Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: nia0/UBzuia0nJv+QFMkAes3OR8FMRgp9VEouOz0/MA=
Subject key identifier: AB:31:3F:78:CE:A8:EF:A1:82:35:86:43:63:D6:8F:97:E7:94:BB:3F
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019D37C0139ABB9CB936C5A8024E1CE2713B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: LFXZw8rkkM5yIICaAHTz5Q9cn+asOoY1TI7xdjeB+gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:13:9a:bb:9c:b9:36:c5:a8:02:4e:1c:e2:71:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=ab313f78cea8efa18235864363d68f97e794bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:7a:4e:a0:f1:ae:07:e6:3c:e8:f0:79:f0:
38:1c:2d:97:fc:e4:d0:a7:c5:60:3a:12:6f:80:49:
7f:64:01:a3:87:15:02:1d:91:b2:6f:28:dc:e4:12:
00:fc:0b:30:15:45:0f:cf:23:92:0e:64:9f:71:68:
96:39:76:35:ba:e6:d5:9d:74:48:e4:03:d3:00:20:
80:16:d8:96:68:36:24:f7:1d:f3:94:17:b3:31:bd:
7f:88:e3:e3:6c:53:02:43:fc:dc:53:d5:c3:d9:09:
2d:ac:42:8f:85:41:98:7a:44:6e:44:e1:6d:e6:79:
d9:ec:2b:db:7b:bd:81:77:36:c3:4c:df:de:42:a9:
1f:6f:b9:6e:8f:7c:fb:81:df:43:17:2d:71:90:ed:
eb:f6:91:51:f9:6b:5b:ff:e0:82:09:a8:0f:e3:84:
c0:4e:f5:fc:0c:56:54:39:d8:b5:7b:e0:fb:8f:a5:
7d:01:b7:b2:dc:9e:cf:c1:f4:a0:3d:3b:7b:d1:ce:
5a:89:e8:27:b9:f9:7b:21:c2:9b:c0:fb:91:09:60:
13:30:14:22:df:00:68:da:ce:b1:5b:43:82:b4:aa:
e5:ca:b3:2b:ba:b0:f5:dd:a3:c2:82:39:0d:d3:56:
39:e3:cf:2b:8b:00:95:d8:07:56:8d:ff:4b:42:b0:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:3F:78:CE:A8:EF:A1:82:35:86:43:63:D6:8F:97:E7:94:BB:3F
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:18:18:28:71:88:2b:1e:a4:74:5f:c9:31:a6:bb:bb:91:bd:
d5:9b:99:9c:a5:d9:68:03:24:19:23:cb:4c:be:79:d4:8d:fd:
e5:0c:20:eb:0e:4e:ed:8d:01:f1:b1:4b:f9:b3:8d:ed:79:4c:
40:6a:19:ec:3c:12:f2:d3:57:17:ca:a9:cd:0c:6b:cb:93:58:
76:2b:97:d2:35:b7:5a:60:c5:d9:ec:6f:5f:de:57:c7:3d:ad:
84:c5:fa:b6:d5:33:3b:0b:c0:dd:82:56:fd:bd:44:e3:85:a5:
bf:78:e7:59:df:77:df:b8:ac:9f:17:da:12:38:1f:eb:42:fb:
b3:12:8f:41:00:3c:3b:fe:60:07:99:1b:7f:ad:56:95:f5:f9:
63:60:ab:11:8d:bc:32:75:d7:30:26:c1:fb:74:52:c9:ff:80:
3b:c9:8f:5d:7d:af:b2:00:81:d2:47:bc:30:38:08:53:35:da:
e3:c0:26:49:fd:4a:76:54:d2:b1:84:75:02:77:46:fa:dc:0e:
bd:8e:06:d9:ff:a1:79:8d:f5:4d:eb:6a:7b:c6:13:fb:bb:50:
41:52:ee:22:e5:95:0e:18:f6:d7:f7:15:5c:23:ee:d9:db:1d:
de:2e:21:29:24:7f:61:91:b5:74:7b:6a:99:b9:21:c2:3d:7d:
36:ba:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:56 2026 by rpki-client