Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: xrSaFLASFcNe2gMI0SlIFT4t/5CIn0SmspZaQ+8MN64=
Subject key identifier: 1B:CC:C6:82:A2:A6:0F:A5:24:6F:87:60:52:66:3A:8D:29:97:6E:11
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 019CFDD187C1EC0E10D37751200FE9038758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 1875
Signing time: Tue 17 Mar 2026 22:01:33 +0000
Manifest this update: Tue 17 Mar 2026 22:01:33 +0000
Manifest next update: Wed 18 Mar 2026 22:01:33 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: OfWy98NmU1HhlxTCXKzx5acSMGGHnEzOp9emAStJjGs=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:d1:87:c1:ec:0e:10:d3:77:51:20:0f:e9:03:87:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Mar 17 22:01:33 2026 GMT
Not After : Mar 18 22:01:33 2026 GMT
Subject: CN=1bccc682a2a60fa5246f876052663a8d29976e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:5c:93:d6:26:2c:dd:ec:3a:7f:56:e1:5c:
b7:35:95:8a:d5:6d:6b:b2:0d:21:0b:58:9e:49:48:
6f:6c:06:43:cc:fd:2c:a6:4f:93:6c:31:b0:55:05:
8b:82:af:ff:96:11:2e:75:9e:5c:66:4b:9d:79:c2:
8a:03:0b:32:b6:45:4e:80:15:bc:99:64:47:fa:83:
ff:99:55:8d:c9:a0:c5:8e:f7:a4:4f:02:81:3f:32:
86:9b:3d:61:7e:bf:b0:ef:75:6e:12:ac:92:33:a7:
5d:e7:be:0a:7e:1f:e9:ba:70:ec:52:38:ea:1c:8f:
b5:97:08:19:8a:f7:ba:30:0f:67:52:cb:4f:8e:c3:
6a:52:8c:7a:4c:b7:f4:85:ff:3e:3c:33:9a:57:48:
54:77:f7:f2:d4:16:77:f9:43:c4:52:3a:39:13:99:
8a:9d:be:d1:c1:68:02:39:f3:2e:36:30:7b:83:7f:
22:d6:ee:b8:e2:84:b9:19:45:aa:db:06:2e:4e:62:
40:64:a0:c7:c8:00:3b:5c:76:c7:e3:8c:fa:a5:93:
f8:39:1e:c5:03:ab:2a:b9:15:4e:6d:44:77:e9:a9:
0c:48:e5:8f:19:2e:a5:49:38:07:e6:e8:68:8f:0b:
93:86:ba:d9:27:4e:ff:95:ca:00:f4:0e:88:03:e6:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CC:C6:82:A2:A6:0F:A5:24:6F:87:60:52:66:3A:8D:29:97:6E:11
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a1:08:d2:bb:2c:65:68:06:d4:11:e6:53:19:2c:24:95:0b:
7a:73:30:af:b7:7a:83:af:20:a0:d0:a9:19:34:47:39:00:d3:
7f:2a:c5:68:7b:e0:45:57:59:24:ef:e7:5b:f3:e2:61:66:03:
71:3e:bb:5a:61:26:5e:a3:b2:03:6e:73:1e:3c:fc:53:eb:06:
73:e6:7c:bb:d3:53:2c:0b:15:d2:fe:a3:82:00:63:e7:ac:fd:
47:9b:54:65:0b:da:8f:5b:78:e8:d5:c7:f9:74:63:a5:f8:a1:
89:6d:b9:c4:3c:bc:3c:bb:7d:69:af:84:51:14:67:a9:10:59:
f4:6d:2d:1d:1b:b5:a8:40:ac:a8:bb:e5:fb:f3:89:5e:d0:b7:
83:11:33:e7:88:1a:e3:41:df:77:a9:29:ce:d3:91:f9:77:65:
ff:18:11:d5:c3:6c:a0:d5:46:6a:c5:f1:1c:84:28:8b:1a:49:
e5:d2:fc:16:dd:c8:a4:41:d2:a9:0a:9f:6e:86:c6:6f:a4:5b:
ab:5f:0b:6f:b2:e9:f0:58:ff:07:11:40:5f:e1:dc:3c:b7:8b:
6c:ad:eb:53:bb:ac:b4:21:ec:d6:c6:0d:6a:4a:62:0d:41:c0:
35:d2:5e:33:c5:d2:05:ac:68:10:34:0c:31:40:fd:69:f9:da:
d9:83:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 05:02:18 2026 by rpki-client