Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: PDAUc7lyJxxWf1aymClRkEeC4VhUgdcSZz1hIC0+170=
Subject key identifier: 98:3B:79:9A:83:3D:2F:91:DD:7B:46:56:41:53:15:AB:79:C0:5F:62
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019D311A4576FB888A9DDC351083EA520BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 188A
Signing time: Fri 27 Mar 2026 21:01:38 +0000
Manifest this update: Fri 27 Mar 2026 21:01:38 +0000
Manifest next update: Sat 28 Mar 2026 21:01:38 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: Kg8AFPu/vowwCg1+ZgVbbmdlMt8cbREptLkurvecybg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:1a:45:76:fb:88:8a:9d:dc:35:10:83:ea:52:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Mar 27 21:01:38 2026 GMT
Not After : Mar 28 21:01:38 2026 GMT
Subject: CN=983b799a833d2f91dd7b4656415315ab79c05f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:5b:72:0d:77:0f:15:db:0c:7b:f0:8a:87:
0b:21:40:ae:45:29:93:a8:d1:a4:96:f3:30:9e:e5:
87:94:6b:d9:5e:03:99:a9:49:28:3d:56:40:42:d5:
cf:25:de:08:ea:cd:2d:16:c9:b2:d1:71:ed:61:2f:
38:46:71:66:f9:5f:8b:ab:03:73:d8:fd:81:87:00:
4f:18:2c:08:c8:e4:fe:45:07:e0:32:60:be:bf:3f:
97:66:cf:1b:b1:87:01:db:38:49:4a:7e:c8:83:95:
8e:a3:f6:a9:f6:b6:1f:87:60:3e:7a:93:f7:bf:96:
e0:a1:41:b3:ce:c1:58:99:1f:8d:2f:8d:78:14:a0:
ee:c2:0e:d0:7d:54:56:31:44:51:6e:49:40:87:be:
76:57:f4:96:79:e9:d0:90:5a:32:e4:ff:a6:49:9f:
1c:a8:df:cb:57:d0:83:aa:2a:ed:33:05:04:a0:06:
41:7f:66:13:fb:15:73:0f:a8:63:69:ee:07:6e:4b:
94:18:9d:8b:ba:d1:c9:c3:e4:6b:26:ca:e9:7c:97:
47:93:9a:d9:fa:c4:9d:f2:64:02:96:1e:19:20:7b:
34:db:27:fb:28:58:6e:e3:b8:82:6c:04:fd:d8:e3:
ac:ab:ee:c4:5f:fb:1d:43:cc:a4:bf:73:fc:08:74:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:79:9A:83:3D:2F:91:DD:7B:46:56:41:53:15:AB:79:C0:5F:62
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:92:e7:cd:9c:41:32:74:69:94:79:cb:4a:71:c2:b9:fe:9b:
a6:4b:f0:a5:67:70:72:75:17:f3:a3:33:7b:1b:ff:6e:d8:5d:
a4:4c:ef:33:55:3e:0d:0c:89:5f:db:2f:2d:59:11:60:07:17:
75:b2:64:cb:b1:08:cc:79:48:e5:95:bb:f2:75:6c:38:98:3c:
66:dd:65:c8:da:9a:5c:be:97:5d:02:08:68:0e:5c:88:fa:a9:
0f:9d:58:38:25:c6:35:a0:4d:b2:bd:2f:43:34:42:32:a1:2c:
d9:08:ad:30:75:a7:29:4e:0f:1f:67:37:39:ec:6d:59:55:eb:
c3:d2:14:9e:0f:ca:e4:e3:d0:49:64:39:f8:b8:93:1b:a4:2e:
27:6a:3c:e6:ff:fe:52:ee:89:9f:50:0b:37:88:75:56:e9:0e:
b8:2c:f6:30:9c:a8:33:93:0e:d9:9f:e5:af:07:5e:25:54:b8:
c6:ec:ca:ec:5f:a8:94:7a:40:18:d5:44:b2:09:b7:5f:0b:37:
5c:c4:ad:8c:7b:90:aa:c7:49:73:b5:e0:c8:ac:62:2e:38:1b:
42:d5:16:6d:4a:be:06:64:cf:d7:8a:d4:c6:65:19:70:a1:37:
21:44:b9:03:ff:94:23:73:9f:ea:93:78:d3:43:e9:c3:9d:30:
7e:b3:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:51:47 2026 by rpki-client