Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: 39uwPrCIoOb0Bxh5TY7crTiK9tlF5mOFUf6f2jgfzQU=
Subject key identifier: 58:E2:99:B2:9D:F9:7D:5D:25:3C:20:AA:D6:F0:08:BE:D5:80:5E:D2
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 019DCE2B2A587B867CF48A0E7385DFB9DBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 0668
Signing time: Mon 27 Apr 2026 09:00:28 +0000
Manifest this update: Mon 27 Apr 2026 09:00:28 +0000
Manifest next update: Tue 28 Apr 2026 09:00:28 +0000
Files and hashes: 1: CB2ITi-RxPyoR7XH1NEi7Vwgbyg.roa (hash: e+/EujUqMgrunBdFLMp3Y5r4ddJZRAWO/cMR+Mtb/4w=)
2: h2q9_rZm0PV8txh6TfHdCBkulAs.roa (hash: q05w4TZAL571hpUjwgQIi8JE4zKvAGMsaI8J0PpFNXY=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: YIDTNZLNh2Jp987z9886m6UBlWijTTKN5VGPBQv0X3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:2a:58:7b:86:7c:f4:8a:0e:73:85:df:b9:db:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Apr 27 09:00:28 2026 GMT
Not After : Apr 28 09:00:28 2026 GMT
Subject: CN=58e299b29df97d5d253c20aad6f008bed5805ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:57:c1:5e:81:07:5d:80:79:1c:48:b7:f4:
7e:a0:28:2c:1e:fb:c3:94:be:1f:27:3c:3b:e5:eb:
1e:5d:c1:9c:58:1a:5a:83:4a:97:c3:f6:c1:92:13:
2c:f4:b8:af:e2:7d:1b:25:95:fe:7a:d5:d9:64:e6:
0f:ce:1a:2a:55:30:39:78:c0:a6:f7:97:2d:42:09:
c9:74:09:66:e0:d8:76:c8:f5:aa:c8:59:50:4c:ff:
fc:1d:45:28:33:18:94:01:2d:a2:6d:ac:87:fe:4b:
8b:fd:45:2f:b5:61:58:d1:21:01:f0:6b:a1:d6:ea:
7c:88:ee:ed:32:68:31:ae:e7:b5:34:0e:c1:66:b3:
ed:ca:4a:a4:f6:ac:15:92:43:1e:d8:0c:c9:9a:72:
9f:a6:55:9f:9e:4a:45:7a:26:6d:1d:d9:c6:a4:2d:
e1:43:cd:11:82:d8:42:31:ec:2a:c7:50:0d:ec:1e:
0b:9d:82:2b:44:1d:c2:0c:34:57:41:82:4d:4e:75:
af:3d:04:4d:ab:50:a0:90:ed:b0:57:7a:3d:ea:9d:
4a:f9:96:75:9b:9e:12:c4:21:cc:a0:51:d1:7c:c6:
e3:c3:47:60:ea:29:5a:d3:2b:72:ab:ee:ae:c2:aa:
e0:4a:c8:50:17:06:fe:75:78:87:28:2a:7c:22:eb:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:99:B2:9D:F9:7D:5D:25:3C:20:AA:D6:F0:08:BE:D5:80:5E:D2
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:76:f1:da:02:fd:24:c2:cc:51:f0:96:32:21:dd:fc:06:ce:
53:df:53:b7:10:88:1c:a0:4e:ba:89:4b:e0:fd:2c:37:84:a3:
34:54:dd:7d:f8:c6:1f:fb:3c:8f:1e:4d:7e:2b:e5:c5:ba:56:
26:26:3e:c4:17:44:6f:2e:ae:b4:4c:c3:a0:f5:ca:26:ac:6c:
cb:e0:70:00:a6:40:7d:69:d0:35:34:bd:ad:70:01:ff:b9:85:
74:68:27:fd:6c:c2:c3:00:bf:fe:b8:92:a0:69:7e:54:aa:99:
31:1b:eb:d9:9f:d1:b4:59:ac:40:6e:4e:6e:7b:d1:ae:81:fa:
e2:96:f5:c9:23:6a:6b:a0:81:8c:3d:a8:59:60:4f:09:28:80:
c7:31:44:7a:3c:e7:2a:ce:5b:fd:ec:2c:fd:7f:c0:f7:aa:21:
74:1d:5a:bb:53:fb:0b:d0:c8:61:50:18:22:81:c8:14:76:09:
b5:3b:24:6c:1c:2e:6c:78:9c:67:5d:1b:65:50:7b:7d:38:79:
27:cd:bc:df:c6:c7:9c:89:89:c0:d3:91:70:37:69:b1:1c:cd:
97:6b:0a:eb:a8:4e:5f:5e:e5:6e:e0:a4:ad:2b:f3:e6:67:b3:
d9:33:dd:23:90:00:b4:6d:da:f0:9b:5c:57:99:e2:9c:70:9b:
0f:22:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:40 2026 by rpki-client