Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
File: vI6RiHZmXLWDii99KNdHYRM5bvQ.mft (raw, json)
Hash identifier: 8h0scz1XKtfG1H4isSOTAtAo5lHhuU2OafXT92I9Zpk=
Subject key identifier: A8:54:BE:7D:AD:7E:54:9A:F9:66:57:B1:0C:7F:E6:34:7F:5F:52:6D
Authority key identifier: BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
Certificate issuer: /CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Certificate serial: 019D38D2F63A8596A6269672C92380AE1B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
Manifest number: 64
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: WvZUTqnUJrfxPwj7etIyxS5XtG0.roa (hash: tjBBu94qUSlvnCT5HDdgFpmfyKhqmKvNYxBumfbCE8U=)
2: vI6RiHZmXLWDii99KNdHYRM5bvQ.crl (hash: pPu/UlhaAwjmX1mLz7d2qyVCUjZDEMFX/s/LciM19og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f6:3a:85:96:a6:26:96:72:c9:23:80:ae:1b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=a854be7dad7e549af96657b10c7fe6347f5f526d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:1d:01:8c:f3:8b:a4:80:fa:77:9b:8c:cf:
66:8c:5f:57:0c:3e:92:a6:f7:5e:d1:4d:9c:19:eb:
1c:93:4a:d0:9b:93:85:3b:ec:6a:ab:28:af:d7:15:
28:ba:cb:5e:30:c4:5f:1f:60:6b:04:ef:7d:26:6b:
a1:62:c2:56:eb:1e:89:0d:b1:88:e1:d0:7d:bb:94:
7e:3a:f2:cc:bb:e5:92:34:38:96:3c:c4:67:ab:d9:
80:c1:0d:e7:a8:7d:d5:62:fa:8e:a4:06:e8:c3:c7:
3e:f0:c1:f3:a6:5e:07:cf:76:39:fb:c5:74:4c:02:
e4:46:e5:99:36:8d:22:97:84:95:e0:a6:e4:b6:2e:
4e:04:85:ba:5f:af:59:c7:f9:39:d3:07:a3:3c:5e:
2f:6a:16:2c:46:97:c1:85:6c:d5:00:1f:c0:de:2c:
f3:07:88:81:99:f5:f0:a6:9d:19:03:10:17:f3:7b:
04:e5:b1:e9:4d:a0:17:01:5f:68:3c:7f:a7:85:b9:
67:f6:b6:9b:b5:77:07:64:51:48:4a:c7:53:ed:e4:
5c:27:93:32:f0:be:d2:4c:d1:aa:27:13:f7:d2:0d:
d9:41:c3:d1:60:d4:90:e5:86:88:a6:fc:9d:a7:e2:
56:14:7d:7e:2f:19:2b:91:9e:b3:8f:e8:d4:1d:51:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:54:BE:7D:AD:7E:54:9A:F9:66:57:B1:0C:7F:E6:34:7F:5F:52:6D
X509v3 Authority Key Identifier:
keyid:BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:95:bd:6d:fe:75:df:e1:3c:5f:72:a0:3c:1d:f0:71:d7:06:
1d:28:7a:a5:21:76:be:96:49:19:be:84:a2:17:b2:61:5c:16:
c6:21:35:e1:be:fe:32:ea:2c:10:e7:e0:bb:69:29:5b:27:c2:
61:2a:07:2a:ef:41:42:56:76:32:f1:c3:d0:da:bd:ad:23:de:
62:b9:4c:91:96:e5:15:3d:18:fa:e2:e1:dd:90:e0:aa:f1:6a:
84:ea:4a:64:70:61:06:8c:5e:d9:02:2e:cf:8b:2b:9f:23:59:
25:fd:29:54:ea:cc:1c:07:4f:e7:91:c3:91:4f:ea:52:76:47:
e6:97:b1:8c:59:fb:77:6e:44:ae:09:62:35:13:96:06:f6:38:
c0:67:1f:23:04:f7:36:0a:f8:e5:53:7c:a7:e1:5f:44:ae:a9:
d8:e7:e4:2e:bf:98:8a:0e:d0:54:ab:78:c6:0b:10:92:8c:7e:
d8:46:11:17:b5:af:5e:d6:ea:2f:32:65:b7:c5:7f:55:ca:85:
cf:f2:bd:a3:51:44:fd:2d:c0:78:02:c3:22:b3:08:7d:da:56:
e8:94:e0:f0:81:e3:4c:99:a3:53:0e:16:7f:15:5b:57:85:4f:
1b:4a:95:08:a3:39:e7:d3:72:a1:c7:d4:6b:45:04:03:aa:52:
07:97:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:06:48 2026 by rpki-client