Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier: RyizV1DYY7IOmDJElMVTIlGKx3uwObyS2QPWMxkICRU=
Subject key identifier: 96:BF:BB:55:D6:06:95:93:CA:0C:0D:AD:BF:DA:AD:E3:97:F8:A4:94
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial: 019D38D387AF2BC852068D71E136B3A1AD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:20 +0000
Manifest this update: Sun 29 Mar 2026 09:01:20 +0000
Manifest next update: Mon 30 Mar 2026 09:01:20 +0000
Files and hashes: 1: 9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa (hash: 0t8+O9jLtAo/1H+w73CAi6kuuXrnIZhfR+LlCnD8Ix8=)
2: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: TiqgAO4evIlT60ja2EvOGZXPHmHUgYN2hAmL+NoHOOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:87:af:2b:c8:52:06:8d:71:e1:36:b3:a1:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Validity
Not Before: Mar 29 09:01:20 2026 GMT
Not After : Mar 30 09:01:20 2026 GMT
Subject: CN=96bfbb55d6069593ca0c0dadbfdaade397f8a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:41:62:2f:e8:2d:44:34:4d:9d:db:72:89:
61:59:f8:f7:f4:bd:25:39:d9:bd:57:b8:2f:33:00:
64:19:ee:82:8a:e6:5b:ad:f6:0e:4b:a3:53:b6:5c:
8b:76:fe:8a:5a:77:18:66:65:bd:71:9b:01:a8:8b:
5c:89:10:47:0e:d2:3f:10:39:1c:c8:c9:ac:b3:94:
e5:d3:ae:48:d6:af:39:9c:13:16:cb:dc:69:b8:db:
ff:bd:d5:d8:93:3f:fd:00:a9:ee:83:a0:52:ec:84:
77:3f:5d:4e:f7:71:fe:8c:4e:37:5a:34:f5:24:70:
9a:14:0a:5a:5c:fa:50:49:fd:51:34:36:5d:35:8b:
60:da:dc:f0:6c:b8:b3:fc:30:af:2e:a0:27:4e:bf:
1c:ee:53:90:06:3f:b9:47:f7:2f:b8:cb:60:f7:03:
c8:7d:57:1d:f9:ba:61:72:49:e2:e4:61:d2:a5:70:
a0:87:0f:aa:ea:a7:7c:79:17:c3:62:c4:7f:0d:89:
b6:70:6b:32:4f:71:f1:5d:f7:b9:85:5b:50:bc:3e:
44:c1:c4:75:85:ac:b7:d1:04:77:3d:67:f0:c4:24:
4e:63:c0:f7:fb:ca:48:2a:8b:2a:d1:eb:0d:a1:0d:
6b:c0:e0:7d:90:a5:90:9d:04:fa:68:7d:34:86:fa:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:BB:55:D6:06:95:93:CA:0C:0D:AD:BF:DA:AD:E3:97:F8:A4:94
X509v3 Authority Key Identifier:
keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f7:f6:a8:97:e9:4a:0e:30:49:5e:93:be:ab:dd:8a:a1:32:
d5:3e:95:9b:af:03:98:35:fa:26:da:77:53:b6:70:0a:44:8f:
4a:83:22:da:fd:3d:38:92:ca:1a:c2:8d:10:b7:9c:88:51:85:
f4:bd:ad:ce:f2:ee:92:0b:56:92:bd:d6:15:85:56:a2:bd:2b:
39:50:14:44:f5:37:3c:61:d1:60:33:65:cc:00:f5:86:ef:88:
08:a5:f0:31:5f:aa:96:d6:15:62:5b:b1:d3:d6:96:69:b9:4a:
4d:fe:40:0f:5b:19:a1:96:4a:03:3a:e9:0d:2e:2e:1a:7f:41:
2d:b6:a7:78:d8:c3:37:6d:8e:6f:3f:d1:2c:69:4c:81:6c:21:
09:09:96:96:60:e2:ac:19:9f:da:34:3f:c4:18:d6:f6:9c:dd:
ea:c8:a9:10:58:70:cf:e9:05:14:c5:72:a4:01:27:88:43:7f:
7b:7e:f4:8a:b9:e5:d4:a3:48:b6:32:5f:5e:71:c4:14:c2:fc:
7f:00:89:cf:32:e3:63:86:47:d8:37:ff:c7:b2:bd:a0:41:17:
f0:bf:65:07:6f:90:0f:86:2b:ab:e0:9d:6a:ec:d7:f4:d2:21:
a7:72:dd:67:8c:44:1e:70:ba:60:31:a8:e4:55:bf:2b:68:a2:
4d:e8:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:05 2026 by rpki-client