
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: ae4hLFX3FTNuBZyzTgT5vKgZiEmbHL6nirF5vY95DjQ=
Subject key identifier: 2D:85:8A:F9:82:7B:29:60:4E:77:69:E0:F3:98:86:C3:A9:9B:E6:95
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 019D37C1060DD8CE6BD3A98B18DAD839E308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 11BE
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: 8849+j2lzgiZzgemudrn0R4+/zD0Hl1Y81yZnWwtfHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:06:0d:d8:ce:6b:d3:a9:8b:18:da:d8:39:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=2d858af9827b29604e7769e0f39886c3a99be695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:de:3d:64:55:b3:96:69:54:2b:57:ec:05:
aa:c7:61:9c:55:40:a8:e2:01:7e:f9:42:86:a5:7b:
6c:56:56:b8:4d:31:59:de:35:c0:3b:df:bd:5d:f3:
8f:d2:13:80:7b:ac:44:20:f8:26:24:a4:d2:7e:01:
55:aa:a8:88:40:7d:aa:07:29:04:fe:4f:70:57:8a:
f8:55:cb:64:1d:f4:6e:24:4b:0f:85:71:73:3a:7a:
17:71:1f:d9:0a:72:58:40:35:1e:f5:4d:34:0c:69:
02:98:ff:d2:05:96:db:16:8e:a7:13:27:ef:d9:9c:
49:81:ee:93:e8:16:8a:b7:c3:0f:07:94:3d:4b:74:
06:3e:2b:e8:1a:9b:0e:80:ef:cc:1f:35:9b:b7:b0:
d8:51:12:f4:b6:e5:d7:aa:33:30:75:a4:f8:9e:78:
01:fa:ef:2e:ee:65:33:bf:6a:05:35:51:43:50:0d:
1f:79:da:42:bd:a6:40:ea:bf:a6:1e:32:ac:22:28:
c8:42:46:48:82:bc:64:6e:8a:24:7e:33:6e:c2:53:
03:d5:52:7e:52:5e:a2:e7:0b:23:82:fb:bf:fb:53:
e8:9e:04:f3:ba:72:98:8d:1a:cf:ba:ec:2a:2f:cd:
56:3c:0d:9b:35:21:3d:10:60:01:aa:93:45:37:14:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:8A:F9:82:7B:29:60:4E:77:69:E0:F3:98:86:C3:A9:9B:E6:95
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ab:b7:ba:0f:9d:af:0c:f3:12:d0:c0:fc:b9:56:e4:7d:f6:
b8:39:5d:c2:08:df:b5:34:9e:ac:ef:49:a0:3f:8b:71:b4:21:
6a:97:1f:ad:d9:da:54:24:6f:95:37:ff:8d:cc:0d:2c:0f:c9:
82:91:b8:51:b7:b4:d6:ff:28:0f:c2:bf:5a:1b:61:1e:ec:30:
86:1c:6e:f0:7e:54:dc:d3:b8:6b:7c:3c:11:56:69:9b:40:a4:
25:f5:92:cd:b0:df:f3:01:d9:c1:c2:c4:1a:3e:32:f8:c9:fb:
1b:5f:95:13:76:4b:5e:a2:cc:9d:76:5e:59:5c:52:d7:9b:67:
14:6d:62:2a:08:4a:20:f1:28:41:4c:14:42:7b:a8:f7:7d:c3:
14:b1:1f:13:f8:ca:a7:74:08:1a:f7:15:77:b1:b6:71:85:51:
6e:d5:25:a3:a4:56:df:c5:34:b4:6e:79:6b:8a:66:de:ef:6e:
eb:06:db:c1:8f:a0:5c:40:2e:f6:a7:5f:fc:b5:54:b3:29:02:
8c:73:10:51:70:29:28:91:bb:51:98:77:71:e6:5e:07:08:88:
49:4e:71:a5:0f:88:a7:24:9b:14:f2:bc:66:84:61:9c:0d:d0:
bf:1c:a5:cf:9f:c0:65:ad:64:e1:11:41:b2:40:c0:37:9b:12:
af:89:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:31 2026 by rpki-client