Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier: xaB4066gWeBdSYwC9NjTON3jaKibwleXxIwQut9ezA4=
Subject key identifier: 6F:DB:44:4B:25:42:AD:5C:73:AC:DD:B2:CF:1C:E1:7B:90:51:A8:FB
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 019D37C06090CB0A1E88CDDEE2A74CD3135B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number: 06D0
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: Eu41_P7LziP7tbN3y79d5Zld-yA.roa (hash: AfrnyrK9VXdcG7fWfl7gD7MMFiGqvdrIsV969hWJlbc=)
2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: DkC2UpknX92qz8WVHCNoJCPEjCd8J6+T/Ape/bRlDpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:60:90:cb:0a:1e:88:cd:de:e2:a7:4c:d3:13:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=6fdb444b2542ad5c73acddb2cf1ce17b9051a8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:e0:21:58:e0:8d:c7:e6:39:22:2c:17:f2:
70:4f:c1:bf:b2:33:b3:3b:b7:9d:6b:d1:8e:bf:35:
97:d3:11:78:56:ee:85:28:9b:b2:5a:e3:fd:85:0e:
fe:e2:00:ec:30:2d:78:a1:33:f7:7b:e6:9a:ae:04:
00:d0:e5:17:f8:09:29:0e:89:07:f1:6d:63:38:2c:
b7:94:93:c7:0d:24:6d:fb:6c:4f:2e:ea:aa:11:cc:
10:49:41:15:4c:1e:5f:2a:84:37:7d:92:ec:ee:4f:
5a:85:7b:c3:e1:f4:2f:ca:6e:3f:be:78:b4:42:5e:
07:33:29:b3:fd:2d:a4:05:36:cb:f7:28:89:56:53:
13:7c:c3:4a:cf:00:ef:87:a1:4a:05:d5:e6:e8:55:
6c:d0:36:7e:94:20:0d:01:d2:84:be:44:20:ef:7a:
50:1e:3f:ee:a0:a9:b1:50:65:3c:11:db:7e:2f:fb:
13:e1:64:cd:aa:66:a4:b7:8a:e3:4e:69:65:5a:b2:
e1:03:79:83:5d:a2:0d:a8:36:da:f6:49:3a:e3:36:
6d:72:e4:f3:ee:59:5d:1e:6d:c0:6b:fe:e6:b9:dd:
07:21:fb:c5:ca:bb:d8:88:26:ba:cc:cd:35:08:5c:
01:13:fa:73:f4:c9:18:1a:e6:cf:c9:c8:8d:5a:90:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:44:4B:25:42:AD:5C:73:AC:DD:B2:CF:1C:E1:7B:90:51:A8:FB
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c4:ac:8c:12:b5:12:d1:c3:0c:51:0e:53:01:01:7e:e3:a8:
33:59:0f:0d:59:d1:f6:34:c1:27:e8:67:2b:3f:94:ca:bb:b5:
fb:de:91:be:fa:29:34:84:f0:e9:79:c0:e0:30:94:51:5c:c4:
77:50:e8:b3:0f:13:22:86:79:ff:ed:53:62:b5:47:df:50:83:
08:b5:64:17:fa:d6:a8:73:41:9a:ad:1e:e4:36:f2:ee:f6:64:
c0:fa:8b:03:84:54:ba:5a:7e:bb:f9:a6:86:77:47:d4:3a:52:
9f:45:33:f5:ed:e1:47:f4:f1:8a:19:71:ef:c6:68:99:0f:3e:
92:c0:a2:0d:80:48:31:73:3f:43:0c:a0:39:0e:e9:34:b8:13:
da:2d:01:aa:df:2c:1e:3d:9d:05:e4:e0:2c:51:65:ee:52:cd:
39:12:5a:a5:ad:6d:5c:7c:4e:0f:d1:2e:86:34:2d:8a:88:32:
da:e7:eb:2e:5b:9c:5c:ea:49:b7:ec:6e:18:4e:f8:23:12:47:
03:c2:bb:72:08:16:0f:c0:cf:a9:bc:a3:37:f7:d2:41:da:32:
e3:56:f9:b3:f9:f1:b4:bd:5d:d9:e8:6a:b9:c5:f9:2b:4f:7f:
77:45:42:f9:4a:b9:bf:de:24:10:9e:e9:9e:64:b6:94:81:2b:
e4:94:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:37 2026 by rpki-client