Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
File: VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft (raw, json)
Hash identifier: XpI2SFwdL8bdhXn7qWTsp4vM9OMzqVOCDLczAYY3guQ=
Subject key identifier: EF:CB:8A:8C:9A:5D:D4:7A:FB:E0:3C:CA:72:CC:AC:C7:E5:B8:C0:81
Authority key identifier: 54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
Certificate issuer: /CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Certificate serial: 019D37F70E1397EDB9278F3987F6C58AF3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
Manifest number: 65
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: 6x7BJ0F-meGk9fhXJNWGJnuegOw.roa (hash: ejX+MPtDK3gTtFG1432bC6M7t7QPNbrVRz6iGDt2Hfo=)
2: VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl (hash: zEDQ/FVSE8HA5zUAiqkMN2WBxcaKQg1wxT+fJOUkcUU=)
3: oTR56cyeKnrqB4eLr9IFRqGiB88.roa (hash: snlvASDIyvudTtl4HEkxIFNnIhgqIkS7EP587pwAfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0e:13:97:ed:b9:27:8f:39:87:f6:c5:8a:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=efcb8a8c9a5dd47afbe03cca72ccacc7e5b8c081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:5e:b6:74:f1:9a:f7:b6:c5:24:54:52:d6:
24:f3:e3:a6:37:fa:0c:5f:ce:21:ad:67:c4:e7:77:
59:b8:ba:3f:22:6f:7a:dc:04:10:56:75:54:39:8c:
87:fc:82:f5:0b:ac:04:d1:11:b9:67:ad:8b:bb:63:
f6:6e:09:0a:b5:66:20:19:b4:a4:2d:d5:09:6d:4d:
6b:23:59:58:fb:3c:c9:8d:ef:3c:37:5e:bc:dd:ea:
2d:fe:5b:4a:40:2d:bc:25:71:04:aa:fd:1c:8c:22:
92:43:e0:5f:4a:e4:2e:9c:eb:4c:f0:91:47:34:d5:
fa:29:43:77:76:68:9f:92:60:45:fb:b3:28:17:1b:
0d:d6:3f:3e:27:e1:10:98:97:7f:47:1b:6a:a6:48:
ca:a6:be:6d:21:48:c0:92:b0:ee:2f:b9:44:a8:78:
a6:05:d9:be:4a:dd:4a:ae:5a:15:00:55:3a:8d:0c:
a5:8b:b4:f3:dd:de:de:b0:e6:f9:2f:1a:27:4d:ab:
77:ac:ce:01:05:3d:99:56:be:5d:1a:56:7d:65:ff:
3b:15:41:4d:37:6b:a3:6a:cf:1c:e3:2a:31:07:91:
de:52:ca:eb:dc:82:9a:33:94:4f:ca:ab:ad:12:b4:
8a:3b:7b:b2:a9:b9:24:10:a2:f6:d4:34:2b:6d:70:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:8A:8C:9A:5D:D4:7A:FB:E0:3C:CA:72:CC:AC:C7:E5:B8:C0:81
X509v3 Authority Key Identifier:
keyid:54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:95:46:a7:75:33:5b:35:20:f9:09:80:66:3a:50:e4:b1:39:
7d:52:0d:f8:fd:ca:df:16:90:75:79:1a:9e:31:80:f1:c2:21:
42:4b:8a:33:05:b1:66:4d:1b:65:b7:6e:93:21:78:a9:98:17:
be:45:09:76:f1:9c:f0:44:40:d4:8d:16:f6:87:e1:68:33:d1:
84:17:26:71:9d:7f:b9:54:d4:f6:2b:02:5f:84:43:87:f2:36:
63:77:e4:86:8e:99:14:6a:b9:00:74:9d:d5:aa:99:29:77:fa:
2d:19:6e:b2:09:28:f8:3e:32:d1:dd:46:3b:e6:9f:ec:49:d2:
9c:a3:f0:86:3a:cf:be:85:18:46:d4:1f:46:63:44:76:2e:50:
a8:ff:1a:8b:70:dc:84:36:65:d9:55:01:ab:a0:be:7d:ff:4e:
cf:2e:c7:22:b1:c9:af:77:b1:8c:bd:e5:cd:27:9a:c6:63:f7:
75:f9:4e:0d:0e:cd:d9:66:3d:f8:f8:0b:fc:ef:47:d6:cb:4a:
3f:ea:b7:b5:f0:f8:2f:92:2c:98:66:66:4e:d7:36:40:fa:46:
26:27:2c:12:7c:db:93:c6:06:00:11:6a:8d:85:f4:34:a0:7f:
72:6a:93:d0:9b:b2:ef:8c:e7:69:78:00:ab:fb:77:f8:c0:bb:
ff:cb:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:14 2026 by rpki-client