Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: T20zHtTgOf5qjFtjan9cjAo/aRfLp30KnRLOk2xamiw=
Subject key identifier: 30:FD:D1:3F:17:F8:DD:C8:31:44:2A:F9:18:F7:22:94:A0:8C:9B:22
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019CE524280B9A37F46CCB32C30FCED7A465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 03:01:17 +0000
Manifest this update: Fri 13 Mar 2026 03:01:17 +0000
Manifest next update: Sat 14 Mar 2026 03:01:17 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: KK+bqo/19TJkKLpQskLE6kZQwlOopzTV/ovOQuOQ5SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:24:28:0b:9a:37:f4:6c:cb:32:c3:0f:ce:d7:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Mar 13 03:01:17 2026 GMT
Not After : Mar 14 03:01:17 2026 GMT
Subject: CN=30fdd13f17f8ddc831442af918f72294a08c9b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:0f:0c:03:47:3d:16:b7:06:54:fa:cf:0c:
d4:07:d2:14:00:e4:49:31:59:28:5c:f6:05:a5:72:
d5:16:91:20:16:7e:b9:04:4c:1f:66:f0:9c:73:11:
59:60:33:54:a1:c4:3d:64:86:24:c0:cf:c9:3c:94:
1e:0c:a4:18:43:37:10:3e:32:38:ae:10:68:65:22:
be:d5:27:02:2e:f9:43:13:20:c6:05:83:85:f5:2a:
0e:9c:bb:af:be:1d:40:cf:8a:ed:67:fd:ff:79:21:
2d:96:b2:1b:07:10:43:a2:77:bc:3a:f8:81:cb:bf:
aa:f0:96:08:64:54:42:27:9b:5c:bd:86:e3:87:76:
f1:91:26:28:ba:09:ae:4d:f3:63:6a:a8:fc:fc:37:
6c:26:38:d9:2b:90:cf:93:59:80:98:11:17:d6:10:
03:09:08:7c:2f:03:ab:89:9d:1d:f8:69:69:ce:d5:
d4:db:46:b2:46:57:43:d4:0d:10:3d:55:52:09:65:
44:1f:09:71:22:32:a4:eb:af:71:3d:22:fd:47:02:
4d:93:45:3c:27:3e:b9:04:05:bb:bb:25:eb:4c:4b:
59:2d:cc:54:c8:d2:b9:80:d0:09:1f:43:04:83:6e:
39:f7:c8:63:e7:ec:de:f0:3a:3a:fe:8b:03:c4:1e:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:D1:3F:17:F8:DD:C8:31:44:2A:F9:18:F7:22:94:A0:8C:9B:22
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:db:b7:94:a0:89:83:2c:eb:c2:e5:a7:ff:83:49:71:5d:dd:
78:16:96:b7:7f:2e:36:43:e1:83:79:1b:d6:24:69:9e:db:16:
db:1b:3a:79:e3:03:b5:26:e0:fa:62:2b:79:f1:c6:18:8d:0d:
a5:ca:92:84:75:21:a3:d9:b7:58:4b:06:58:64:7e:6d:e4:45:
fc:a3:9b:c8:46:3f:12:bc:5d:8f:29:a1:6a:74:d6:a8:be:6f:
fd:b5:e8:73:4f:59:7c:93:21:cd:51:fd:88:25:87:64:22:4d:
d5:94:cd:09:de:c0:91:8f:59:98:3e:9b:94:da:98:c4:40:e2:
ee:a6:f1:d3:e5:ee:77:b3:77:e3:ca:75:85:39:38:41:13:dc:
c8:c9:5e:29:0e:f6:96:9e:50:32:38:9b:4b:cb:4b:75:b7:81:
94:cc:8c:26:c4:e5:33:cb:60:4a:c0:fb:71:b8:05:0f:71:5f:
ad:0e:a3:5d:49:2b:55:cc:a3:4e:fa:10:57:04:9f:88:00:ca:
d8:f9:7d:b9:4e:59:08:3b:0c:9f:6f:be:16:64:53:51:0a:62:
09:41:47:7c:a0:5a:7d:b3:6e:1b:d6:c3:4a:7d:42:f1:0e:1f:
df:ac:3c:75:00:01:c2:6f:58:64:b4:86:9d:61:1e:64:95:c0:
3d:82:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:49:55 2026 by rpki-client