Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: uVWCTQoaKMtK0CpKx5LJlBfqP+tjhkzRR1T+BeUF19c=
Subject key identifier: 3E:7A:2B:0C:91:58:68:8B:1A:A6:7D:41:2B:DC:99:9A:41:7C:93:95
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019D39780DC723078B174935A5A877357F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 062F
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: EJFSOtkmc_lWhhNXUUs4nruRB1Y.roa (hash: mFAyY+U8ccrimuAI66qBOmKYa7OrPg3wRggOsTclU6Q=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: AGyuzH7IBY2lsBC64uGwMwkQAQCljFv87OBLkXwYyrc=)
3: zafpGp_sXGMh4yV6m5qLy7sLUpc.roa (hash: 2igpnziXWmq3SSWSag4FaHfVQQZsNnQ4/MO8icdVPHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0d:c7:23:07:8b:17:49:35:a5:a8:77:35:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=3e7a2b0c9158688b1aa67d412bdc999a417c9395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:d8:d3:46:71:57:15:c6:30:c2:a8:02:67:
01:11:8a:0b:ed:28:90:65:93:04:62:7b:a1:a2:07:
0f:88:91:f4:14:ea:bd:0e:3a:b1:c6:d2:db:a4:e8:
79:82:4a:54:98:f2:3c:3f:ca:ba:99:a8:db:d1:4d:
a9:a4:cb:f2:cd:a1:20:b8:0a:45:8c:75:c3:4b:ac:
2f:6b:44:9f:e3:ee:24:07:60:f5:32:38:9f:ed:23:
89:31:12:1d:c2:2e:17:02:30:31:1f:64:cf:26:80:
3f:39:f0:f6:5f:02:76:bc:fb:c1:99:07:d3:f4:d3:
6c:71:2a:c8:c0:15:d0:af:f6:b6:98:6b:1a:fc:42:
cc:c7:09:17:40:00:0a:e4:8a:b1:23:7a:ff:69:39:
1c:e6:13:cb:d1:25:e5:5b:55:44:bf:af:52:10:89:
31:e6:08:c9:d2:70:a4:2c:32:e8:13:14:82:a7:ff:
44:2c:28:fc:88:7b:f6:c8:96:84:a7:a7:ee:30:88:
c2:8b:98:d2:2f:86:8b:97:56:e7:12:da:2d:b8:60:
a0:ca:c1:33:96:73:c6:53:b6:59:9d:07:d7:90:5a:
d5:8c:9b:d7:7d:a2:fe:a6:48:b1:b9:77:1f:fc:27:
35:69:fc:63:d7:cd:eb:5a:8a:af:0d:96:88:79:22:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7A:2B:0C:91:58:68:8B:1A:A6:7D:41:2B:DC:99:9A:41:7C:93:95
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:1a:6c:40:07:98:d1:bf:62:0d:16:dd:e7:2a:e8:cf:d3:
f6:91:a8:22:7a:f9:08:27:83:92:63:05:e3:26:1d:e1:ef:a6:
e6:a9:b4:cf:80:72:5a:03:fa:17:b2:ad:1d:34:5f:d0:b0:1f:
df:47:38:7c:32:6a:b2:5c:73:cd:86:87:0e:51:db:4f:7a:ec:
bb:56:14:97:f4:b7:56:fd:83:67:85:2f:f1:64:04:26:cd:da:
52:92:2e:b8:12:66:50:e1:05:14:09:b1:32:1a:39:d6:c3:80:
95:f1:e1:9d:ba:f3:9f:ab:a4:9f:08:93:17:d9:74:27:aa:41:
d6:e8:1f:b0:fa:84:2e:fa:54:61:1e:e5:16:28:aa:2e:9e:d5:
17:1d:1d:1e:e4:f5:68:b3:09:27:a3:f0:3f:fb:4d:66:2c:9f:
9e:1f:87:9a:c9:a6:18:be:33:01:43:0e:8d:11:4e:70:45:0c:
37:89:fd:c1:07:f9:c1:45:d5:93:10:f0:e3:e7:f5:3d:bc:ba:
bd:75:01:f2:7f:89:31:6f:f4:90:91:53:4c:bb:d2:c1:19:8e:
ff:2a:0a:05:55:45:ff:a4:fd:0a:57:11:04:66:fc:c9:29:f0:
d8:b4:a6:f9:93:65:ab:ac:2e:af:56:5e:61:1f:7e:af:5f:8b:
7f:09:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:48 2026 by rpki-client