Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: n7+kfAcQgc1A996j0qMkNpO5MbeJ14vJ38u7jKDKVSU=
Subject key identifier: 2D:C9:19:76:71:AD:B8:21:E0:9B:7E:40:A6:D0:CF:F3:A1:CC:F9:AD
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 019D390A128995C1F76BB355B0A30B9E3D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 0810
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa (hash: EGFj0yiGNTXuSH8wwtjUjE+9yF5opQRMwl047u2UKFM=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: XaZMhq2Nb9Jl2nYrKG5W98yhD5u84Pqxg0HrPkS8TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:12:89:95:c1:f7:6b:b3:55:b0:a3:0b:9e:3d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=2dc9197671adb821e09b7e40a6d0cff3a1ccf9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:42:5e:df:dd:01:18:fd:b3:59:9e:9f:cb:59:
f2:f1:6c:88:fa:59:b9:ca:cf:7d:14:3c:50:ad:6a:
8c:f3:73:83:6b:6e:f4:30:db:d5:e0:8c:44:e7:47:
eb:3f:82:67:f7:47:68:42:fe:52:1b:7a:3f:dc:fd:
68:9c:8b:f7:7a:d3:e8:3c:21:0f:e5:fe:05:80:95:
21:2a:4e:05:4a:6c:28:d6:75:e9:ad:6f:66:bc:df:
65:3d:4b:ec:20:06:46:37:14:7a:b1:9a:1f:52:61:
0b:18:9c:f4:8a:d7:f3:8c:af:db:bf:63:85:56:df:
eb:bc:31:79:83:f4:31:1b:46:73:fb:fe:84:0a:35:
6b:60:4d:6a:44:6a:88:61:d1:0e:53:97:0e:eb:5d:
1d:80:31:f5:78:f1:14:13:de:d7:ae:7d:0d:71:bf:
2e:90:97:6c:d7:73:74:aa:35:b3:d1:86:5e:8c:eb:
b9:cf:ad:7b:6d:3b:12:8a:1b:83:6f:57:aa:68:f2:
e6:41:12:c3:a9:31:16:bc:60:fa:2d:20:ba:48:54:
87:3c:a4:69:5b:98:69:5f:c3:f1:b5:8d:8e:cd:6b:
6c:65:2d:b3:d5:c6:4e:6e:aa:92:46:f0:20:4a:d8:
ec:51:d7:02:63:8f:40:f2:76:07:71:54:b1:7b:ff:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:19:76:71:AD:B8:21:E0:9B:7E:40:A6:D0:CF:F3:A1:CC:F9:AD
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:b1:0f:48:bb:ea:5e:d2:3b:14:52:2d:74:0b:2c:af:24:
57:63:a3:bb:f3:5f:79:fb:1f:d9:fe:08:dc:1e:69:8b:de:fb:
36:51:2a:cb:5a:4d:af:07:8c:1c:dc:d3:aa:aa:18:5a:29:36:
64:de:29:77:a6:89:8a:a3:57:56:02:06:7a:97:b7:f8:54:ac:
0e:a0:3e:70:4d:a6:4f:dc:85:13:e8:e0:0c:6d:ab:13:2f:a3:
20:bb:19:64:0a:86:ec:7f:c8:d5:3f:00:2c:80:81:07:89:3f:
a2:45:e9:42:8f:66:c4:bb:69:f6:6b:02:07:8f:0a:48:b7:5c:
d3:3e:6b:7c:3b:0d:dc:a9:e8:d8:95:86:1c:88:f6:ed:15:a9:
ab:06:89:61:a6:44:7d:5b:b5:14:bc:c6:2c:57:b7:df:8c:ee:
df:32:c9:eb:8a:8b:91:d1:41:ef:a4:37:67:57:34:13:d9:e3:
45:a5:36:12:74:ba:54:1b:5d:7c:fc:51:1c:d3:c4:cf:ab:ed:
3f:39:63:c3:56:f4:90:85:e6:e4:1f:d0:b6:0a:64:1e:9b:ac:
14:77:39:a4:e9:50:0b:a3:4d:d8:3c:a5:e5:1c:b1:49:d4:15:
71:50:07:b3:76:07:95:57:74:48:94:14:99:ba:b0:17:05:7b:
68:99:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:58 2026 by rpki-client