Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
File: _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json)
Hash identifier: NyWZFLeM60zVx/kXqv9JEcqT4jHqA7JKtxx+U+OJFEk=
Subject key identifier: 81:68:31:C7:B8:4F:AF:A6:B2:6F:DC:A7:07:1C:06:1F:F1:F3:50:F2
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial: 019D39407198D3A6917B99FA02FEA8D646A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
Manifest number: 0B8E
Signing time: Sun 29 Mar 2026 11:00:17 +0000
Manifest this update: Sun 29 Mar 2026 11:00:17 +0000
Manifest next update: Mon 30 Mar 2026 11:00:17 +0000
Files and hashes: 1: FjNtau_2C7-IteTYIoQTiESBcVg.roa (hash: SON6ioGxRvj1OfUX9ytmsl2A9Mp6k9lzhCA/d2PBUSY=)
2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: y4XKkqVzoQqm+7GnxKtcw5NMmeK8ibWmhqGVeLsecUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:71:98:d3:a6:91:7b:99:fa:02:fe:a8:d6:46:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Validity
Not Before: Mar 29 11:00:17 2026 GMT
Not After : Mar 30 11:00:17 2026 GMT
Subject: CN=816831c7b84fafa6b26fdca7071c061ff1f350f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:d3:53:47:e9:6c:68:a5:28:7e:be:2b:bb:
85:ee:84:cc:91:f1:7f:03:98:7c:cd:35:4f:cf:e4:
30:2d:34:28:48:88:47:60:ed:54:ab:88:0e:67:c3:
58:1c:2a:8a:a3:16:c9:46:eb:e6:e8:dd:d6:1f:41:
94:42:68:58:b3:18:dd:74:3d:fe:ef:40:b7:0d:a7:
f9:c7:90:5b:20:39:64:cb:3d:8e:3c:3d:16:7a:d2:
7a:21:96:6d:b0:f6:dd:27:6f:78:3a:36:e0:d9:f6:
6d:2e:e5:61:85:83:37:9d:96:35:36:83:4b:63:0d:
e8:96:f7:85:d0:80:1a:6e:27:17:98:62:3c:b4:e4:
55:9a:5f:8f:82:00:29:9b:fa:3c:a3:bb:2a:cc:20:
8b:4c:39:73:a5:77:a1:d4:c3:3c:75:de:ad:4f:72:
6f:f4:67:97:1a:f0:ab:6d:b5:e7:99:23:ab:d8:83:
6e:78:72:73:b0:89:73:fb:74:14:f5:9b:52:49:b8:
d0:0c:0e:cd:56:73:da:cc:97:1d:cb:98:2e:84:e3:
e8:db:5c:84:3d:f1:98:e3:46:d9:92:ce:c4:84:65:
a7:bf:c8:c6:d6:48:da:c7:d3:77:86:30:de:2b:bd:
9d:37:f6:30:d2:d6:5f:ac:5d:3b:b6:67:9e:d3:03:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:68:31:C7:B8:4F:AF:A6:B2:6F:DC:A7:07:1C:06:1F:F1:F3:50:F2
X509v3 Authority Key Identifier:
keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a7:4b:38:39:e5:cb:98:3f:c9:4c:56:f8:ef:be:c7:be:6f:
ce:d7:58:b7:50:12:2f:88:84:bc:fe:ea:fd:1a:07:3c:31:ec:
e2:2c:c5:fd:30:a2:f1:b3:b4:1a:95:30:4c:94:16:b2:0c:cc:
02:61:4f:b9:65:b0:b3:96:32:11:08:e3:a0:45:46:36:13:25:
ce:0c:2e:d8:a4:a6:0e:e4:65:6b:f5:b3:98:c5:53:07:5a:98:
5d:99:10:8c:3e:24:a8:17:76:5c:fe:0a:a4:95:7d:e6:24:90:
15:70:6d:c1:ea:81:61:76:b5:9b:12:04:cd:7b:42:04:6e:36:
0e:3f:cc:6f:5e:60:c5:bc:fe:df:3f:87:24:db:99:7b:5a:1c:
2d:3a:ec:de:7d:fa:81:99:48:12:22:bf:9a:ab:69:30:c8:30:
ee:22:e5:76:a7:f3:3c:13:65:7f:ac:0d:32:33:fd:16:78:7d:
c6:80:5a:f5:19:cd:e1:7e:7b:7f:1f:7c:74:94:2a:fe:74:8b:
e8:e1:c3:80:5b:2b:92:e4:3b:5d:69:e0:0e:df:23:82:cb:71:
e2:a1:99:73:0a:78:46:88:d4:75:9e:ff:5b:92:13:c3:dc:2a:
55:68:33:8a:62:68:2c:6d:91:88:d4:47:e4:07:f1:2a:63:5e:
25:54:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:37 2026 by rpki-client