Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: I389EM89Q251vkebPG1LZE0IXJKSmJ0Xy1X3UzJTEoE=
Subject key identifier: 4D:D3:87:36:9A:69:CC:09:D2:39:03:6D:74:46:FA:B0:5A:75:AF:B1
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019D382DE73586AB1F6B74C098B739EBC69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 12B3
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: fsSqx-sJOq4vroeEOUGBFgj-qRA.roa (hash: Kj/0WaqJ/9uoPdv4OzfzKC4J1NRIorJtH689BgmJH1c=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: fkHEiXTfMoE9FFDgNmyV1hggsr/3OqnRdbihv5vKoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e7:35:86:ab:1f:6b:74:c0:98:b7:39:eb:c6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=4dd387369a69cc09d239036d7446fab05a75afb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:0a:57:7a:0b:67:9a:a2:7b:27:bb:29:5e:
94:d2:82:4b:cb:b8:eb:50:04:26:67:b4:90:9c:0b:
c0:cb:45:c7:c4:69:93:66:c6:a1:cf:37:c9:3b:e6:
f4:be:9c:c6:57:9e:6e:18:3d:34:2f:48:00:72:99:
eb:ad:c7:b1:f6:f5:02:f2:ba:52:6b:f2:b2:30:74:
03:f7:be:e6:94:e0:76:0c:ba:2c:1b:77:9e:ff:27:
08:e2:dd:b7:f4:4d:5f:51:f2:da:68:63:e4:b2:54:
0e:09:6a:d1:ca:c6:1c:04:54:8a:c1:b7:c0:cb:4a:
4b:51:1f:e7:cf:a8:2f:41:c0:7a:c7:b0:7e:64:6a:
26:7a:83:2b:20:e6:da:be:ac:d7:20:c9:27:f9:95:
db:28:04:ba:f3:ea:a5:90:a2:4b:ad:64:db:f3:c1:
44:16:36:ef:29:f4:c0:f2:93:23:8e:f6:75:ba:d4:
5c:7c:ea:5d:35:fa:09:3a:a3:62:bc:cc:e2:7e:34:
ed:b9:a7:ce:3d:b2:12:30:9b:e0:42:9b:f5:00:83:
31:ae:43:81:20:c3:b6:ea:ef:d8:b7:79:67:67:4c:
8a:6c:3c:bd:c1:c1:1f:c8:ee:b0:9b:90:83:16:c2:
75:7c:a8:28:3b:4b:c9:0d:9d:a4:c5:0a:13:fe:26:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:87:36:9A:69:CC:09:D2:39:03:6D:74:46:FA:B0:5A:75:AF:B1
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:29:4b:93:6f:41:35:e9:80:9b:2e:55:f1:6f:75:e6:55:34:
91:a9:1a:e8:85:3c:f0:1d:f2:36:f1:67:37:c2:a1:2a:4f:29:
77:83:cf:ff:b0:31:8d:c8:3d:fc:47:13:9a:e7:fb:6e:85:aa:
c8:50:df:81:69:fd:bc:a8:1c:44:b4:b2:2f:a8:92:b2:2b:0f:
54:87:20:13:6b:82:77:94:02:78:1e:5e:14:24:4d:d0:ef:96:
64:93:3d:b1:0e:ce:c8:ce:53:ec:7a:f8:74:52:a7:4e:f5:69:
00:14:08:af:ff:94:49:f6:9c:e1:8e:79:95:d6:3c:0b:fd:b6:
4b:78:93:63:20:17:e8:81:ea:15:13:f8:b6:cf:eb:3c:b7:75:
d7:9e:5c:76:b0:1b:af:1d:2a:09:41:23:8a:54:dc:af:e6:67:
3e:95:bd:e4:15:90:78:a9:bc:68:3f:d7:7d:6e:77:6c:4f:19:
6e:c3:d2:3b:04:de:0d:a3:38:f1:af:b0:d8:ad:36:b7:98:03:
b9:9f:7f:f9:ec:b3:ac:42:8b:a1:91:f3:ae:d4:d5:63:d1:6d:
da:56:47:41:cf:fa:99:c5:9c:c5:a4:97:e0:6a:16:c4:0c:50:
77:90:8f:d5:7f:2e:ad:7b:a9:e5:c9:4b:c6:3f:82:12:13:a0:
d5:29:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:56 2026 by rpki-client