Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: 9tEfgaFpDfMWD2HJuBdbOIg3SmF31CJ3qImIys6B1t8=
Subject key identifier: 6B:F0:BC:FC:B9:CB:98:C4:13:CA:D6:B0:82:B5:B4:47:DE:23:1F:9C
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019D389C4BBCEEC497D389CFF027E423C777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 090B
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: DHTdl2+cCrxid8mFskXYzPc6ldZ4MmJRd8ayXg2/kao=)
3: xd89191APrZOUVHG3uZycN3SZ0g.roa (hash: IG6q5I2/G1oD/WZjTUVQ36euEC71avJGwrJIV9eTw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4b:bc:ee:c4:97:d3:89:cf:f0:27:e4:23:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=6bf0bcfcb9cb98c413cad6b082b5b447de231f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:e0:3a:8c:26:8d:9d:dd:ef:be:99:4a:e8:
3d:61:98:cb:04:e8:9e:71:b6:8b:de:b2:25:14:78:
af:4f:19:e5:fa:af:67:22:68:fa:4a:88:37:a7:61:
55:5b:ce:46:51:5a:9e:bf:27:ca:b2:d0:aa:28:20:
f6:be:a5:4c:13:96:e4:c1:85:69:1f:89:58:9b:d8:
1d:0d:c0:3f:f0:5c:c5:13:21:22:95:b6:1c:23:54:
3f:ee:e5:9f:9c:79:12:57:9d:e2:16:f7:1f:58:bd:
9b:c6:fe:cf:27:99:9c:24:ca:46:a7:0a:04:af:e9:
a3:0a:4b:db:98:5e:57:80:18:f8:05:b6:be:74:0b:
5d:08:40:80:e3:09:03:96:48:7d:e7:a6:09:e9:11:
f6:28:89:9a:cd:37:a3:d6:49:f3:bb:de:43:2f:9b:
9f:11:1f:16:6a:0c:9e:6a:31:62:6a:ac:f3:4d:aa:
f2:fc:63:b6:5d:47:c7:9d:25:b2:2c:26:b9:c3:85:
81:2c:2e:36:f0:52:e5:83:1c:df:60:22:4f:1f:e3:
f4:63:ec:1c:79:12:6b:88:ce:9b:be:63:4f:03:26:
e2:2c:f6:cc:29:d3:27:50:b9:e4:a0:6b:dc:c5:16:
3d:e6:05:d2:81:1d:b3:97:2f:33:bd:ab:f0:8d:cc:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F0:BC:FC:B9:CB:98:C4:13:CA:D6:B0:82:B5:B4:47:DE:23:1F:9C
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7c:d4:1d:65:48:44:cf:3a:63:a3:98:e5:db:20:82:d7:dc:
00:df:cc:e6:0e:e6:aa:3d:fa:ac:41:98:3c:99:0f:ed:3f:e7:
ac:64:ca:b9:52:ad:f3:57:55:c8:60:50:c2:50:29:77:be:8d:
fd:35:75:8f:da:b9:6f:9b:c9:5d:81:c0:16:d4:7d:9f:97:9a:
c7:4b:a7:7b:be:33:e7:e6:ef:49:2d:3b:be:ce:dd:e9:03:1b:
36:c5:07:44:bf:5f:03:df:16:a9:a8:95:14:23:00:2b:13:3b:
fa:eb:07:fd:04:cd:2a:50:cf:b2:88:05:8c:77:da:9b:f3:59:
96:c4:28:d0:ab:4c:8d:43:a5:33:4c:75:bf:72:fb:f5:1b:c7:
02:e9:c2:fb:a5:8c:e9:19:f9:c1:38:de:38:7a:9e:97:61:cc:
2b:4a:45:83:23:6f:72:20:30:bf:44:d6:7b:13:3f:56:c8:6c:
f5:66:c0:b2:47:13:5a:89:59:2b:27:e5:14:0a:c2:8c:aa:0a:
60:06:ac:82:33:3c:9e:70:4a:2d:a2:16:c0:d8:82:27:e4:8f:
57:1b:4e:ee:9f:3a:60:63:71:d3:86:1d:b0:9d:4d:03:cf:31:
78:0e:78:68:ae:5e:b3:c6:17:c1:5e:4a:fb:dd:8a:cc:64:72:
15:b8:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:11 2026 by rpki-client