Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File: Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier: FDrucEN05m2z3aq7R6UVUs2dhlcnWPtpWzutu3SGW3A=
Subject key identifier: 32:C1:D9:DF:FA:75:00:FB:5A:D8:1A:32:EB:96:65:1E:DB:70:1A:02
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 019D3563EF6A6CA4606712B38142B9CEB9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number: 05DF
Signing time: Sat 28 Mar 2026 17:00:34 +0000
Manifest this update: Sat 28 Mar 2026 17:00:34 +0000
Manifest next update: Sun 29 Mar 2026 17:00:34 +0000
Files and hashes: 1: PTGFtop819nPl01gzng3ViiDuyQ.roa (hash: MsdxqZiMITKpL1yel8PLmuFTlbpZRDQiLbP60VZOUKg=)
2: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: qW96g7sKKGUIdGj4sLpzRdgaLwYzj8EOWXbxfXwZe5E=)
3: uOBfT9dJzAeP5L062tP2bPLjN00.roa (hash: YXcsdR0InWSwo1kicGcvoiEoVtpo1uOcvHTUXcUr4mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:63:ef:6a:6c:a4:60:67:12:b3:81:42:b9:ce:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Mar 28 17:00:34 2026 GMT
Not After : Mar 29 17:00:34 2026 GMT
Subject: CN=32c1d9dffa7500fb5ad81a32eb96651edb701a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:e4:50:d9:f9:b2:3b:71:75:31:93:0d:57:
ce:7a:b5:17:8c:c0:b0:74:8a:f8:76:d3:75:6d:5b:
d0:01:fd:15:e1:e6:7e:69:b9:78:e6:81:5d:d7:a2:
8e:1c:f7:ba:d5:97:76:fa:bd:cf:c4:7c:b6:0a:ea:
6d:d9:6f:ca:ef:e4:02:89:58:b8:e8:eb:35:a7:31:
7c:96:af:2e:0c:5e:a5:49:76:67:b5:f6:b5:0b:6c:
35:3f:60:5e:cd:56:5e:33:ee:d9:dd:2a:29:ca:da:
1d:7e:3c:5e:db:ac:7f:23:19:33:06:26:bf:d7:cb:
b1:ab:72:f1:b6:d8:f2:46:8f:78:28:b2:56:b9:84:
ef:d6:ec:35:a2:ed:c1:0a:e9:2f:2a:55:72:56:e3:
68:17:ee:2f:4e:85:fd:62:ed:30:84:b6:11:80:62:
d9:b2:26:a4:53:56:eb:4a:bd:40:be:b8:53:59:d9:
96:d6:89:d4:65:59:cb:1d:81:9d:91:cd:c9:be:0a:
74:cd:17:5d:da:c4:e9:db:50:1d:6d:91:38:2f:ed:
06:ce:c8:93:d6:5a:6e:99:a9:aa:32:85:a5:18:bb:
66:9a:69:a4:9b:2a:10:d1:31:b6:53:ac:82:70:b1:
b8:cb:71:95:3c:26:36:62:0c:2d:55:12:c7:c9:6e:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:D9:DF:FA:75:00:FB:5A:D8:1A:32:EB:96:65:1E:DB:70:1A:02
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:45:1a:0a:ae:77:06:02:b5:71:5a:9a:ed:6d:21:a1:c8:3f:
85:5f:fe:6c:2a:a7:20:36:b8:1a:98:b5:47:9a:5d:92:51:8a:
b7:95:85:57:56:1e:26:cc:a0:88:98:fc:12:20:62:c7:b2:fc:
2d:2e:3f:4c:db:1c:1f:de:bf:90:00:39:9c:98:31:b6:0c:25:
5c:10:15:2e:4b:48:66:38:24:51:00:0e:a7:52:5c:f1:8c:b5:
b2:94:ea:1f:1a:ff:c5:2d:3d:cd:8a:88:1c:62:d0:d9:b9:6a:
79:77:5a:29:7f:08:65:d4:c3:6b:c5:62:2f:57:4b:21:d0:05:
55:12:67:13:71:e1:44:27:2c:2b:48:d0:da:84:72:ce:b6:46:
3e:24:1b:89:fd:83:bd:fd:0e:ff:04:31:68:79:c9:8a:5c:09:
1f:91:b4:da:03:e0:d6:35:8a:db:bb:80:58:8e:db:ea:0d:90:
4d:12:b7:56:f6:96:98:ee:fb:c4:13:ef:84:ae:f8:98:6c:d7:
42:41:dc:4e:a8:02:e6:64:f2:f4:b2:e0:33:f4:b3:e2:85:01:
8f:ce:e3:01:5e:b0:04:6e:2f:5f:65:24:23:74:17:81:58:af:
07:71:64:05:30:2d:d1:9b:bf:af:d4:83:30:36:88:7e:2e:38:
55:e6:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:02:04 2026 by rpki-client