Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: Rvj9ptMopnSofrRiHuFGzrsUjFqix7aOHqsazphUD80=
Subject key identifier: 2A:17:F0:81:F1:09:BF:B3:E8:68:71:7F:19:3B:A7:37:D9:A6:A1:3B
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019CC7F4FF688A23185EDF8382896B6D9AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 09EC
Signing time: Sat 07 Mar 2026 11:00:47 +0000
Manifest this update: Sat 07 Mar 2026 11:00:47 +0000
Manifest next update: Sun 08 Mar 2026 11:00:47 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: wnyGtNx+LoI6pb+UUDHKVxmT9TqTwZM8oT+Dy8HScs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:f4:ff:68:8a:23:18:5e:df:83:82:89:6b:6d:9a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Mar 7 11:00:47 2026 GMT
Not After : Mar 8 11:00:47 2026 GMT
Subject: CN=2a17f081f109bfb3e868717f193ba737d9a6a13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:cd:01:2b:db:c6:21:f9:db:26:91:e1:d5:
d5:04:29:ad:15:9f:a2:d2:92:dc:2b:ab:85:b0:d4:
82:59:95:1d:4f:dd:31:47:ba:8a:00:b3:9d:89:d7:
e9:fc:b0:65:dd:82:7d:2c:3c:55:a9:c8:f8:c1:6c:
05:63:c3:82:a8:22:3c:49:bb:58:f6:f9:9e:67:f4:
59:11:1e:2a:a9:31:03:27:00:10:6c:18:45:49:0d:
fa:32:28:5c:db:b1:26:87:86:25:4f:f7:74:83:fe:
c5:a6:11:a6:95:7c:99:aa:e0:40:28:63:17:8b:44:
be:64:f9:cc:95:ca:48:c5:46:a7:50:72:d8:2c:ea:
bf:c6:7f:e9:6a:63:1c:42:39:df:f2:82:4d:c3:82:
2d:08:74:6a:91:58:2a:50:7f:06:34:52:8f:90:82:
d2:23:3d:ac:ac:ec:6d:5b:a6:33:16:5b:93:ee:4a:
23:de:c6:1b:2a:b5:72:cb:d3:3d:c1:cd:c3:e8:36:
98:19:f7:7e:e5:cb:f2:b4:ee:fb:a5:fc:1a:0a:d2:
20:31:1b:a4:0d:75:ce:a8:e4:c4:06:a9:91:38:79:
2d:31:0e:ca:2a:b0:75:9e:a4:05:85:ec:f3:4a:58:
6c:80:04:48:c8:8b:7b:c0:ab:47:a2:bc:32:2e:a7:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:17:F0:81:F1:09:BF:B3:E8:68:71:7F:19:3B:A7:37:D9:A6:A1:3B
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:9b:9e:26:e9:38:b8:7b:91:cc:fb:79:69:e8:bf:a4:ee:
e2:94:ef:58:82:fd:8b:47:64:1f:c8:c9:13:8b:5f:97:48:87:
df:25:14:e8:54:2e:a1:d1:43:12:44:76:64:bb:4c:94:5e:01:
42:8f:bd:6b:d8:7c:c7:ef:65:c2:e6:76:72:f4:75:0e:ac:49:
6e:cf:aa:40:bd:e6:e6:ec:0d:58:58:4a:50:09:8f:80:85:d3:
85:70:ed:2a:7d:3f:23:f6:14:54:76:e7:a1:7b:69:86:47:32:
c2:b8:e9:4e:69:d5:c4:3e:5f:24:fc:26:a9:47:c8:6b:40:70:
e1:2c:1d:7f:e5:c2:e6:f3:6b:d4:59:ad:e5:d5:74:a4:79:02:
6f:75:23:bf:2a:f7:20:7f:46:47:ff:0a:55:84:4b:e6:81:91:
79:a8:c1:b2:c8:75:1f:33:73:e3:bf:24:6e:68:cd:9a:8b:e6:
89:cd:67:64:3f:71:43:15:b1:56:1f:2c:bc:bd:56:77:61:6d:
31:43:6a:f2:a9:00:f6:83:f4:1d:55:73:4b:d3:08:c2:19:4c:
20:df:e4:ee:97:80:d2:21:6d:22:ec:9d:77:86:94:9e:74:0d:
fb:70:4e:96:b2:4d:52:59:4e:45:e6:3d:bc:15:c4:af:75:f6:
70:5b:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:08:11 2026 by rpki-client