ab:8b:35:46:1a:3b:e2:db:a9:51:d1:
e0:c5:23:2d:c6:0e:6c:a9:4f:42:84:de:82:f8:9b:49:8f:00:
5d:db:f4:3a:06:63:da:53:1f:7f:9c:0d:ea:fd:91:e1:9c:ef:
da:39:08:74:89:c1:d4:1c:09:9b:41:57:d7:99:62:a9:52:69:
fb:3b:00:95:d2:ac:07:cf:d1:9c:dd:07:9a:44:11:04:f2:f5:
6a:59:ee:63:fc:2d:fc:94:e3:7e:64:b4:e4:22:7c:58:15:21:
56:3d:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 13:16:44 2026 by rpki-client