Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: 5rvhJYulD8bzaYoZkJN/nAGv42wqqcI37eoHQmS3ofg=
Subject key identifier: CC:75:F1:CA:4B:CF:6F:FC:93:26:12:69:53:06:A5:EA:B0:19:99:30
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 019D38D3C6C40AABC32C526C2474D0433A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: u9wMC5EqvOCKti+oA43lSBneypkhLRh1DHBQGJJnvaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c6:c4:0a:ab:c3:2c:52:6c:24:74:d0:43:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=cc75f1ca4bcf6ffc932612695306a5eab0199930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:1b:07:8c:d5:0b:a4:03:34:11:55:9a:0d:
a2:0c:f4:12:22:ae:61:af:b6:e4:36:43:dc:fc:83:
b0:7e:5f:9f:b4:31:57:b6:30:c3:cc:a2:21:b7:af:
13:8f:ea:23:00:00:e3:20:3f:e4:7c:50:f3:15:7c:
09:da:c2:35:bf:df:b8:ab:c3:1c:f0:24:00:ae:a0:
9e:db:d7:fa:b9:48:bf:e0:6a:81:ca:77:68:f9:ff:
c7:e6:6b:24:af:90:bd:e3:b7:14:06:55:d4:1e:a0:
3c:96:3e:63:66:a9:9d:25:1d:53:1c:ea:39:3b:fd:
6e:99:66:ce:53:1c:65:ff:b2:83:f8:9a:66:52:ff:
1f:1b:ae:68:75:76:53:6f:54:bc:54:2c:27:25:ef:
eb:b6:dc:d3:74:b4:92:8c:02:f7:09:35:3e:dc:f1:
9c:9a:1a:68:c7:b7:d9:cd:fe:55:24:9d:aa:5a:80:
9e:22:ab:bf:c9:14:b5:28:33:44:bc:f4:d1:0d:b4:
77:48:88:cb:3f:d3:7d:7d:c1:35:19:14:9d:8a:d0:
17:df:12:a0:e7:50:cd:bb:a2:fb:c0:41:94:8a:af:
a5:75:12:09:d9:c8:bb:98:b3:85:e0:b9:9c:d1:a9:
f3:7e:a5:4e:9d:96:0b:f5:27:61:52:15:35:f2:87:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:F1:CA:4B:CF:6F:FC:93:26:12:69:53:06:A5:EA:B0:19:99:30
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cc:c2:d9:3a:ed:5f:b9:5d:3a:09:ee:5f:5e:6a:96:2c:b4:
ad:25:28:a6:4b:b3:79:04:66:cc:65:f2:32:2a:72:cc:3b:e5:
e8:56:d1:81:58:79:da:56:6a:77:f1:47:88:f7:27:91:cd:b4:
f1:d9:0f:4d:50:b0:85:dc:df:12:ad:c8:3e:7c:30:8e:4f:da:
a9:06:49:33:8d:86:8c:33:7f:43:d3:12:53:1d:4f:91:41:96:
44:5b:b3:15:24:92:41:c6:4c:5e:8a:f3:c8:66:84:38:55:a4:
a6:1d:6a:42:12:18:00:75:fa:4b:af:94:eb:7d:ea:0a:5b:63:
f8:6e:86:19:ef:e7:2b:88:d2:24:67:d1:54:a9:65:6e:66:7a:
6d:fd:e3:d9:9c:7b:19:3b:17:a4:da:87:2f:75:bd:9b:97:f3:
7b:e0:27:77:31:b6:67:ca:31:73:43:d8:18:68:dd:bb:b7:01:
b5:b2:87:4b:cc:3b:35:09:d7:dd:95:94:30:34:e5:5e:da:4b:
fe:ee:77:e6:f2:42:83:75:17:35:17:d6:d1:e0:8e:18:73:92:
8c:41:dd:06:18:98:05:78:b9:90:6f:6a:d5:43:75:1b:85:b4:
79:8a:1f:65:a7:c7:41:87:05:ba:5e:45:f6:fa:7c:e1:56:d7:
55:1f:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:38 2026 by rpki-client