Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: GENXMt/4i0bS1eYWK4rf2T44NbIOIIYxtAW3tP0xBmg=
Subject key identifier: 71:8F:BD:8C:E3:12:9C:FF:91:FF:09:36:31:1F:89:64:78:7D:3F:67
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 019D37C024E39013A50E88C0DA0E0506D469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 07CB
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: Xph0RsZpLZZwUat0Vn4-hFseSpE.roa (hash: Ar8fpwj2OAj2ln4fKTYWjYcHa5qD0YkXiV2fq2oOV5g=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: YPULiBruvrDjR8pYpk47VKSYiEqcl+utJvW0PXuY8HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:24:e3:90:13:a5:0e:88:c0:da:0e:05:06:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=718fbd8ce3129cff91ff0936311f8964787d3f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:cd:f4:70:d3:14:f4:fb:37:21:69:0f:50:
33:b4:6d:9b:31:4d:47:dd:07:80:2c:98:62:cb:b6:
f1:4f:78:a1:b5:35:a0:a8:b3:ce:40:bf:9d:b6:05:
94:19:fe:23:73:d0:da:37:e6:cb:a8:d0:81:bc:62:
14:0d:e3:90:87:de:c6:60:5c:e4:6a:9b:0d:c7:cb:
78:93:67:84:d2:f2:7d:3f:31:51:5f:a5:ad:84:0f:
6b:45:1c:15:85:f3:01:fe:d2:6f:55:0e:e5:79:ce:
2d:00:2e:6d:af:03:3e:69:91:7d:11:04:c6:ee:8e:
27:c9:23:e4:8f:6a:d6:c1:7a:2d:95:2e:42:dd:9f:
3b:3c:6f:7d:6e:0b:c2:69:97:5e:f9:20:f1:fa:1a:
c6:ff:0e:53:47:32:1c:1b:4e:d0:7e:0f:28:6e:70:
ef:ed:a5:6a:4b:ec:e7:07:fc:8e:6d:10:37:5a:5b:
de:ea:ce:1a:9f:d5:56:a0:7d:f4:f6:07:ff:58:85:
d3:1b:76:e8:17:f5:b1:cf:ae:b4:f0:3a:88:df:7e:
da:8f:f9:4c:b7:63:2a:c8:6d:28:bb:c4:0c:c9:5e:
58:99:2c:5c:9f:94:c9:05:73:d3:14:43:da:75:23:
d8:24:c2:a7:d8:08:8d:87:20:29:16:4e:48:34:ac:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:BD:8C:E3:12:9C:FF:91:FF:09:36:31:1F:89:64:78:7D:3F:67
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:12:5a:0f:b0:4e:85:c7:bd:65:64:a8:77:8a:e8:59:e3:43:
a8:95:e3:66:26:e4:6c:20:9b:55:41:02:ce:f7:15:33:5f:ce:
03:fc:85:d3:40:58:6c:66:fd:bd:1f:f5:22:ed:d1:2e:79:d4:
74:6f:e2:bb:a5:f4:c3:7d:ff:ea:fc:a2:c0:ff:de:c3:cb:da:
77:56:a3:53:22:24:11:bc:59:b0:c1:dd:35:89:c0:3a:5e:b3:
79:30:3d:83:30:a5:c9:60:9b:36:ce:d1:a7:d1:b9:7d:10:ec:
b0:45:d6:f7:a6:b3:b5:33:7f:b6:05:9a:b2:7f:d2:2d:6b:cb:
9c:4d:16:a5:29:14:f2:99:f4:3e:80:d2:e9:ad:4c:6a:e5:d1:
6d:a8:e4:1d:33:71:82:31:28:3d:a5:8b:15:6f:3b:15:54:5d:
d5:8f:ba:30:20:a4:9a:b3:60:8c:f4:56:c5:e8:c8:6b:28:5c:
c7:22:7a:3f:10:e7:48:e8:81:44:d1:29:99:af:be:b5:a8:66:
ff:28:8e:72:31:5c:f0:d9:8d:56:85:04:6e:31:1a:42:ab:97:
9e:65:9f:18:6e:16:40:7c:a7:34:22:d7:76:6a:72:f2:26:b8:
ae:fe:c8:f1:48:d6:ca:ab:cf:85:d1:c7:5d:de:19:4c:5d:2b:
69:0c:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:45 2026 by rpki-client