Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: EaTbiMVR4OsTRYz1lkSFpCw2ln14YTbVCgx+93xFdK8=
Subject key identifier: 4B:B0:2D:72:2A:82:C6:75:CE:3A:38:72:65:10:1E:6A:B3:95:3D:5E
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019D39098608588A1251C58122B356743F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: hBfOWNz8aB-uKsUJCSf2XACnmmc.roa (hash: 5Y5YLQETtQumGJBT9gG5Cwrp98Yqiy17fOUfKzajf7c=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: dufbtUUz7SoeZKJMfIgLLbDHKpHxK0hCRI7wcsdcWvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:86:08:58:8a:12:51:c5:81:22:b3:56:74:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=4bb02d722a82c675ce3a387265101e6ab3953d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:02:4f:f0:3e:58:3f:b0:45:01:4e:56:9d:a7:
f3:5f:6c:77:ba:ac:3b:1b:d6:77:1f:9f:e3:70:d7:
f9:43:3d:ff:2b:69:ae:2e:67:d9:d2:58:38:95:34:
90:f0:e9:4c:44:12:dc:74:35:97:33:17:ff:41:1f:
a0:98:93:1c:f6:5d:59:ef:86:50:68:6d:fd:5c:9d:
f9:d0:94:e2:da:33:30:1c:37:17:f2:6a:de:1e:5c:
61:69:db:3b:1e:a8:7d:d4:fe:06:19:c6:9b:c1:d0:
1a:6b:0a:39:28:cb:f5:6b:22:c0:e3:f2:64:da:13:
10:a6:c0:49:7c:99:76:9e:48:bf:55:73:91:18:39:
71:9c:83:29:66:be:9a:ef:b2:6e:fd:3d:c6:ed:23:
dd:1e:dd:ba:08:a8:d0:44:b0:b5:12:07:b7:70:64:
4b:ce:ad:79:5b:24:f4:d5:f3:98:ed:0c:3b:f8:6b:
f9:86:e3:08:99:13:55:a4:69:b6:4b:75:92:76:ad:
33:2b:40:35:e2:ff:90:bb:26:ac:5f:40:ee:a3:9b:
e8:9b:63:46:a7:1f:1f:4f:04:06:4e:f6:55:51:ae:
a4:8d:59:2a:e6:aa:c9:e1:e9:f3:c6:54:d5:8d:e5:
00:aa:94:b4:38:4e:f6:69:36:70:c3:09:8f:b6:16:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:2D:72:2A:82:C6:75:CE:3A:38:72:65:10:1E:6A:B3:95:3D:5E
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b9:1f:41:49:d1:56:3a:71:72:09:ad:f3:f7:16:e5:75:a2:
c1:d2:9a:58:f2:69:8b:44:71:05:33:07:9f:55:4b:ea:41:15:
f8:a3:83:1d:36:fd:8d:8d:03:26:a3:39:a9:76:71:77:04:02:
67:7a:af:e2:e3:fc:3b:e8:98:f6:65:16:17:ae:1a:2a:dc:8b:
a2:58:ef:12:a5:ef:2b:e6:16:22:a6:7b:be:4a:e0:c4:b8:59:
04:5a:1c:8d:13:bc:e5:e4:74:7e:62:bc:6f:b1:81:97:6a:c8:
56:e2:22:a7:4e:43:ea:80:e7:49:a2:03:7d:65:68:5c:61:33:
7f:b0:a5:65:b9:5c:1c:72:7e:ac:1e:60:95:46:b5:1e:44:ff:
a8:50:ed:04:6e:84:d6:32:9a:f4:a4:74:5b:05:9a:5a:13:53:
ff:44:a4:6a:7b:75:33:98:46:9c:41:99:13:64:08:8d:47:76:
79:1d:a5:e2:70:ae:2d:14:c2:d8:30:74:cf:0c:d8:07:9a:fd:
ef:f2:b1:bb:ea:86:94:15:ae:cc:2d:0b:00:5a:e9:d7:b9:9c:
53:1d:b4:47:7e:d8:3d:90:49:6a:28:f2:2d:b4:96:b0:8c:fc:
7b:57:84:6f:3c:8f:37:a5:b6:95:2b:b8:28:47:e0:74:6b:53:
16:da:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:20 2026 by rpki-client