Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: xvtRDi8xB0cXF4qSMy+/Rn8QYrwPCeR9z4CVFJVS+so=
Subject key identifier: 87:A9:AD:EA:18:3B:7F:32:88:11:E2:98:FC:A6:D6:49:9F:7B:1F:19
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 019D38D2A5738ABE3900326B378EE01F9D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: 0jpOewhs5al4i2Un15buYjMlNLI.roa (hash: YIUbzKo2xMv9/Z1KjRiKTWnIZ7BfndO4Gvu0b8SDWI0=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: NlQi7F+mGdzyZv1Lrr9SvtF7RMXIRO8/r++DRcYuA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a5:73:8a:be:39:00:32:6b:37:8e:e0:1f:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=87a9adea183b7f328811e298fca6d6499f7b1f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:ae:0d:b1:a6:45:05:78:21:b5:31:d0:ce:
7b:6b:d4:24:a6:2b:97:aa:be:ad:62:e1:76:b6:41:
48:7b:20:9e:4d:d1:9f:fc:75:f4:1f:ff:6e:00:db:
03:65:0f:1f:1b:d3:b4:0d:d5:4a:ac:87:4c:81:30:
ff:13:d9:47:66:a0:a3:3f:9c:49:e4:fd:2c:49:61:
b3:6e:dc:93:98:cf:e3:b3:bf:93:8c:d1:de:4a:d0:
98:d8:1b:6d:18:3f:19:37:7e:2e:01:ce:1e:a6:1d:
bf:6a:80:8d:52:f3:14:6d:5d:f5:1b:fe:0c:94:d7:
7b:e5:5a:33:43:cd:74:7e:73:2d:78:71:37:0c:8c:
6a:3e:f2:61:21:d9:c9:df:82:45:83:ec:64:8c:cb:
bc:85:21:de:43:b7:88:56:8d:fc:99:fc:e6:23:bf:
70:e0:e7:ee:41:0f:8c:78:80:df:05:75:4e:a8:85:
08:39:63:ad:31:d5:59:94:a0:67:a2:44:3d:73:26:
9b:fc:f5:e2:31:fd:1e:7c:26:b2:e9:f2:3d:59:0f:
42:42:1d:a5:88:27:8d:49:b0:82:e2:ae:57:43:3f:
43:07:11:e0:3e:14:a4:21:5e:ba:36:94:cc:1e:cd:
8a:af:23:7b:97:c7:94:39:22:c6:96:0e:e4:93:73:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:AD:EA:18:3B:7F:32:88:11:E2:98:FC:A6:D6:49:9F:7B:1F:19
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:39:5c:38:13:31:f2:08:ef:01:7d:7b:77:b0:53:65:38:4f:
1f:02:ef:fb:42:06:f8:53:c9:46:4c:28:e3:10:a5:a3:62:6d:
10:13:3e:d5:5a:bf:e5:46:b5:be:f7:3d:70:03:9f:69:50:c1:
13:b4:c3:45:94:91:71:7a:a0:ca:f6:ad:92:20:7d:87:9c:1d:
56:4e:69:3c:54:e7:5e:3b:46:41:60:e6:0d:ac:a8:b4:48:4e:
9a:c3:38:c2:47:ca:b7:03:c4:3e:37:b4:0d:15:96:13:81:9a:
c0:92:4e:9b:7c:99:99:b0:2b:8f:c4:ad:56:ee:91:ac:c3:34:
cf:3b:6d:26:3d:99:d4:97:dc:d9:88:bd:a0:aa:84:51:d3:a0:
df:27:b2:9b:0c:43:4e:13:1c:a5:0e:eb:95:88:14:5a:bf:f0:
28:f1:92:2d:cc:31:b9:d1:82:a3:37:bf:c2:a7:98:66:dc:fe:
73:91:07:86:83:5a:58:81:2f:fa:17:71:2e:3d:6c:57:1e:69:
77:67:25:7b:3f:f4:2b:4e:31:cc:6d:f4:f6:1f:cb:ec:4e:ce:
78:98:1b:d3:bb:b6:a1:b4:53:a5:65:6c:88:f5:19:85:4a:27:
a2:7c:9d:85:60:8a:38:57:2f:2b:86:f0:38:5c:0e:49:d9:0b:
2b:3c:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client