Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: ATz8EUHeqeueIQ8XZgyPQ7kb/2laMfhbSUqq5pr1zdQ=
Subject key identifier: CE:94:BD:F0:06:93:81:C0:EA:D4:3C:AB:3B:70:AB:9F:D3:96:83:C0
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019CF61775CCF8C52442F0CC64377BE7BD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 0BA1
Signing time: Mon 16 Mar 2026 10:00:58 +0000
Manifest this update: Mon 16 Mar 2026 10:00:58 +0000
Manifest next update: Tue 17 Mar 2026 10:00:58 +0000
Files and hashes: 1: dk1G9hz2trfq5CaaUBMe9RcS93I.roa (hash: lH6gfT8/HMNpYY4aojCo2W76iGRxmIa0HJsfcgDAePE=)
2: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: 5AI7SGPZFc2L01QuCdGgsaWMX7WR8NP63XYwsuTVHe0=)
3: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (hash: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:17:75:cc:f8:c5:24:42:f0:cc:64:37:7b:e7:bd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Mar 16 10:00:58 2026 GMT
Not After : Mar 17 10:00:58 2026 GMT
Subject: CN=ce94bdf0069381c0ead43cab3b70ab9fd39683c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:48:8b:1c:e1:bc:0a:c8:d8:19:96:f2:8d:
91:f7:94:0c:9b:2f:0a:f4:5d:c1:0d:27:60:ed:a6:
45:dc:96:36:ca:fe:d1:a8:99:c2:86:8f:3f:96:63:
75:61:3f:96:f6:98:d5:11:32:68:be:75:f4:04:78:
4a:b0:fe:32:e7:25:c3:22:2b:59:bf:08:e7:9e:d9:
0e:0a:f9:0b:65:33:ce:4b:28:11:a4:60:88:88:db:
50:8d:8d:ab:a0:db:ac:11:f4:73:a8:b8:2a:e4:da:
19:cd:1a:1d:6c:6c:fd:8d:48:f0:ad:98:e7:49:76:
f0:5d:c6:4f:bb:b8:0d:18:be:42:3c:0a:3a:3f:98:
bb:d9:80:40:c3:8c:39:5f:35:1d:d7:a8:e4:47:b4:
a6:84:af:cc:d7:d6:64:96:d4:58:11:65:09:70:59:
6a:93:a1:3a:72:ff:6a:ba:12:d1:ab:9e:57:7f:b0:
0e:eb:2e:57:a6:a4:c4:e8:76:9c:5d:b3:c2:a5:88:
fb:44:87:c0:10:05:cc:0c:49:86:ee:cd:f3:3a:3e:
2a:3d:66:e0:2b:23:a8:6c:04:9c:87:bf:47:d9:e3:
2a:50:48:38:d9:2a:21:e7:a0:97:3a:48:82:af:f1:
78:d0:63:5f:49:6f:dd:61:8c:ed:1c:fe:9a:4a:a1:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:BD:F0:06:93:81:C0:EA:D4:3C:AB:3B:70:AB:9F:D3:96:83:C0
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5c:c7:1e:82:83:21:0e:e2:03:9d:ba:6d:73:3a:ba:b4:b9:
b4:7d:e4:83:7d:da:c2:72:c2:43:87:ba:23:fa:77:25:8c:09:
82:93:29:b0:a9:60:ac:85:d1:3a:d4:74:dc:45:fd:fe:ab:dc:
db:43:74:0b:77:dd:86:13:df:ef:fd:bc:2f:c2:2e:66:c1:2d:
84:ad:14:7d:d3:29:00:e9:e6:28:db:df:62:ae:2a:37:9c:a1:
7e:e6:b2:5c:7c:1f:1a:4f:10:8e:3a:12:e2:dd:b8:2a:73:5d:
57:7b:a0:12:14:22:e8:3d:5d:e7:16:01:99:3c:1a:15:05:01:
b7:02:22:8f:79:10:32:58:85:2d:c1:4b:54:29:10:c3:69:38:
62:87:70:01:3c:2b:65:2e:a1:d1:30:11:cd:ab:20:fd:30:f1:
a3:59:ea:a7:fd:cb:f3:26:29:8e:b0:d3:c1:39:fb:73:e7:98:
bd:9c:5e:1c:01:73:1b:11:05:b9:cc:e8:1e:f6:66:f3:43:74:
48:60:59:b7:91:1a:9c:4a:86:31:d2:8f:6d:47:79:60:1d:3f:
e5:a2:de:1c:79:67:bc:58:39:3e:fb:07:1f:92:00:80:62:43:
cc:1b:ac:a6:2d:ad:88:e1:8a:8d:62:71:1f:ea:27:07:5e:a3:
44:2e:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 17:27:49 2026 by rpki-client