Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
File: VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json)
Hash identifier: /Q6cGE8bQ5lSU4W/+TOyCZnK7mCvIqAfCYqcdEyUT18=
Subject key identifier: 40:DC:12:28:AD:F7:4A:E6:5E:26:54:CC:20:9D:8F:EB:69:3F:E5:5F
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019D3608A285A1363256039AE12042E99DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
Manifest number: 020E
Signing time: Sat 28 Mar 2026 20:00:28 +0000
Manifest this update: Sat 28 Mar 2026 20:00:28 +0000
Manifest next update: Sun 29 Mar 2026 20:00:28 +0000
Files and hashes: 1: H6jqDEJRJpVr93f9cwyj02eDJQY.roa (hash: mWxd5ho3il9qT+YkcgFPJftqIG0LtGdKvw/h7Kypl5g=)
2: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: mLdXkauE7hbwiEq23XMJwA6T0Bw/mm7sS5lqhwyxZKQ=)
3: YzpO8VmPqRTAiscSwEyGgcQi0Dk.roa (hash: 6HjwbvCZxiS3ilZKcje0H+9ezmbZKBAXqwTXh4igaqk=)
4: uUGoEjdfbBo-jF6U1dwSdm-Vmro.roa (hash: zwHsLDdeMuR8VmDXVFWRldbxh4F8eqhJM3STNDr64Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:08:a2:85:a1:36:32:56:03:9a:e1:20:42:e9:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Mar 28 20:00:28 2026 GMT
Not After : Mar 29 20:00:28 2026 GMT
Subject: CN=40dc1228adf74ae65e2654cc209d8feb693fe55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:2e:4a:40:f6:9e:fd:b4:ee:3b:5f:25:c4:
33:38:d1:aa:3f:d6:86:c5:cb:30:a8:0e:7c:7d:b8:
40:65:e7:c5:49:3a:3e:e6:85:07:2b:ef:e5:f9:da:
9a:55:11:2d:39:a1:b4:a8:aa:f3:3c:9e:15:fa:36:
47:ea:d1:dc:44:a7:17:6f:80:b3:b7:48:17:1e:ba:
d8:25:82:40:e1:02:c6:1f:b8:b4:f9:9e:19:e6:6c:
87:4f:64:48:cd:c2:1b:86:c7:24:71:fe:8d:8b:c7:
64:51:25:fe:46:68:7e:03:c7:6f:97:2b:a3:c3:a3:
6e:8f:c6:eb:9e:3e:72:51:30:3a:09:f2:c3:d6:63:
a6:c2:51:dd:92:00:34:7c:82:2a:1c:ae:8c:10:05:
00:cd:20:ec:c2:15:40:85:82:79:6d:e3:43:bb:b5:
1a:5e:83:a1:48:c6:fe:bc:6f:45:22:df:41:66:1c:
ae:b1:71:17:cd:97:c1:f5:e2:78:f3:da:21:a4:15:
c1:92:38:77:9c:80:ab:4b:36:f0:2e:90:24:ae:7a:
ed:9f:4e:fa:9f:13:f6:e5:25:70:26:7b:be:f6:13:
4f:d5:15:53:c1:9f:a7:eb:5e:7e:66:97:29:f0:aa:
9c:d9:22:27:9c:96:8c:fb:c3:ce:ec:31:0d:b4:07:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:12:28:AD:F7:4A:E6:5E:26:54:CC:20:9D:8F:EB:69:3F:E5:5F
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:9b:db:b8:5d:38:c1:fc:d2:57:a6:1c:10:13:9f:32:85:
e3:b7:3a:f4:ca:16:26:93:7e:9f:8b:13:c8:7b:a5:e2:45:43:
9d:e9:ef:76:a9:85:0b:80:06:6c:35:93:fa:19:a0:a2:eb:48:
53:50:a1:c2:4c:0c:91:da:53:6c:d4:02:f3:1c:af:c3:dd:f0:
8d:a3:10:a4:52:73:3d:db:1d:a6:16:51:95:7d:6d:23:99:a6:
2c:0e:72:4c:28:89:ab:0e:0c:f0:fc:08:41:ed:c4:fb:d7:ec:
2e:6f:47:86:f1:c5:2e:9d:12:75:56:88:a9:a0:a7:b0:18:c9:
e9:83:99:e9:48:2f:e0:ab:61:bb:50:6f:21:e6:09:8d:1b:4f:
e6:15:45:2f:34:d9:3f:9c:26:fb:df:03:3d:bf:c2:b6:d1:cd:
32:ca:e3:59:01:bf:52:09:96:32:29:c8:97:15:cf:f7:38:29:
b8:5d:5a:c8:56:8c:d2:55:56:90:70:91:c1:d1:a3:a3:de:95:
41:cd:ba:6a:14:93:f6:6a:93:bb:b6:e8:87:5d:fa:03:c5:16:
8f:22:63:91:6f:bc:11:82:81:f5:9e:a5:a6:d6:47:6f:42:9b:
96:d3:94:2b:b6:5d:00:4b:dd:13:1a:5c:0b:4b:35:74:42:9d:
51:87:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 01:52:39 2026 by rpki-client