Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: NBgx0lNO1Bh0dIf0QgTLl+qkv3KBtwF0mEzZULKKDcY=
Subject key identifier: B8:0D:82:79:07:C4:C7:D1:B8:0C:22:33:B6:73:96:7B:5D:BC:4D:E4
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 019D38666D0278AF7AE93CF45C0B2B1661A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: QZ1nQEGPtuWi9XAcZCDjVZxeYlw.roa (hash: QW6eD5LudJ7sNotpMCDqrxlbZtx90rILczwwlFeS39g=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: BTqhBoBy54HylTp1YioWTZKF5kd1FBPsOekEYvoS7dA=)
3: wJ1lzhD1F8_SwqyHPBj4dP90Gyw.roa (hash: ZZIVl+n5SFgzaFLgLDlSLqKT2aW65v2nj5QP7X4r9Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6d:02:78:af:7a:e9:3c:f4:5c:0b:2b:16:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=b80d827907c4c7d1b80c2233b673967b5dbc4de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:e7:77:9c:29:68:fb:81:b5:dd:8b:98:ec:
d7:90:b2:19:2a:28:4e:ec:ee:a4:32:7e:0f:61:83:
2b:a4:cb:f0:c9:0e:48:ea:23:72:35:41:ce:18:13:
ad:74:b9:39:c5:46:f7:7d:0e:5f:2c:3b:a2:94:4e:
c7:87:cd:b6:09:c3:d5:b1:a6:15:15:f5:2e:79:7e:
b1:b2:0f:90:a1:14:0f:ee:a2:4c:95:e2:af:d8:a4:
71:27:0a:6d:27:21:a0:2d:e2:b8:5b:b0:a7:9b:be:
ac:c7:f2:02:f1:c6:75:11:48:c5:22:ed:46:f8:b3:
3a:fd:7e:e5:03:25:4c:f3:5c:64:32:60:0a:79:db:
06:cb:b6:1b:be:53:ee:5c:27:6a:52:2b:4c:87:cf:
6a:b3:6f:7e:8e:1f:8a:34:59:33:08:6c:f4:72:a0:
53:56:97:2f:f8:fc:bc:41:65:06:15:7a:80:8b:ad:
1f:e0:e3:3e:01:37:a5:7f:c3:b5:70:b0:c6:f4:55:
31:34:b8:51:b1:5a:a6:d0:7f:58:0d:2c:f7:03:f0:
65:bc:61:70:82:a1:9a:aa:99:ab:aa:fb:38:f9:df:
55:71:61:7d:10:89:54:41:ac:69:1b:8f:5a:e8:0c:
2f:49:5d:9c:65:d9:6c:17:01:85:6d:e2:ab:c2:d8:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:82:79:07:C4:C7:D1:B8:0C:22:33:B6:73:96:7B:5D:BC:4D:E4
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:05:22:c7:67:66:24:62:3a:d0:a7:d5:a9:d3:d9:d6:c7:71:
81:74:d9:e8:3c:08:ac:6a:69:4c:bb:4d:c7:c6:a6:02:83:72:
db:f9:e1:68:ad:e7:75:b1:f3:27:c9:51:1e:78:28:8d:dc:18:
81:f9:e2:30:df:04:2d:68:fe:a3:e1:21:42:c3:28:a6:46:34:
87:d9:e7:11:02:35:b1:14:a3:96:55:3f:33:ee:e6:83:65:0b:
8b:c4:1c:92:96:9c:90:6f:5c:ca:6e:10:6e:6e:1e:99:79:83:
18:51:3e:b5:d4:91:c6:45:f5:bd:c8:3f:af:cd:12:8d:ef:bd:
74:0c:c5:8d:3e:90:74:33:e5:8d:7c:b9:55:d9:8d:8e:07:7b:
64:da:6b:54:08:75:8e:bd:f4:e5:b8:c2:a7:bf:37:67:97:04:
85:a8:10:ca:7b:84:90:f6:e7:ab:d9:4c:95:51:73:0f:de:bd:
c4:b6:bf:c5:33:28:31:7c:25:b0:a3:10:d8:1b:ec:0c:ff:9d:
05:40:1c:1e:52:19:25:71:67:d1:aa:45:de:99:3e:c3:10:be:
12:6a:16:8f:ac:80:f9:a1:3b:c7:db:a9:f1:14:d6:98:1c:06:
bf:85:11:d3:5d:5e:bb:ff:07:cd:3f:77:65:ae:2f:27:8c:65:
7d:cd:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:20 2026 by rpki-client