Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: eq2i2CP+Ufs4C0ubFovmhOIfWoFBXOAnT3LtquW7BZM=
Subject key identifier: ED:2B:A2:7C:B3:06:29:F8:D6:BF:A8:F7:E4:76:5C:D5:06:65:A8:A4
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019D382DDD0EA1EF182528935F69A044EFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0BB8
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: H3M5NG6qATyXDMSmQWqyW68WEw1ZYLCFrMlhCN2XMMg=)
3: kqmzm016eJM-jijUIFSE8gE6p00.roa (hash: gAMMlg6BzmaFhWE/fM7vHF/m24ObBw3vzLwmqGTTkPI=)
4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dd:0e:a1:ef:18:25:28:93:5f:69:a0:44:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=ed2ba27cb30629f8d6bfa8f7e4765cd50665a8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:47:b1:ba:20:7f:2d:cd:e0:1e:fe:a2:24:
17:31:2a:71:fb:ca:ed:67:1b:bd:80:cc:3d:be:66:
3a:f4:2b:dd:8c:df:8a:f6:bc:ae:8d:cd:0b:9a:93:
d4:ce:12:e1:e7:1a:be:2b:77:72:a8:18:71:ee:a6:
5a:75:e9:44:2b:45:7f:ef:64:2d:65:d6:35:5d:03:
7d:c1:76:0a:36:73:20:2b:87:1d:dd:6d:0d:db:b4:
a9:fe:be:4b:31:e0:62:aa:83:1f:66:c4:cd:b5:19:
a5:82:e5:66:0d:d0:91:ab:3d:64:4e:c0:11:00:6f:
29:49:07:4e:90:54:82:48:5f:16:81:00:a8:78:66:
3a:a7:31:9c:89:87:ab:f1:56:a9:ff:9b:79:53:63:
0a:77:25:71:07:f4:4a:7e:ff:90:f6:08:30:2c:f5:
96:d8:c3:2e:70:33:31:fb:c1:33:7a:9e:90:33:cf:
8d:f7:c5:b6:2a:c3:40:c6:d6:c8:47:c2:6c:33:c8:
80:d7:bd:5e:a2:b0:09:df:0e:89:5b:aa:cb:69:66:
ef:e0:0a:47:a5:1a:da:80:bc:a8:e8:1c:5a:cb:1b:
65:31:04:c9:a1:70:1d:f3:91:86:49:d3:8e:db:94:
34:39:3a:50:2d:f7:df:ec:b5:dc:48:93:ca:e6:5e:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2B:A2:7C:B3:06:29:F8:D6:BF:A8:F7:E4:76:5C:D5:06:65:A8:A4
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b7:d1:13:16:be:b1:e9:31:0c:84:f0:ee:d6:ac:31:59:a2:
c7:aa:27:e8:37:fb:c7:9c:6f:b9:26:c1:81:a6:0b:f3:aa:f4:
90:ba:7d:b0:a2:f1:a0:b1:b0:64:fd:b4:fe:8a:8c:45:39:63:
26:ca:79:6b:bc:80:25:e5:87:b7:d2:2f:30:09:ec:9d:43:91:
02:e0:c0:f3:75:f2:b7:5a:a0:08:33:39:18:c7:12:47:35:02:
99:f1:32:39:17:3f:3d:ec:6e:3f:18:75:49:65:ed:ce:55:d1:
9a:ae:31:d3:df:28:5a:1c:4c:8e:5a:ff:d1:5c:15:7e:83:6a:
3f:f7:a0:ca:85:70:d3:3f:8b:54:73:2f:59:a9:a1:66:3b:f9:
49:3a:7e:da:ab:ee:23:70:9e:7f:57:df:49:a4:61:f6:89:30:
08:32:48:f6:6a:b1:09:50:7e:9d:50:eb:c1:5c:96:ed:41:86:
d0:b0:5d:94:b5:39:2f:c5:27:63:8d:71:b8:5a:ba:7b:86:38:
8d:8c:b9:53:2f:aa:60:a6:e9:0c:ea:1c:5e:ee:c1:32:ee:70:
e1:b6:13:88:bd:a3:5b:8f:2c:5e:3f:60:bc:b1:01:2c:12:20:
34:f6:88:14:bd:04:dc:dd:29:e4:cf:02:81:c6:85:f4:df:39:
d0:22:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client