
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier: fi+PxiuoeQVQyyHpeDby2zqH6HsY4oOP8cIcNWGT2bw=
Subject key identifier: 04:8B:64:42:39:6B:AC:38:5E:F0:ED:B4:F1:90:9A:4B:DD:88:ED:76
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 019D38D375910D9FB90AFB81622D9434BBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number: 0AFA
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: CMYGKasLmsjGblCK6IVsYcoAi1Y.roa (hash: 5I3la7dVRWMx/gZhUW1jrF5r1NdUNZ+7mT0gXM18zsQ=)
2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: qhhK6HsVmgWPOS/6Xb2+z2xzFFKP80GGV3QrHchElAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:75:91:0d:9f:b9:0a:fb:81:62:2d:94:34:bb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=048b6442396bac385ef0edb4f1909a4bdd88ed76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:2d:6a:7d:d7:0c:b9:75:09:56:43:07:39:
72:c8:84:71:69:b1:c6:8b:0b:c0:3a:c1:ed:61:8a:
d0:ea:5c:4e:8b:16:56:c2:23:b2:5d:fc:7e:4f:ce:
08:da:a5:f8:b2:a3:d7:b6:6f:2b:b3:21:cf:6f:c2:
ea:ec:39:57:41:5f:6a:4f:f0:7d:c7:eb:ba:88:9b:
38:92:d9:ec:f3:d9:36:22:98:57:b5:ca:8a:9f:8b:
04:4d:47:94:58:3e:fe:85:c1:e4:73:9b:f5:ba:4e:
93:6e:3f:9f:51:54:56:08:17:f6:72:7d:9f:31:66:
ba:31:fd:90:bf:61:98:fe:58:92:8a:ea:22:c2:a1:
57:65:88:ef:13:3f:d8:19:6c:31:e2:3b:d7:15:dc:
09:08:69:1e:0e:f5:f9:39:f7:03:14:83:69:09:61:
a4:37:30:e1:68:d9:e7:cb:ef:68:89:68:72:49:f2:
9f:2e:bb:f7:01:57:dd:6a:d5:30:18:29:4e:87:99:
dd:89:46:30:c1:cd:43:af:43:8a:2c:9b:ac:33:aa:
cd:c3:a6:2d:6e:9e:a1:54:20:5f:15:18:f2:99:9b:
17:3f:9f:4d:d7:c8:a3:b7:44:70:eb:a9:cc:a2:ed:
04:5f:a8:74:c0:7f:65:b1:1b:cd:fd:c9:51:d0:be:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:64:42:39:6B:AC:38:5E:F0:ED:B4:F1:90:9A:4B:DD:88:ED:76
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:1d:7a:60:89:bc:8d:d1:cb:5a:6b:03:70:13:e8:b0:53:
b1:da:a7:f7:30:10:c2:57:ee:9d:a2:88:20:cb:df:ee:0f:3a:
6b:b5:5d:4f:0d:3d:d2:74:a9:de:ac:94:72:e3:64:ed:66:3e:
c0:73:b2:47:79:fa:3e:a5:57:e0:b1:b4:04:34:ca:9d:85:67:
19:20:74:14:9f:09:b9:53:1b:5b:d0:95:9f:2e:d3:cc:82:5c:
05:a4:83:d8:be:3b:ed:b5:ea:19:9b:c6:39:44:1c:20:cf:b6:
ef:8e:70:54:3b:bd:24:e7:74:8c:bc:12:6c:27:d8:e5:b0:b4:
2f:48:0d:be:72:9f:3c:a1:04:70:ad:24:6c:e8:04:ed:01:47:
b7:05:8c:65:e6:4b:a7:d4:45:9e:a6:67:43:52:73:5f:9a:92:
72:bb:d2:9a:e9:65:af:39:a3:0b:dc:b8:8c:c7:d0:ca:3b:ad:
45:cb:1c:d1:a0:58:97:aa:61:d2:ce:97:53:0e:07:f8:51:bb:
7a:29:8e:21:73:b0:36:19:d9:5b:22:ab:c7:e7:c4:38:ea:9c:
d3:5b:f6:0b:89:14:c1:2e:dc:08:14:c4:93:66:a7:4a:53:b5:
6d:0f:f5:d7:da:08:7f:92:f4:5b:e1:c3:b4:62:87:42:f8:ec:
5b:f4:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:31 2026 by rpki-client