Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: ap1JLY/dgsHax/2GLHvUh1AWStqgWEirE/P5coh4b+o=
Subject key identifier: 9A:8C:7D:80:AE:46:8D:5A:2A:8E:C8:8C:63:F6:F2:81:C5:E5:B1:67
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019D382DEE064E4440DEC4FF18C99297A050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 08C0
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: MZeI3fx7Rs6vgWADfZ3b9x-IPrw.roa (hash: 88TFwnxWocrDYKNiW9RVsE1t/Ul4aE3DSPX0lbd55Bc=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: scHPDhVvK5+uKCZ2cCH1IVGA3K1HupBvjqYz6jZxl3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ee:06:4e:44:40:de:c4:ff:18:c9:92:97:a0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=9a8c7d80ae468d5a2a8ec88c63f6f281c5e5b167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:f0:7e:9a:bb:61:b6:c2:30:a5:c8:aa:48:
a8:e9:64:dd:2b:ec:a2:8b:a8:48:a5:63:90:0e:ea:
4c:d2:21:38:2c:8f:44:97:da:4f:15:fb:8a:7a:2b:
21:1d:46:98:3e:b5:47:f3:2c:5a:f8:31:db:d0:62:
d4:7d:df:8f:29:b1:b9:ac:f2:9e:86:2f:fb:29:3f:
86:61:99:2e:64:fb:05:78:bd:bb:58:6f:32:9f:b1:
e7:f9:65:24:b2:9e:7c:14:d8:d8:9b:62:31:55:33:
f4:1a:72:9f:b3:69:9f:d1:72:a5:f2:bc:26:31:2c:
1a:47:a9:a4:85:95:d2:90:27:33:38:1a:cf:17:41:
b8:70:f4:6f:8c:19:89:8e:c6:f6:b6:d0:ea:4d:11:
9c:82:97:21:68:e0:63:41:d3:f4:a6:43:4e:44:2a:
8b:33:58:62:39:1b:8f:f3:1c:60:d0:d4:04:7f:18:
2a:e5:b9:77:94:1f:f4:14:53:1c:da:fe:97:78:26:
f5:6e:b7:ed:55:94:3b:27:e7:95:04:e5:7d:c2:52:
7e:78:55:d0:e5:a7:90:f0:cc:53:1c:bc:93:27:8b:
bf:d4:4f:df:f6:c8:ad:53:5f:2f:bf:d0:50:74:ef:
9c:1a:8e:fc:eb:aa:dd:c8:19:ac:06:24:33:d3:c7:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:7D:80:AE:46:8D:5A:2A:8E:C8:8C:63:F6:F2:81:C5:E5:B1:67
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f8:ae:b8:10:ca:d6:17:52:d1:31:41:47:24:34:25:32:ff:
26:c8:13:dd:e9:11:d6:bf:f6:5a:76:f1:0e:a7:c0:9f:c9:b1:
0b:57:dd:2a:0e:53:88:62:66:1c:a6:d2:54:aa:9f:29:6a:7d:
43:0c:de:4c:ae:31:39:b6:40:42:fb:40:0c:73:21:f5:08:69:
07:dd:c6:e3:55:46:d6:e2:86:19:5d:35:5a:93:48:d0:af:64:
bf:20:1f:04:0f:cf:74:74:46:46:27:e8:ff:33:f8:05:a2:a3:
ca:f8:7d:59:0e:e4:a9:f1:8c:d2:7f:d9:f4:02:39:dd:fa:60:
67:14:f6:6e:09:91:ea:24:7b:36:4f:a3:fb:fd:f8:52:83:9b:
39:d6:f8:ca:99:b0:5d:a1:d5:31:25:55:e2:5f:65:45:f2:62:
eb:d9:bf:12:5c:c5:36:7d:04:8c:b0:85:aa:72:42:a3:c5:43:
8e:12:8d:00:5a:12:ed:c1:27:67:b5:35:1d:5f:b7:27:9f:c1:
20:b0:c6:65:aa:aa:c8:1b:0f:af:de:51:06:ba:09:60:c5:08:
c5:08:be:7d:ab:56:4d:b2:ba:73:b5:64:df:1a:99:d1:75:58:
c8:cf:6b:7b:c9:59:9c:42:5f:d3:dd:18:97:51:9b:0d:02:ea:
9a:79:07:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:27 2026 by rpki-client