Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: cjoPlRFOdU87j2rHGVg67oMXaUvHwWAGqAHIwCultI0=
Subject key identifier: 4E:94:86:3A:1A:6A:02:9F:B5:F7:8C:18:3F:4D:F7:A8:C9:0C:36:07
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019CCA513C4B765668BC1F0E743DA8297B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1859
Signing time: Sat 07 Mar 2026 22:00:47 +0000
Manifest this update: Sat 07 Mar 2026 22:00:47 +0000
Manifest next update: Sun 08 Mar 2026 22:00:47 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: WShGpdCuC6nNSeP4i3pExBnzN4LdrOM6an7DpOl+YYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:51:3c:4b:76:56:68:bc:1f:0e:74:3d:a8:29:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Mar 7 22:00:47 2026 GMT
Not After : Mar 8 22:00:47 2026 GMT
Subject: CN=4e94863a1a6a029fb5f78c183f4df7a8c90c3607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:3c:9a:b7:e4:82:cd:f1:ae:02:67:94:4c:
79:4d:ef:6a:df:c1:c3:e8:9c:2d:65:c0:df:25:18:
20:d5:67:7f:26:14:ce:e6:84:8a:0a:66:04:de:ba:
56:4c:29:59:cc:a5:59:3e:5a:a9:df:41:ae:ef:c0:
69:8e:46:3e:d5:c2:df:ca:5b:af:c4:ae:0c:b8:e0:
d0:e0:79:4c:83:08:26:d9:ca:15:94:37:9f:85:9c:
11:97:56:50:78:c8:ca:f8:d6:7d:3d:f6:3c:2f:13:
da:cb:00:c9:ff:88:fd:70:ed:c2:aa:3d:6c:4b:bb:
fa:97:ab:a5:c5:9f:4b:8f:40:10:79:6f:ce:22:ae:
8e:73:7a:ca:87:44:ea:64:4b:8a:d6:47:95:3a:a6:
ad:f8:13:73:2f:08:24:d8:1e:a1:23:e6:79:0a:7e:
f8:e0:d6:79:88:94:aa:fd:41:31:d5:cc:f5:48:25:
74:71:59:c4:a9:d0:a9:6e:ed:43:d9:d7:23:74:d5:
b7:b5:64:1e:d9:c6:b9:ba:d3:bc:24:e8:05:15:74:
d0:89:1c:d5:7a:19:d5:e1:d2:be:00:2b:00:8d:63:
67:7c:41:26:86:a5:b6:75:e9:78:79:fe:40:03:9f:
d2:1f:67:59:66:db:1c:fb:1c:34:37:b0:dd:81:c5:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:86:3A:1A:6A:02:9F:B5:F7:8C:18:3F:4D:F7:A8:C9:0C:36:07
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5c:93:5e:6e:b8:aa:33:e3:1c:f7:51:c9:02:fa:8e:20:12:
7a:ab:aa:d3:72:90:e3:65:48:9c:9d:90:7c:1a:73:ec:0b:08:
25:ca:7b:d9:40:4f:9d:82:00:bd:19:85:10:99:f3:28:09:5c:
ae:26:25:29:e4:52:5d:d7:51:fd:5a:7b:11:37:ff:b2:aa:7c:
6b:e5:e1:45:db:a4:a2:c5:c5:d7:67:ac:c5:c8:6a:b1:62:9a:
86:d2:fa:f1:da:38:10:11:55:1b:fb:92:48:84:38:4d:a0:ff:
82:ba:c7:a6:3e:78:13:e5:61:c6:19:d7:f5:85:7b:71:ae:3e:
60:e4:5f:93:f1:86:00:83:97:b2:40:1b:69:9c:a4:bd:ad:b7:
ab:44:da:f9:67:6f:13:37:a4:56:7e:9a:26:5f:95:33:ef:ac:
2b:12:bb:40:b2:df:54:00:d7:b7:1b:df:b6:16:ad:94:f5:46:
1f:fc:59:80:09:39:c1:0a:82:77:ea:50:b7:63:5c:b9:18:c4:
7a:1e:c2:86:c3:7b:13:24:8c:97:06:bd:a6:d1:a1:b4:e2:bc:
9b:39:df:62:0e:b2:f1:97:d6:d2:4b:d7:6e:34:11:49:ce:15:
62:21:e0:a5:c4:94:1a:1e:b1:cf:00:62:3e:62:4f:43:a9:9c:
b1:c1:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:59:14 2026 by rpki-client