
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File: _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier: Num9l3nGmPXFaEO2lkeTgPYjTHfXn8hIboUiMdFk9WY=
Subject key identifier: E7:A4:09:AC:12:DB:CB:DF:38:48:95:49:07:E3:07:A4:50:DF:DE:5D
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial: 019D3AC1EBBC770BA244DE50FD4F0F624FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number: 022B
Signing time: Sun 29 Mar 2026 18:01:20 +0000
Manifest this update: Sun 29 Mar 2026 18:01:20 +0000
Manifest next update: Mon 30 Mar 2026 18:01:20 +0000
Files and hashes: 1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: rSM3HcC29bigFUcxu6gdwsEkCfNXJzI/Ji02d39dCbQ=)
2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:eb:bc:77:0b:a2:44:de:50:fd:4f:0f:62:4f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Validity
Not Before: Mar 29 18:01:20 2026 GMT
Not After : Mar 30 18:01:20 2026 GMT
Subject: CN=e7a409ac12dbcbdf3848954907e307a450dfde5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:79:d0:47:66:41:c6:8f:e6:63:25:49:c7:
0a:2b:a8:5b:d0:33:57:74:87:bd:8b:ca:95:9b:8f:
4b:e2:2d:72:bf:dd:17:7c:2f:46:d4:55:d2:2b:46:
80:a6:0b:17:76:fb:e4:13:5a:77:a9:0e:72:09:9a:
a0:09:d6:50:6c:65:a5:63:f3:2a:50:44:9e:e4:83:
c0:a4:92:9c:10:3f:80:5e:92:02:97:f9:24:94:8f:
77:37:b2:76:ce:23:04:6b:f6:6b:aa:1b:1e:a2:7e:
71:00:e2:90:fa:2f:fa:fe:a5:9a:07:d5:38:23:04:
7e:18:5c:9f:b7:b5:49:15:51:12:c8:a4:a5:8b:5e:
1b:59:05:da:ea:2f:eb:ae:6a:e9:b9:6a:64:89:c3:
40:47:c0:16:23:a6:50:f7:ac:a1:09:a0:f9:1c:65:
c1:74:2a:27:c6:06:c4:8e:81:68:ca:06:e0:42:4d:
b8:8e:91:4f:f9:1d:ec:f2:bd:97:42:1f:bd:d6:e7:
d8:59:f8:cc:e3:27:b1:b8:d2:5e:a1:77:64:4d:c9:
d8:0e:de:1a:a5:85:c7:d5:54:2a:8e:fe:54:2a:84:
fe:10:66:29:3d:03:f6:db:9f:9b:97:02:b7:53:b6:
2a:c7:80:f3:ee:b2:a9:3e:37:b9:5c:fb:02:dd:9d:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:09:AC:12:DB:CB:DF:38:48:95:49:07:E3:07:A4:50:DF:DE:5D
X509v3 Authority Key Identifier:
keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:0c:46:1d:12:54:b4:6e:02:01:a9:63:ee:60:a4:53:5a:
b1:04:73:ea:ae:79:fa:b0:77:65:c8:00:f3:2b:6f:81:1c:5d:
a8:21:0f:03:6b:80:c2:fc:63:a9:ae:cb:76:ef:84:6f:61:34:
a8:05:f3:31:b4:2a:e7:52:74:06:49:9a:53:ec:5d:a2:09:a6:
8b:6a:20:ea:f4:2b:c6:c3:27:b0:d5:cf:aa:e6:40:9f:cb:aa:
9b:ed:3c:93:f1:c7:31:72:3c:ce:89:32:0b:66:20:49:ef:b4:
a4:32:49:20:d4:99:29:76:ba:37:ce:28:1b:e5:fb:14:2e:8d:
55:dc:53:99:ac:f0:b5:06:7e:24:5d:f0:97:16:90:0e:71:d8:
c8:68:fc:6c:5b:8b:0b:b2:e6:0e:30:bf:5d:cd:f0:e1:a3:42:
80:23:dc:8e:bb:c2:31:ee:fc:9d:ff:38:26:d6:ef:30:e5:0d:
01:21:ff:0c:a8:e7:c2:08:7e:67:93:4f:af:bb:68:d3:f7:89:
fd:b4:fb:a9:05:6c:71:5a:78:e5:58:17:f4:dd:fb:63:e0:47:
dd:92:6a:83:14:a5:c3:b4:07:2e:e9:30:84:14:5b:16:c0:d7:
5e:27:90:40:40:42:d8:bd:de:64:67:e8:47:29:59:62:bc:08:
ae:e4:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:29 2026 by rpki-client