Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: FEYVtfbFj39b3dTVvL7BsyWUfUX7wS3N9g6yfjqwfIk=
Subject key identifier: AA:9D:F1:20:F4:9A:0B:5F:47:E3:08:C9:FA:54:86:2C:0F:FF:DE:28
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019D382E9E07FA8C1AEEA94C9B8D2B880F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: A1NRrrLNnWVB2KLnkMUweRcZWf1UlGe9XTVjPzUD+Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9e:07:fa:8c:1a:ee:a9:4c:9b:8d:2b:88:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=aa9df120f49a0b5f47e308c9fa54862c0fffde28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:12:31:8c:b9:c8:f1:d3:18:e1:92:d2:26:
87:be:5c:f6:26:51:2c:15:24:c2:f4:1f:3d:e9:98:
15:68:eb:b0:4c:f9:62:ce:b1:20:53:6a:d9:40:23:
0a:cf:17:a9:f8:4a:3f:43:68:ff:a9:86:4c:a1:8c:
b4:64:d6:5d:4b:51:b9:c2:fe:b3:16:77:e8:3b:5a:
99:11:d7:e3:ad:86:9e:14:82:f2:66:9f:0a:7e:3e:
3d:37:fc:f1:35:95:cb:3a:0d:49:dc:d1:be:23:ca:
a0:b7:c9:3c:9d:24:04:d8:73:34:6f:54:fd:d1:e5:
ca:8f:a7:ae:e4:41:56:7b:fb:77:eb:30:98:2a:c8:
df:02:5c:ca:27:d9:e3:9d:0b:4c:42:10:3a:22:ca:
2a:cf:7e:8f:92:92:c9:bd:f5:94:c3:4e:19:3b:d3:
c4:df:6c:5b:62:9f:b9:89:51:57:86:5b:50:a4:ee:
db:c7:7c:9c:cd:ce:68:36:98:e7:d7:65:95:5e:c4:
ea:65:21:04:b5:82:d3:93:4e:2a:c6:c1:85:4d:37:
84:a4:7c:f5:e6:16:a9:ee:a2:7c:8e:80:c3:49:cb:
13:ad:b3:65:23:02:87:9e:71:3a:a8:19:f0:e3:dc:
63:e4:12:4d:ff:d0:0d:cc:0d:39:b4:4a:93:12:73:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9D:F1:20:F4:9A:0B:5F:47:E3:08:C9:FA:54:86:2C:0F:FF:DE:28
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:de:0c:dc:9e:42:06:1f:4d:4a:b1:03:89:26:e8:87:0c:68:
48:d7:91:90:62:25:54:3a:e7:17:e7:da:bc:63:62:1c:90:af:
0f:f8:e1:2c:72:1d:2e:c5:85:ce:9c:a3:44:eb:2c:9f:cc:aa:
c1:e6:63:05:03:1f:1d:11:16:8e:1d:86:5a:37:e3:0c:eb:07:
98:cf:be:b4:2f:90:c9:94:0b:bb:98:fe:cc:ca:74:20:3a:ac:
87:91:0a:0b:8c:2e:f4:82:50:b6:1d:b1:2b:ab:30:22:1e:9a:
97:5b:95:9f:2f:3b:8e:6a:5e:85:3d:8e:2c:29:f4:06:67:3e:
4a:46:88:bf:51:36:37:5b:30:16:58:7e:d0:f7:ed:f0:5e:8d:
45:cd:8a:10:ca:44:ab:0b:70:cb:e1:1e:db:e8:78:7e:4c:df:
9d:3c:60:30:a8:e1:d6:92:0a:8f:62:47:a9:50:47:95:04:2e:
b2:f5:89:85:af:a1:19:bb:6b:64:67:e6:5e:b9:af:b3:3c:36:
1f:83:e3:3b:30:c6:f6:d4:e8:cf:28:3a:c1:69:bd:6e:ee:4f:
30:ba:4c:c4:c6:85:07:e0:47:3b:6f:da:cb:8d:a8:71:ce:e2:
17:ad:a6:7f:ef:c2:5b:69:bc:83:f7:11:9f:22:c8:c6:b1:e7:
f1:9f:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:40 2026 by rpki-client