Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: lkmxwEfqAbI4lhDRufcV2T4CQA/hn7ZhDuGdto8kcw8=
Subject key identifier: AD:0D:27:36:E1:58:92:82:51:CC:D2:B3:B4:5E:17:C8:07:48:70:EE
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 019D39E57F3308C3B130650DC4F4B40EA2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:34 +0000
Manifest this update: Sun 29 Mar 2026 14:00:34 +0000
Manifest next update: Mon 30 Mar 2026 14:00:34 +0000
Files and hashes: 1: CzohGtSLcmDpSrKXCjf2wQpuklI.roa (hash: oSgq7hJ4clz8JZa9p9/cu2QQ6c0SU2FQe0lIPhhVo4k=)
2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: gM8Jy2LQdOVKf7QwS7ZIFrv+IFhXxZFaX+rqY8kVfIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:7f:33:08:c3:b1:30:65:0d:c4:f4:b4:0e:a2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Mar 29 14:00:34 2026 GMT
Not After : Mar 30 14:00:34 2026 GMT
Subject: CN=ad0d2736e158928251ccd2b3b45e17c8074870ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:a0:09:b2:e0:f9:5d:65:bb:f2:0e:4c:54:
5a:a0:7d:9b:5b:41:dc:dc:76:e3:77:0b:b4:06:f8:
0b:6d:3c:be:94:87:20:52:94:24:94:de:e7:f3:ff:
1f:94:eb:e5:94:10:47:1e:6f:3b:a7:2c:d3:0d:7e:
e5:a1:c9:4c:91:07:94:9e:38:c8:82:ba:f4:a5:fe:
5f:d9:19:d6:82:cd:65:e7:79:b1:37:29:79:54:ac:
85:64:26:ce:a1:74:64:c6:a0:53:ae:a8:7c:d6:1f:
56:fa:f9:86:73:c0:ee:69:3c:4f:b6:58:38:ee:d6:
5f:ad:c0:13:bf:e1:66:8c:e9:9b:49:b0:7c:dc:bc:
fb:f7:0b:5a:e6:45:8b:19:9e:a3:92:32:71:6b:6c:
e9:f9:f1:32:79:3f:f9:34:71:87:c9:b5:bc:b5:56:
b3:84:1b:ce:eb:e7:c9:04:09:74:d9:cc:0e:46:a2:
3a:19:9a:33:8c:89:58:04:47:bf:9d:f1:e6:96:16:
26:f5:c4:0b:72:26:ca:cc:bf:eb:bb:45:42:7b:a8:
09:89:52:01:04:ff:3b:16:53:fe:4b:68:af:58:81:
98:27:05:2f:06:ba:b3:c7:08:2a:b9:d0:8b:fb:7e:
b7:b7:4a:b3:26:5e:30:23:6e:58:d4:36:0d:0f:d0:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:27:36:E1:58:92:82:51:CC:D2:B3:B4:5E:17:C8:07:48:70:EE
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:d5:44:1c:fc:57:52:c6:79:fe:b7:9e:f0:2e:f1:8f:d1:
2a:23:fa:f7:cf:f0:65:d1:56:44:ee:8a:d6:8b:b2:75:9e:81:
3f:00:89:03:57:70:5d:da:1f:fe:29:24:e4:e1:b0:93:b8:da:
29:dc:52:3c:b2:92:a8:97:3a:5a:c1:e0:db:c8:3d:47:d2:d4:
ae:b1:7f:cc:17:81:99:bf:05:2e:84:eb:43:e3:ea:cc:6a:88:
92:65:fb:34:54:98:90:62:a1:19:7a:c5:e8:e0:7d:5c:09:3c:
53:5f:7a:e6:3f:c3:ab:f3:7b:83:16:7d:e4:35:39:27:fc:2c:
d3:0c:7d:86:bc:9e:41:da:cb:d4:d0:35:1f:b4:ca:91:0c:74:
7c:bd:13:2b:8b:c8:e1:bc:d5:d5:75:03:03:39:25:4a:7f:0f:
37:33:a3:de:83:72:56:97:c3:9e:93:0d:10:8d:74:07:28:81:
57:b9:7f:e8:0d:77:65:ac:be:a3:d5:0c:75:c4:86:6d:b5:a4:
24:21:ca:f4:88:11:d5:e6:38:01:9e:3c:da:35:5b:2a:40:e4:
c6:e2:08:40:d8:77:b8:e3:d2:23:67:01:42:57:74:93:44:0c:
c5:16:f8:e3:d9:aa:93:af:de:6a:5b:25:75:6e:b4:c0:67:75:
2c:b2:a4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:49 2026 by rpki-client