Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: yfLuSESRmcM1xANZ5ENXn/ycVWXCml0E+ZBXvnMXcEk=
Subject key identifier: 3B:F3:EF:B5:56:90:00:DB:D2:63:5B:7C:53:D7:9D:E3:80:CB:8E:1B
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019DCDF4A37E03A7FFA7BF0E2623C279F0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 01B7
Signing time: Mon 27 Apr 2026 08:00:54 +0000
Manifest this update: Mon 27 Apr 2026 08:00:54 +0000
Manifest next update: Tue 28 Apr 2026 08:00:54 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: yXMGQvVXA0ipKQublYupv1NoHKNC7bS6XSbvbQmKsyc=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:a3:7e:03:a7:ff:a7:bf:0e:26:23:c2:79:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Apr 27 08:00:54 2026 GMT
Not After : Apr 28 08:00:54 2026 GMT
Subject: CN=3bf3efb5569000dbd2635b7c53d79de380cb8e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:52:f2:bb:09:10:71:4d:d3:f3:a4:60:b2:d0:
45:97:27:a6:77:55:1f:67:88:ea:fa:50:7f:74:d3:
54:07:33:53:47:81:7f:85:94:c0:3f:dc:8b:fc:22:
fc:06:9b:b4:43:de:f0:f6:9a:7a:43:51:96:c2:ab:
b5:f9:42:29:52:80:8a:5a:ad:9b:ab:66:70:f9:1d:
d3:30:33:04:4d:50:41:0e:5e:d2:d5:50:c5:7c:16:
f8:93:c5:0a:54:a1:b4:1f:ce:43:8c:22:28:2b:d1:
c4:14:af:e6:54:ba:93:d6:9e:52:e4:0c:4a:68:84:
70:24:2c:5a:99:79:cb:ab:ee:57:4a:1e:4c:02:eb:
b1:63:4e:fb:06:40:46:89:8a:64:ad:71:43:a5:d9:
06:37:11:ac:e5:9f:26:98:f9:cf:90:23:7f:c3:a2:
fc:ac:e0:f7:84:ce:2d:52:13:1d:97:d9:5b:96:05:
b3:6e:72:e3:f1:6c:32:81:fd:75:08:00:5e:3a:d0:
89:80:a2:9b:37:73:07:39:0f:83:ae:35:48:99:03:
86:e4:b8:28:07:2b:ef:8a:a4:b2:b3:84:05:9c:bc:
7f:0b:ed:db:f8:f1:df:07:6f:7c:27:65:6d:34:c5:
29:2f:23:5b:cb:25:0c:fb:ce:c5:27:3c:0f:c4:87:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F3:EF:B5:56:90:00:DB:D2:63:5B:7C:53:D7:9D:E3:80:CB:8E:1B
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:41:2d:9a:67:52:0d:b8:ee:2f:42:e4:67:f8:a1:d5:52:
cc:35:ef:07:49:4c:99:9c:1a:2e:5b:4e:bf:ca:a6:40:49:9c:
02:fd:72:08:72:06:f8:50:07:60:af:9f:d3:74:2e:c8:3c:fa:
21:4e:c5:e1:1e:34:31:c9:1c:b0:ed:f0:e3:cf:3f:fb:c8:b6:
e9:be:a1:01:c3:6c:59:c5:d9:bd:7e:97:24:58:42:6c:e9:34:
4e:b2:86:93:dd:25:07:22:b2:9e:fd:9f:fe:3d:78:8c:f8:63:
d5:20:1a:36:ff:a4:41:db:05:41:19:58:7e:54:4e:ae:83:df:
23:3e:4f:ae:4d:5c:3a:aa:6d:7a:1e:ab:ec:33:6f:76:7b:52:
a4:20:dc:e0:8a:bd:e6:53:2c:22:06:76:4b:30:81:4a:81:6e:
01:90:52:1a:04:e7:47:3d:2a:39:fd:3e:13:1a:01:f3:ce:9a:
7a:91:f4:e6:3a:ff:67:e2:cd:2b:38:a6:62:d7:19:20:6c:8d:
26:1b:3b:18:79:8f:32:1e:f6:67:52:d9:ef:74:20:94:2a:77:
02:c4:b5:70:f6:7c:7c:b9:12:59:b8:fe:51:ed:a6:4a:d9:d7:
bb:3a:7f:66:71:a6:0b:16:66:4f:a0:82:6a:de:be:d1:b9:ad:
e3:d4:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:33 2026 by rpki-client