Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
File: vVXPhK_d4xgniNwAdjqCMINM7FI.mft (raw, json)
Hash identifier: g8QBZ1+JisCJbsKyvZGYp1sul5bR5KKZe1jHA1Y6N2U=
Subject key identifier: 34:57:A9:DA:08:CF:7D:BC:45:9A:CF:E8:96:3F:F5:0E:04:D8:0F:2D
Authority key identifier: BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
Certificate issuer: /CN=bd55cf84afdde3182788dc00763a8230834cec52
Certificate serial: 019D39AF68FA095560AE77864661AA514FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
Manifest number: 33
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: m2i02yDWoa9OicV27GMj8Y2x37c.roa (hash: PcpljpVFgub8o7xEhsLEYIzvRxfNpdllqdeZVEQzjwg=)
2: vVXPhK_d4xgniNwAdjqCMINM7FI.crl (hash: dM9272PIGoAqL9EjUTGb+anH0tBXRwFyMKYSpB46i/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:68:fa:09:55:60:ae:77:86:46:61:aa:51:4f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd55cf84afdde3182788dc00763a8230834cec52
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=3457a9da08cf7dbc459acfe8963ff50e04d80f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:55:9b:b8:be:c8:f3:ff:87:3e:69:6a:d1:
be:df:63:cc:4a:24:04:f2:5d:0c:21:aa:69:a6:4d:
5a:00:07:11:a5:ba:a7:fa:9d:e2:6b:63:3f:55:69:
10:93:73:85:f2:33:74:ac:7a:1d:5e:92:82:74:81:
6b:ca:83:ff:ab:67:0c:91:f8:c1:b9:1f:46:c9:77:
11:dc:dc:52:0a:4c:83:85:60:98:22:4a:fb:24:78:
16:fc:da:af:c3:b9:3c:38:2b:af:cb:c2:3a:8d:a7:
03:f5:40:86:6c:80:7e:b0:74:58:b2:43:77:4f:24:
0b:e1:82:b2:76:8c:2a:a0:48:a6:6a:c7:d5:27:e2:
f4:8e:7e:57:de:a1:10:d1:50:18:e8:79:2d:33:78:
54:7f:be:cf:03:e2:e9:36:7b:19:78:f8:0e:4a:e1:
83:67:0d:e7:42:97:17:8e:65:16:03:88:0f:f2:b6:
df:cf:90:2c:8a:7e:80:45:46:75:2e:b2:df:52:bd:
86:b1:b3:30:14:fa:11:a5:79:48:f1:75:ba:a6:6d:
df:b1:ac:f8:17:c1:ed:4d:0e:bc:df:8b:ca:20:9d:
43:82:65:85:3f:4a:28:eb:8f:4f:85:3e:14:58:2b:
9f:5b:08:4f:0c:62:78:7a:1c:ea:2d:55:1b:07:17:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:A9:DA:08:CF:7D:BC:45:9A:CF:E8:96:3F:F5:0E:04:D8:0F:2D
X509v3 Authority Key Identifier:
keyid:BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:83:65:59:e0:10:52:40:3f:57:2f:75:ea:4e:97:a7:04:f5:
26:6a:d0:05:57:92:22:02:da:a1:ab:85:f0:1d:0a:7e:f7:a0:
25:c7:52:7f:f4:a1:10:aa:53:f2:a1:d1:3f:59:0a:95:46:05:
5b:4b:c0:0e:29:30:2f:fd:94:89:40:85:d7:7c:8c:f1:ab:c7:
f4:5a:90:87:94:c7:23:16:26:81:59:f0:67:e8:2e:9f:f9:fc:
1b:e3:2b:7e:5d:46:64:10:69:7f:44:bd:da:c9:19:bd:91:34:
0f:37:f5:3b:5b:18:d1:80:fa:49:6c:5f:26:71:50:ae:d9:2c:
fb:ed:09:3a:55:25:a7:78:84:7c:b8:9b:b0:fc:d5:2e:3f:62:
87:0b:70:45:0c:28:48:43:00:e5:d9:37:a2:9e:b7:8a:8a:d7:
12:27:b2:c7:b8:15:7e:d8:d5:23:5a:9c:20:9c:89:c3:6f:92:
67:23:5b:82:f9:52:9c:d3:3b:00:dc:d9:1e:d7:6c:e3:14:31:
5e:3a:f0:13:54:38:42:09:d9:b2:c2:c8:b7:ec:c8:75:27:5b:
5b:46:97:16:eb:07:3f:9f:e0:7a:0b:ca:b4:ea:7d:07:bd:a0:
1a:12:90:0c:9d:41:77:10:ce:e8:38:92:3b:75:dd:e2:c6:0c:
4c:76:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:25 2026 by rpki-client