Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
File: vrs3Cx2yDf2QiVQkesseCgUkCsE.mft (raw, json)
Hash identifier: NQaBc+wyTYyY2Vr7hwZdlfNEc1YRfEZlU2TIoio+LxE=
Subject key identifier: 6D:97:76:80:1B:42:15:FB:B8:14:68:4F:29:E5:A3:9E:71:65:82:A1
Authority key identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1
Certificate issuer: /CN=bebb370b1db20dfd908954247acb1e0a05240ac1
Certificate serial: 019D39413BB1BC85FE18B787E2D26D6026C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
Manifest number: 0171
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: 4n5Ua4aTaAunDOOW01P0fMrY7k0.roa (hash: WNNgqxjBcUK1ZKvwmBjdbFYyCDwsWtboY/v6WqR+zss=)
2: vrs3Cx2yDf2QiVQkesseCgUkCsE.crl (hash: 02oshjTVAe4I78txYPOo+w+b26b/PSncow31vMPtPWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3b:b1:bc:85:fe:18:b7:87:e2:d2:6d:60:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebb370b1db20dfd908954247acb1e0a05240ac1
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=6d9776801b4215fbb814684f29e5a39e716582a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:b6:ac:ed:3d:94:62:66:54:51:52:76:d2:
ae:f8:63:2d:34:23:a0:0a:b8:bd:5f:b6:e0:08:2b:
ed:65:08:60:ae:db:01:07:ce:ce:cd:18:0f:4b:59:
d9:f2:ea:50:67:62:ea:64:b7:6e:ef:46:b1:5f:17:
00:ea:62:ec:71:2b:c1:d0:ca:4f:2f:37:d2:c3:e5:
96:13:07:a8:b5:76:10:30:51:8e:8b:2f:99:d9:45:
85:31:1b:5b:f4:48:ab:e5:79:3e:4f:3d:ed:c5:22:
fe:ff:5a:60:cf:73:de:ba:fc:ee:12:7c:37:3c:11:
af:db:99:10:91:f9:9f:38:71:17:91:2a:50:f7:4b:
43:b0:67:17:90:2d:97:76:50:54:95:45:d2:28:7a:
90:b3:19:0e:2a:08:64:4a:64:e4:aa:26:70:7c:ee:
ac:70:85:65:ec:db:2d:0a:52:a9:14:7c:05:ae:2d:
f8:8a:ab:b3:7a:fe:db:f3:2d:f4:22:1a:45:cb:27:
0f:6f:5a:03:83:82:79:d1:82:5c:37:dc:5e:4d:d0:
5d:21:59:7f:af:83:56:c2:e5:75:80:00:94:e9:68:
e1:a2:cf:97:b7:2d:75:4b:77:86:ed:cd:79:bc:b8:
40:96:ed:7d:fa:38:ef:10:fc:83:04:19:1b:75:15:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:76:80:1B:42:15:FB:B8:14:68:4F:29:E5:A3:9E:71:65:82:A1
X509v3 Authority Key Identifier:
keyid:BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b8:f9:43:99:65:96:ba:17:6c:be:9d:97:c3:b7:06:c5:c4:
0a:e9:c7:d2:f3:0e:1a:a8:71:60:b7:da:69:a0:f2:c1:33:f3:
2a:5d:85:e1:42:b9:8f:b9:23:58:6a:79:27:b0:eb:ad:94:b1:
55:ac:f8:92:22:ac:87:3e:fd:a8:0b:eb:c4:3d:fd:ff:36:2a:
9e:9c:e6:1a:a2:f4:ec:aa:e8:15:db:a8:8c:51:38:8a:be:dc:
be:93:2d:30:a3:37:9b:fc:eb:22:e9:64:94:d8:4e:de:f6:bf:
4b:dd:07:e4:d7:e8:eb:32:9d:da:27:e0:6d:9d:78:58:9b:75:
1a:67:62:53:7c:a7:f3:9a:d6:aa:73:35:3a:51:68:bf:f9:ce:
76:42:f4:31:40:64:e0:69:14:57:20:44:03:02:5d:58:5d:5a:
37:a5:56:d0:67:81:c3:ac:f1:e3:21:45:a2:11:5e:b0:ab:2b:
7e:81:e0:e0:7c:a5:12:62:ab:fb:1c:c6:b0:ef:96:50:b2:87:
2b:a8:d3:d9:1d:3e:bd:1b:46:20:e6:86:69:57:4b:b5:8f:65:
79:1e:a9:7f:d2:54:53:7d:4e:88:88:94:50:5d:89:cb:60:05:
4b:80:00:06:2e:59:62:1c:3b:4e:47:1d:9e:06:65:90:b4:f5:
05:4a:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:18 2026 by rpki-client