Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: lhNWd2UTa6/f+DbBy594trsZSWpGinw80Q/tGp6VG2s=
Subject key identifier: F9:18:50:E4:05:F9:99:30:D4:08:B5:0C:B9:66:BB:33:64:BB:2E:F9
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 019D382DD5718E048B1D9B8E3AF64465995B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 06:00:20 +0000
Manifest this update: Sun 29 Mar 2026 06:00:20 +0000
Manifest next update: Mon 30 Mar 2026 06:00:20 +0000
Files and hashes: 1: j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa (hash: TldycA22tY7EvqsLvcs1YaipegGydJ+DMucdg1RkrFY=)
2: m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (hash: 0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=)
3: sq38IYtkwvLbxoqDW_7wpbQZMOY.roa (hash: 9FNCpi3tI2psX/axIbavUXntYIPjv5HbB/DRF/Sxvrg=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: 0mJtGUmnOejvhpn6LoxnqNfgtTpxEJWZce11PtE/hh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d5:71:8e:04:8b:1d:9b:8e:3a:f6:44:65:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Mar 29 06:00:20 2026 GMT
Not After : Mar 30 06:00:20 2026 GMT
Subject: CN=f91850e405f99930d408b50cb966bb3364bb2ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:28:28:93:c8:2e:22:6e:ef:29:c2:a0:38:
80:e2:5c:a4:65:6a:42:06:f5:03:6a:da:6c:30:a2:
f7:f9:70:b9:04:ee:84:f8:4d:27:54:a8:0b:50:30:
0e:9f:23:c2:6c:7b:d9:3c:d0:a2:6b:86:cf:d4:03:
44:5b:bf:a5:07:ee:28:aa:ad:7c:9e:60:26:3f:b1:
cf:52:69:2a:cd:71:97:e6:88:81:9d:02:77:d2:25:
12:c6:1c:5c:60:5c:48:a2:dc:30:fa:b6:23:e5:c2:
d0:c1:fe:03:fe:46:71:9e:85:ca:bd:35:e7:b8:31:
6f:ef:b7:b2:15:ad:af:96:ed:7f:5d:23:7a:93:71:
f3:08:47:88:15:6d:09:b7:5b:74:01:f4:6e:db:15:
84:ca:55:0f:e7:3e:bf:cc:c6:d2:9c:e6:32:48:4b:
14:8f:d4:a9:1e:bb:f0:b1:39:4d:00:50:ed:f1:a6:
bc:41:d2:39:f9:fc:4b:3e:b1:af:6b:26:be:58:6c:
32:96:d0:10:bd:a9:3e:91:88:69:5a:59:f3:08:41:
aa:72:9c:1a:fe:d5:12:0b:34:08:76:b9:0a:a0:c8:
28:f4:64:ef:d5:fa:86:9d:81:49:71:43:0e:02:9c:
3a:c2:fa:f2:91:0e:fe:21:6f:06:0d:74:de:b6:d7:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:50:E4:05:F9:99:30:D4:08:B5:0C:B9:66:BB:33:64:BB:2E:F9
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:66:3c:04:e8:20:ec:3b:84:f2:ec:24:0a:92:e6:b2:e0:9b:
b5:84:ef:b1:df:e9:1c:f8:46:b5:ab:e8:38:8d:28:21:ac:16:
ee:aa:f0:5d:7a:a2:3d:76:fa:fb:38:18:80:02:6d:0d:94:53:
db:8f:cd:81:da:bb:fd:b2:f1:7d:85:01:7a:76:62:7d:0c:66:
57:d6:d1:28:4e:e0:a5:2d:37:5b:e0:0a:45:a2:b7:6f:aa:f8:
7e:28:b0:30:00:47:8e:da:87:2e:5a:99:de:fc:f6:11:c5:56:
4a:74:d2:46:f1:2d:5e:26:fe:4d:d8:29:4b:73:34:10:e2:de:
2b:67:2a:3b:1c:89:74:81:5d:aa:e4:a2:db:92:e9:54:68:9f:
32:2f:f1:98:28:32:b3:93:ad:3c:6b:a4:1e:1e:c7:fb:f0:47:
c0:05:06:01:a3:65:00:2f:b0:09:4f:7a:77:27:e1:93:dc:ff:
16:ed:ff:7f:5f:9a:8b:6b:fc:17:22:58:28:ac:d2:22:ac:f7:
08:18:6e:54:a3:23:4b:56:5c:c9:7a:62:82:d5:23:4b:3f:62:
ab:62:81:e1:70:f7:ea:d5:28:4c:7d:7c:be:e8:59:36:31:e1:
df:38:b2:dd:98:59:b5:4e:30:08:15:65:66:d7:4b:36:6c:d7:
79:9f:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:51 2026 by rpki-client