Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier: VpqOSGt/SLIAY+I0ts/jwO5XlG5umxD9BFCqTlRrw1w=
Subject key identifier: 21:3C:CE:44:70:06:67:43:A7:BF:9E:D0:EF:9E:5B:85:EF:94:5D:54
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019D05C15D55C70163C2782AC6EC616959DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number: 0BEB
Signing time: Thu 19 Mar 2026 11:00:51 +0000
Manifest this update: Thu 19 Mar 2026 11:00:51 +0000
Manifest next update: Fri 20 Mar 2026 11:00:51 +0000
Files and hashes: 1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=)
2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=)
3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=)
4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: ficJrMv4NhEFXBlZgRk341U5ibZiLQLwfzQ/8R5mdqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:c1:5d:55:c7:01:63:c2:78:2a:c6:ec:61:69:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Mar 19 11:00:51 2026 GMT
Not After : Mar 20 11:00:51 2026 GMT
Subject: CN=213cce4470066743a7bf9ed0ef9e5b85ef945d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:d8:6c:5d:c4:39:54:73:11:54:77:c4:98:
45:e2:fa:6a:f5:f6:f2:3d:33:48:4b:65:ea:4a:8b:
84:2e:be:e8:04:e6:01:a0:b1:fb:1c:17:96:30:24:
91:26:bd:48:fb:3f:a9:4b:98:d5:40:90:c9:f1:80:
d5:a8:ad:ec:6a:f7:bb:ad:31:e5:89:b6:78:1b:69:
a1:c5:b4:c3:ec:e0:1e:ef:f0:72:d5:fc:8d:03:14:
e2:94:f4:0e:eb:7a:98:da:28:49:67:a2:ae:88:9d:
ed:0b:be:34:3c:ee:f7:e7:48:26:8d:5c:e8:42:55:
e0:c7:a7:f4:27:eb:dd:91:1f:70:98:09:79:6c:92:
71:aa:5c:6f:01:ad:5c:db:c7:36:cb:05:c5:5d:34:
e9:e1:74:e2:5d:8f:b4:f4:9d:07:c7:75:8b:10:e5:
b4:16:b7:73:8e:59:d4:71:06:2d:b9:65:fe:a9:e7:
2a:ed:4b:a8:39:d1:ec:94:5c:99:d2:7e:18:48:dc:
d6:1b:1d:62:6d:02:b6:67:7b:9c:e0:c4:e8:96:b9:
6b:0e:42:4d:a9:59:e4:7a:96:51:42:7f:69:e9:42:
88:8c:c4:f3:8a:d0:d6:fd:73:78:f6:b8:d1:47:e3:
e1:e5:ba:82:7d:8f:c1:92:4e:aa:d4:c8:22:ee:71:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:CE:44:70:06:67:43:A7:BF:9E:D0:EF:9E:5B:85:EF:94:5D:54
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:41:f2:e6:5c:18:51:0b:fa:3c:4a:4e:8e:26:46:ee:a6:
88:66:7a:ab:a1:7e:d9:21:d6:7a:21:3b:c6:84:4c:6c:95:87:
a3:67:64:fa:6f:a7:85:bf:82:a2:c5:49:5d:8a:41:50:da:c0:
a8:75:b8:21:e2:ae:51:ee:fa:97:b9:75:d8:56:e3:f7:36:7b:
b3:91:39:eb:bf:79:48:89:5a:f1:7e:2f:e0:94:a2:1a:5a:4a:
e5:07:cd:16:0b:a8:0c:15:16:9d:64:ce:a7:72:78:a2:bc:be:
a5:ad:c7:3a:d7:8e:7d:f0:df:2f:60:c0:8c:eb:d6:c1:45:a5:
26:99:ce:14:99:be:03:41:d5:79:96:6f:41:35:6c:80:33:48:
bb:dd:b4:62:90:3b:e3:2c:7f:3a:d5:04:d4:9e:a5:75:47:fc:
4b:fe:1d:e4:46:e4:0f:d1:80:fc:f6:9f:5e:65:1c:d6:98:2e:
5c:5f:2c:c9:ea:fb:93:04:db:01:5b:2a:51:1a:22:33:81:e8:
5a:c8:b1:a7:18:03:aa:10:f5:51:9b:48:09:16:9e:6a:02:c7:
32:7a:49:13:83:2c:73:bb:17:d2:90:c5:1a:6f:8d:72:21:e9:
ba:8e:0c:97:5d:31:9f:72:dc:f9:30:f3:4e:84:cb:89:23:c4:
e0:d2:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:54:33 2026 by rpki-client