Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: 6FV2UA/TbALBCZkLLKIrmb3aPLdH5rGAOIUfQxBVm+0=
Subject key identifier: 7C:9E:73:75:A0:01:59:51:1F:EC:A4:D1:C5:05:A6:FC:3F:D8:38:B4
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019D37F6F16BA5D9533C2FA607BB24A9A72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: V8PCFPrTValkKCiDtwNotmUAoXc.roa (hash: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: O5A/7jm7ocC3+ztJD2sGdv5OGjgbiHzg0UoKoum/+iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f1:6b:a5:d9:53:3c:2f:a6:07:bb:24:a9:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=7c9e7375a00159511feca4d1c505a6fc3fd838b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:3c:72:43:71:b4:93:9b:a6:dd:26:5b:08:
18:fc:2d:3e:6c:6b:51:9a:2a:49:e7:fa:30:6f:a1:
af:dc:33:24:0c:dd:31:58:d2:bd:db:52:5b:d6:5d:
f3:3c:74:4a:f2:83:8a:c7:76:68:10:59:f8:11:19:
f6:d3:fd:da:5f:4e:f3:10:92:f8:be:15:a4:3f:b6:
c7:b2:76:34:b7:e4:ad:9a:ee:57:57:90:e1:c8:00:
d7:7a:a3:6d:d1:82:27:e2:18:ed:04:e1:f8:c4:2b:
65:c5:29:54:e0:7c:87:c9:37:ac:b2:3b:83:b4:65:
61:7c:2f:af:f0:8e:f2:34:fe:78:69:27:bb:74:90:
7d:da:c3:50:f6:e4:c9:19:2d:02:e5:23:9d:a5:18:
89:ae:13:77:dd:67:75:7c:5b:d5:5d:15:ce:a9:73:
b8:6e:26:c3:98:e4:4d:24:f6:b3:3c:80:93:29:0d:
13:52:e5:9f:5b:0c:4a:d3:0e:1a:d2:4d:67:8b:cd:
17:d1:21:7b:45:38:63:1b:cb:c3:d6:78:44:e5:ee:
bf:ab:77:fc:f1:a9:69:9d:d5:7e:36:96:9a:89:d5:
af:a4:ce:2c:9e:5d:14:5b:d4:98:af:85:42:cd:e7:
ea:e3:12:80:e4:35:fe:ee:b2:f2:44:0c:46:49:9e:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:73:75:A0:01:59:51:1F:EC:A4:D1:C5:05:A6:FC:3F:D8:38:B4
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:df:91:cb:12:10:40:89:15:2a:8f:40:c5:5a:ad:9b:9f:fa:
54:72:62:ce:a7:79:f5:9d:8b:12:92:21:b8:dd:40:40:17:34:
4c:ad:b8:4b:bf:18:e4:d3:25:71:38:8e:1b:f6:1a:92:44:8b:
db:d8:cd:d6:47:41:cd:45:78:cf:09:5e:b3:a4:28:1e:c6:18:
bc:a4:0e:67:a5:6a:ee:0f:cf:c4:33:df:d5:b6:d2:9e:6d:cb:
41:6b:6f:d1:5f:bd:8a:2b:ac:00:37:4f:2c:1f:8c:51:a5:43:
ec:b7:5a:b0:03:5f:f9:a2:d7:c3:21:a1:99:70:6c:00:9d:ce:
cd:62:49:9c:69:c0:68:c5:f3:21:f4:ba:bc:f0:f4:40:7a:3c:
df:a5:53:95:c9:c4:82:a7:36:47:0a:b0:08:e0:c1:2e:71:6c:
6f:2b:ff:0f:e0:bd:10:ac:45:58:cf:7d:fa:19:7c:5e:a4:60:
30:f3:72:55:d1:8b:2c:7b:34:22:4c:2f:64:02:df:84:24:3f:
30:a8:23:7e:b5:1d:a8:cc:c1:ef:cf:c6:10:dc:df:1d:fc:c0:
20:55:ba:f5:7e:6b:f9:2a:35:22:cc:6c:54:f1:fd:a1:32:ca:
2f:9c:0f:a2:80:ec:bc:d0:29:cb:a3:ef:51:ae:eb:a8:8a:56:
d9:a3:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:36 2026 by rpki-client