Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: b2h5AeLFI/iMamHCLb/FC0Y60bzGSuCduDb3w6n8qew=
Subject key identifier: 31:A8:D4:46:66:39:DA:8F:CB:60:13:62:FD:44:17:D8:0C:22:F9:D9
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 019CE6A4666BBD8C0FC4D833402B7B35680D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 031A
Signing time: Fri 13 Mar 2026 10:00:59 +0000
Manifest this update: Fri 13 Mar 2026 10:00:59 +0000
Manifest next update: Sat 14 Mar 2026 10:00:59 +0000
Files and hashes: 1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: iroPcYp8BuOuk0ZRSlsGOyWEEOHAa7ggrileWMTLnhY=)
2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:66:6b:bd:8c:0f:c4:d8:33:40:2b:7b:35:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Mar 13 10:00:59 2026 GMT
Not After : Mar 14 10:00:59 2026 GMT
Subject: CN=31a8d4466639da8fcb601362fd4417d80c22f9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:ab:cd:8b:3d:1e:e4:4f:d3:e5:cf:f1:f1:
95:63:fc:a2:cf:47:99:28:53:2e:95:e8:88:97:72:
a8:a5:49:e6:4a:15:86:51:01:88:66:04:8b:87:be:
e4:a4:20:14:0e:91:45:7f:2e:01:31:8d:4c:93:39:
13:b6:be:be:e5:1c:6e:7c:ba:3a:63:d6:87:fc:cf:
3d:90:7e:29:74:38:c0:d8:ba:b6:81:32:a0:6c:1b:
4e:80:1e:e5:7a:ef:89:a9:03:3d:21:41:12:a2:b8:
34:ba:b1:e5:7f:27:05:42:2c:81:f7:e9:d7:ac:06:
f0:17:30:90:bc:8b:12:ec:97:60:76:4e:09:9b:23:
0f:37:72:0e:ae:5e:46:f2:e0:22:ab:fd:61:47:67:
01:2b:07:be:04:a6:9d:60:26:72:aa:58:e3:53:c8:
12:3a:d1:28:76:d0:36:cc:82:00:66:f9:f7:49:f4:
d0:6f:86:93:c7:2c:b8:a8:0a:4c:88:74:ee:d3:94:
3c:c4:fd:4b:73:f4:b2:79:75:1a:f1:22:58:b4:e1:
63:fb:c2:90:d3:7c:93:69:eb:00:28:1f:06:74:0e:
61:7c:56:37:25:11:31:2b:d1:23:f1:dc:70:c6:65:
5c:51:4e:61:a5:d5:52:3f:16:87:53:80:32:53:b2:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:D4:46:66:39:DA:8F:CB:60:13:62:FD:44:17:D8:0C:22:F9:D9
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4c:dd:5b:06:ba:9b:fa:84:63:a6:1b:5a:cc:fe:d7:a2:dc:
69:3d:92:ee:9b:06:3f:14:f3:f7:ab:dc:81:b8:14:76:d0:a2:
7d:31:14:c3:ed:5b:da:98:3b:00:fc:4c:d2:4e:ef:43:53:68:
44:a0:86:01:f0:32:03:37:6d:40:93:82:da:74:4c:74:57:5c:
bf:cf:23:75:e3:2f:9b:62:d2:ae:19:40:16:89:44:25:09:f8:
e4:fe:20:86:52:54:2f:60:5f:a7:8a:bb:35:61:1f:94:22:33:
ca:c0:5c:c9:95:b7:fa:fa:f0:8e:d8:09:9b:50:7e:1c:42:ed:
8a:e9:ee:24:5b:79:e3:42:e7:7f:0b:44:61:f9:c1:49:78:63:
8e:03:e7:d8:47:aa:3c:9a:e6:c0:6a:31:ba:0a:1b:e3:ea:90:
a4:cb:3e:cc:17:3e:b1:3d:5a:1f:a4:62:5c:9d:d8:d5:db:b1:
cf:8d:3d:c4:cf:e3:63:ad:a3:0d:b1:cf:c0:5f:33:0e:de:4a:
92:39:6b:47:61:dd:9f:fd:b0:7f:8b:4e:1b:1b:d3:a6:24:a9:
05:da:ff:1a:66:34:7c:4d:8a:e8:e3:55:8c:cb:0c:ae:da:34:
aa:bf:c6:ef:7c:46:12:2d:80:d8:24:bc:a3:80:f3:80:31:ba:
6e:60:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:10:14 2026 by rpki-client