Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: O2jVPQrhKM6FId6nPQN4jjSygui91G1wefkDnjTt6/k=
Subject key identifier: 75:37:48:0E:BB:F4:72:70:01:9A:89:D5:1C:B3:A1:C7:D5:B5:35:D5
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 019D3789369295B264651CAB35B9A84AED6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 0AB8
Signing time: Sun 29 Mar 2026 03:00:32 +0000
Manifest this update: Sun 29 Mar 2026 03:00:32 +0000
Manifest next update: Mon 30 Mar 2026 03:00:32 +0000
Files and hashes: 1: p9RxkxEDg3zhOEBmGSkuGg-Qp1g.roa (hash: Pzg3LR/Kx5u+U4xpCocEsCBgxEMmX7bZWZgvVSP3EX8=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: dvbJGWjDVZWNEoDqpExO9XgOhsgeemwMcdDejjpXoE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:36:92:95:b2:64:65:1c:ab:35:b9:a8:4a:ed:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Mar 29 03:00:32 2026 GMT
Not After : Mar 30 03:00:32 2026 GMT
Subject: CN=7537480ebbf47270019a89d51cb3a1c7d5b535d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:c5:c0:04:76:a7:0f:67:5a:1e:ff:7d:4e:
77:4b:28:6f:17:c1:38:b6:14:08:42:a1:82:fd:f0:
b0:c0:02:4f:77:ef:b9:84:da:dc:e5:22:ed:21:c1:
e0:b5:b0:90:eb:0d:e5:dd:b9:86:ae:fc:26:f6:d2:
b9:70:2e:50:10:8b:22:00:a9:4c:aa:ac:09:4a:e3:
5c:a1:4a:be:24:45:70:20:78:f3:ac:12:80:89:bd:
13:04:81:46:1f:81:25:43:6e:a7:1f:c6:93:6c:3f:
64:15:fc:d5:cf:0d:2f:a6:ae:23:21:45:1e:ed:d8:
17:f0:b3:08:8d:99:a7:d4:9b:c4:67:a7:bc:d9:00:
b3:c8:28:b2:73:77:b9:05:d7:09:19:be:8e:3d:ca:
86:06:e0:28:dc:ce:df:b7:96:aa:2d:9f:87:52:bf:
09:20:91:3e:31:80:f5:01:4a:b9:e6:01:ca:36:1a:
a9:86:06:ae:fb:ce:82:51:1b:5f:92:b5:bb:0c:03:
ce:ac:ca:78:81:5c:2d:ad:e5:36:10:e0:f7:4a:f2:
eb:8b:20:24:54:11:06:ff:a1:52:6e:22:77:86:d3:
87:a4:b4:05:fb:65:d9:75:bb:55:48:7b:84:e4:88:
2b:d6:a9:90:b1:a7:02:53:73:b4:28:0f:17:e9:31:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:48:0E:BB:F4:72:70:01:9A:89:D5:1C:B3:A1:C7:D5:B5:35:D5
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:82:1f:e3:1d:43:4c:ec:65:12:1a:27:09:e7:cc:11:f0:
0c:65:25:ab:48:7e:a7:5a:97:b5:15:98:b3:d2:24:72:2f:01:
75:92:de:12:16:0d:f2:f6:37:7f:8d:3d:9a:37:6b:4f:69:a0:
d0:bd:f1:a2:de:b1:5f:59:92:99:3b:d3:70:21:b0:22:c1:83:
91:d4:78:49:68:43:41:40:97:ed:54:d8:7e:1c:60:dc:63:62:
11:7c:95:2c:ae:5a:30:08:ee:ea:3b:4f:73:f2:db:b7:4b:7b:
03:5c:e4:30:03:3e:69:e8:94:b0:26:a3:ff:3d:16:c9:db:b9:
3b:a7:82:c6:87:40:0d:b6:26:d0:e1:b8:50:8d:6e:e2:22:fa:
39:76:b2:d4:c3:cb:75:3e:c2:57:c5:2d:5e:42:4d:37:8c:ba:
3a:ca:4b:bd:11:eb:d5:d6:4b:39:66:e8:8e:f5:77:75:df:61:
9e:c8:83:9a:a5:6c:9f:03:2a:00:aa:5c:0a:38:81:81:62:ba:
19:eb:56:cc:d8:54:06:d4:fa:73:ce:d2:52:84:d9:bb:6e:0a:
60:37:24:91:1e:78:31:d4:94:55:65:d7:00:90:55:b8:60:57:
81:7a:75:c9:0b:de:5b:92:d7:25:a0:7b:25:3a:a5:f0:26:05:
e7:08:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:52 2026 by rpki-client