Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier: LSnB3ZwqeclhQKPazo33bM/xIlxIRXuU8dXuu023bRk=
Subject key identifier: 45:8A:FD:84:5A:B5:AE:7C:F8:9B:88:DF:7F:0B:A2:3B:61:38:5E:F6
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 019D3909822DCCE917A37E4F1D80D346F301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: PVBeyZKlBQT3Dc48StGzvLmkgLs.roa (hash: RIyf6kHbIC+ixB0VU+3PzontAfCdCIipNxhHFNviEwg=)
2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: +S5yJgIfDqxU9EvZbhH/AEKNscmcp5JrXVRX7Cdsv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:82:2d:cc:e9:17:a3:7e:4f:1d:80:d3:46:f3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=458afd845ab5ae7cf89b88df7f0ba23b61385ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:5b:d8:48:01:5f:a5:cd:30:b9:6b:9b:ee:
26:7d:84:e8:f6:79:50:ab:04:83:f3:05:8c:f3:93:
f9:a8:b7:fa:35:df:df:02:4f:d9:2d:6c:6c:3d:ef:
f4:e3:0c:c2:e7:52:bb:1b:5f:b8:1c:54:b5:16:0d:
7b:78:85:8e:6d:e1:09:24:8f:47:e5:08:d1:13:b8:
fd:02:b1:3b:b5:48:53:36:b6:3c:2c:af:03:20:c9:
83:87:7e:c0:bd:e2:8b:59:d8:e9:b2:4f:62:54:85:
77:1d:24:87:54:f5:9c:5e:b4:c4:28:74:e3:29:a2:
fa:d9:65:26:5d:27:0f:c1:56:d3:2a:62:ce:2c:86:
0c:33:86:78:8b:f8:b1:aa:79:7a:11:4d:8a:64:c3:
0d:73:38:96:c1:47:1b:de:d6:2a:7f:e6:82:0b:cb:
73:9e:3d:cb:53:e6:1d:eb:7f:1d:9b:e5:3c:07:04:
70:41:48:77:f0:cd:4c:cb:1b:ea:f2:8e:db:47:d0:
6b:aa:9f:ae:50:41:bc:f1:5f:0a:d2:de:f8:b2:17:
cc:79:26:c0:4f:30:e7:52:a5:25:74:dd:d2:2f:19:
84:7d:3c:be:3e:7a:82:dc:19:34:4b:9f:1b:72:90:
47:a6:49:f1:da:f5:04:63:30:2b:ae:21:70:7c:e0:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8A:FD:84:5A:B5:AE:7C:F8:9B:88:DF:7F:0B:A2:3B:61:38:5E:F6
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:67:88:41:8a:ec:b9:03:8b:ef:a8:0c:29:f5:91:be:5b:01:
e6:00:cc:8a:8c:92:fe:f8:de:67:41:72:0f:e8:d1:a0:8d:4a:
91:9c:ce:ae:33:f6:4c:f1:64:aa:d9:1a:a9:48:ab:12:b3:54:
27:17:aa:57:fb:bb:1e:fc:51:c5:3b:5b:3f:8e:48:e3:03:36:
95:08:11:34:9b:ed:c2:ba:9e:96:90:38:a6:21:dc:a9:e9:26:
c5:ce:fb:5a:d9:7a:d4:18:99:28:f5:bd:45:ac:9d:ec:9e:84:
c1:57:d5:43:df:5a:a3:b9:60:70:c9:ab:84:08:db:7e:72:e0:
26:5a:24:df:64:9c:62:42:93:3d:b9:7d:4a:e7:ec:ab:09:9b:
35:3b:53:1e:6c:6a:3d:e5:5b:47:45:0c:5a:89:99:32:84:af:
f2:5c:7e:d4:68:0c:8e:1e:aa:1d:dc:9b:16:0a:31:04:ec:c6:
b4:f4:09:84:99:c7:2b:2f:43:0f:c6:c0:14:cc:b7:e8:4a:fe:
89:ef:22:30:06:6b:63:a6:58:3d:7f:6b:6e:c9:95:c6:5e:07:
84:6c:c7:a4:73:38:f5:5c:de:94:7e:95:6b:41:ad:c8:7e:f3:
78:51:c6:50:15:77:f8:50:35:d5:d1:fc:a5:f9:0d:1b:90:a2:
d8:79:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:32 2026 by rpki-client