Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: TNImiaRSBFSlQiVqbYrFd2Eok9boy1aAo7uCzsiN3GA=
Subject key identifier: 0F:84:85:4D:8F:DE:EB:FF:BD:6F:56:5C:B1:AC:30:0E:0E:75:D7:93
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 019D39AEF56FBB6DB9042A810E25DF08713B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:01:00 +0000
Manifest this update: Sun 29 Mar 2026 13:01:00 +0000
Manifest next update: Mon 30 Mar 2026 13:01:00 +0000
Files and hashes: 1: JH9XT1NUV14_SKsiiCKlHziQ9DM.roa (hash: 04vIJ1yQ8bNTRGDpE43oQ18qFJ2VyqPCHwJQW+bmQgI=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: L2raPGIZyuCOexwjQjqNwHL/sJIKm50AWJmYkuhNsBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f5:6f:bb:6d:b9:04:2a:81:0e:25:df:08:71:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Mar 29 13:01:00 2026 GMT
Not After : Mar 30 13:01:00 2026 GMT
Subject: CN=0f84854d8fdeebffbd6f565cb1ac300e0e75d793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:64:7e:2c:ee:a4:14:c7:eb:c9:fc:b5:97:
63:55:0e:46:0d:c3:1d:c0:28:dc:0d:6d:dd:78:f9:
80:70:e9:41:8d:8c:13:1e:1a:94:fb:38:b4:b4:57:
9e:38:27:4d:6d:da:1c:1b:47:8b:a8:54:00:65:2b:
c3:f7:2a:09:99:a5:68:8f:65:47:b0:e3:8e:d3:6b:
83:eb:b0:03:27:9a:5e:bc:97:a9:f4:a1:2d:66:41:
8a:6c:be:c6:18:48:17:5c:e6:dd:4b:05:8d:5f:db:
d7:2d:63:b3:45:b6:53:f1:99:56:0d:c4:dd:3d:ed:
ba:7c:d5:4e:fd:39:f3:0c:70:9f:4f:b4:27:a0:2a:
2d:96:59:d9:00:3f:2c:a3:59:9e:2b:61:21:38:29:
a8:f8:55:43:5d:94:03:1d:64:bb:2c:5e:a7:28:91:
03:11:dd:76:f7:a4:bd:7b:6e:e3:2e:0a:ed:aa:da:
b2:23:a7:9c:68:e3:6a:24:6c:be:5f:d3:95:5f:a5:
9a:ab:9d:ec:a1:9b:c6:d5:ff:64:2d:f4:06:d5:86:
b4:52:d6:53:6e:f3:e3:08:09:1d:7a:a6:b1:e7:e2:
76:93:0c:8a:28:4f:ae:b5:18:e6:97:6a:a9:bc:e0:
ad:b5:bc:b3:a5:e6:14:3a:a1:4d:5f:3e:7e:d0:51:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:85:4D:8F:DE:EB:FF:BD:6F:56:5C:B1:AC:30:0E:0E:75:D7:93
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:38:a7:0c:e7:1f:03:28:43:ec:fd:f7:69:91:75:e3:8f:7c:
c2:7a:af:26:11:b0:87:d5:c7:c2:d8:8e:14:40:43:17:ed:ee:
45:a5:14:ba:a9:50:94:2c:ea:d4:92:79:76:0a:0e:cf:b0:0d:
6f:9c:7d:d9:1c:37:0e:90:1d:70:ab:cf:5c:46:ac:27:95:93:
de:eb:bf:81:ac:fe:b5:f9:c2:ff:29:88:87:a5:45:0c:b4:77:
59:01:d1:4a:d5:4a:00:6b:4e:d8:e3:e2:02:f1:bd:f2:f4:82:
fb:ff:aa:0d:d9:93:90:20:de:8a:d9:4e:79:a0:d9:90:01:3b:
3c:e8:3c:4b:7f:d7:ef:b6:cd:ae:73:b3:90:15:ec:86:ec:09:
32:55:72:4a:71:3c:50:f2:3d:0e:e1:ea:e9:d5:30:59:03:4d:
6e:22:d5:43:fe:06:58:f8:0c:2e:1d:cd:08:09:bd:55:5d:8b:
11:93:10:2f:f7:d0:26:b1:b2:54:ae:d1:d6:ce:cc:8f:31:da:
8b:44:d9:1f:b1:b7:aa:8e:dd:76:ea:e1:23:e2:ab:88:3d:1c:
83:2e:4c:c5:92:9a:dd:89:8d:fd:1e:44:ce:d0:e9:bf:3a:f8:
37:18:76:73:a6:fa:33:58:63:b4:3b:99:18:3f:6d:a2:02:04:
e3:0e:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:15 2026 by rpki-client