Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier: qjKHY1QMYdyXXcqt93YK961FhF7iK3KY+nKrFE3Rhok=
Subject key identifier: 8A:54:5F:53:FC:AF:4C:66:CA:A4:F0:C2:5C:B7:11:E8:C7:4D:80:69
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial: 019CE59177497EC31720FA8C2A842AEB2E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number: 0352
Signing time: Fri 13 Mar 2026 05:00:41 +0000
Manifest this update: Fri 13 Mar 2026 05:00:41 +0000
Manifest next update: Sat 14 Mar 2026 05:00:41 +0000
Files and hashes: 1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: L2ChSF5jJQxoxnILHieQTasa4Qghj/OErnBzDNZzWEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:77:49:7e:c3:17:20:fa:8c:2a:84:2a:eb:2e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Validity
Not Before: Mar 13 05:00:41 2026 GMT
Not After : Mar 14 05:00:41 2026 GMT
Subject: CN=8a545f53fcaf4c66caa4f0c25cb711e8c74d8069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:89:3c:b7:93:03:8f:69:22:8e:da:df:9a:
d5:2d:69:29:ec:9a:04:4f:04:04:c5:ad:8f:8b:6a:
e6:bd:41:b4:4a:a4:07:ed:b6:2c:f4:a6:6d:45:70:
c7:4b:cf:8d:1e:25:b9:b0:33:69:a0:5f:a4:15:9f:
4e:a4:64:0c:f3:f9:6c:5a:27:bf:5b:9f:13:58:e8:
d0:f5:e6:4f:35:af:1d:13:97:1c:a8:19:d4:8f:1d:
62:57:da:64:59:c9:7e:1d:69:a9:89:c6:72:72:b9:
44:e9:1b:57:30:68:8d:a2:7c:60:a9:3f:48:09:a8:
d9:92:80:c9:57:17:64:8a:fa:a7:1b:a7:81:35:c3:
b3:af:7f:fa:e3:63:f8:c4:e9:f4:40:96:f6:7c:44:
98:e1:f4:d2:1a:b6:27:87:d5:ef:68:50:51:f9:e4:
01:13:e5:a6:6d:8d:21:46:1a:96:c8:b0:0f:dc:bc:
e3:96:1c:c1:d7:e5:3b:67:ca:b0:95:32:c8:a3:b9:
67:a9:fa:b4:78:2d:79:18:d7:ba:b5:08:a9:83:64:
59:2b:82:6a:8b:6e:d8:a0:2e:5e:ba:b3:55:1e:6a:
7a:24:0b:6b:a0:14:94:b4:ea:e7:5a:6c:fc:f7:7e:
43:31:a5:1e:b7:21:6f:28:78:3b:ec:4b:cd:a2:20:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:54:5F:53:FC:AF:4C:66:CA:A4:F0:C2:5C:B7:11:E8:C7:4D:80:69
X509v3 Authority Key Identifier:
keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cf:94:48:5b:a4:6d:db:2f:e0:e8:10:25:0c:c1:4a:b2:a2:
5a:08:64:2b:73:35:e4:a6:c7:7c:10:8a:6c:d5:4f:4c:37:a4:
29:ad:49:6d:c9:20:9c:ca:f5:ff:c6:e6:65:9c:aa:7e:01:12:
d1:a2:35:df:17:54:6d:55:60:04:aa:dc:88:73:e3:d3:25:94:
eb:26:c3:f9:9b:1a:26:c6:0d:91:c2:cb:99:bc:de:6b:53:0b:
02:e6:a5:74:72:09:81:6a:e7:1b:75:ae:03:43:9b:23:27:9c:
40:27:e9:c8:5f:55:e3:6a:27:92:18:39:ad:19:b8:3f:1a:ac:
34:a5:17:64:10:03:0a:41:9d:4d:1d:ad:1b:7b:9c:7a:0d:de:
69:15:1d:57:85:f0:fb:3b:6a:cf:5b:fa:1b:da:a6:1f:d0:51:
48:de:96:8f:ab:a3:3e:fc:61:a8:e0:c3:c8:4a:24:c2:1a:53:
c3:da:1d:73:32:8d:1f:5a:2b:8a:07:78:b6:a9:a3:4d:de:4b:
54:e4:1e:f3:4a:92:bd:78:b7:4e:e9:f8:ab:c6:50:ac:48:20:
10:f4:99:0a:c8:09:b0:08:00:a3:db:53:2a:c8:be:e4:6e:85:
2a:0c:d0:d1:6e:dc:db:88:9b:06:a7:d7:c4:5b:ce:c6:4c:e2:
f8:af:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:40 2026 by rpki-client