Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: T+ylKN9zEOB9c/eCfP4C3Sv+Kmypz4kdNYpNmXZx2ZU=
Subject key identifier: 38:72:22:54:A6:44:12:F2:12:BE:DD:35:37:3A:C7:FA:47:FF:F7:3C
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019D389C2CE8CA9828F99C527821E22D1EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 054B
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: Tv0Tv8OugK8Yd7g/SVj15zr+v4u2tDSPkEc4yvHYYnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2c:e8:ca:98:28:f9:9c:52:78:21:e2:2d:1e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=38722254a64412f212bedd35373ac7fa47fff73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:12:ac:f3:30:b4:3b:ec:7f:60:77:9d:11:
22:d9:c2:6e:04:d9:b8:4a:1d:06:60:70:ef:17:78:
d9:ee:03:69:90:21:bb:23:2b:6e:7b:6c:42:25:40:
dc:24:d8:ca:0b:3d:e8:2d:38:9e:d3:23:2b:65:8a:
30:6b:6b:33:c5:98:95:04:75:a7:88:41:31:b1:b0:
d6:47:85:d3:10:21:23:ee:b9:56:da:9f:f0:34:d5:
a9:7d:b8:44:cb:b6:83:fa:cc:8e:ac:9c:e0:71:35:
93:92:b0:bc:89:cb:f2:e8:91:f9:e8:27:d1:65:75:
03:0b:81:3a:7a:bb:53:63:98:b6:01:db:8d:38:c8:
77:62:06:8b:97:94:40:aa:1c:82:69:1d:37:d0:fd:
5b:3e:0c:bb:fe:c6:23:97:51:3d:c6:d7:10:06:56:
58:8a:0a:b8:4a:d8:cf:e3:7b:14:7f:73:a6:51:dd:
d2:75:ae:b8:4d:68:af:85:a5:80:66:bf:f5:d8:d7:
28:1b:78:9d:be:c7:a2:22:d2:d8:d3:9f:be:55:bf:
d0:4b:7e:2e:01:44:63:cc:bb:45:6a:d9:1e:f8:1d:
58:b0:60:a5:19:fb:3b:2a:7c:c2:b8:34:e6:6a:76:
86:80:fc:af:05:90:1a:ef:87:fa:81:e5:7a:50:18:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:22:54:A6:44:12:F2:12:BE:DD:35:37:3A:C7:FA:47:FF:F7:3C
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9d:4b:22:04:64:12:f0:e4:90:f2:05:a7:09:92:21:7d:9a:
82:50:7c:a5:c4:bc:8e:de:ca:0b:62:f5:aa:a0:e7:69:14:97:
ac:de:b4:ba:84:f8:41:2f:6e:0a:03:4d:09:8b:d1:af:67:79:
45:2f:ec:af:d2:9a:0c:6e:4e:e1:b3:0a:00:6a:dc:da:e4:da:
7f:99:d4:74:8e:25:43:4c:94:bc:14:30:45:1e:d0:b0:3b:fe:
e8:b6:c6:04:35:f0:85:78:3e:91:ba:d4:ca:2f:ea:28:d8:d8:
74:7a:10:ab:52:22:d5:a2:21:64:45:d6:79:23:6f:50:27:80:
c6:ad:7e:17:0e:9e:cb:5e:f5:0b:96:8d:25:c1:00:87:fa:d1:
45:d6:17:c4:0f:a4:65:8d:fa:54:0d:46:f2:a7:a8:fc:6f:15:
8a:e7:05:dc:1c:3a:8c:83:96:76:66:24:ad:e3:e1:ab:ac:4c:
7a:8b:01:4c:32:f9:2d:3c:d1:75:a2:9a:01:35:36:b9:9a:c7:
df:80:a9:98:17:6c:fe:59:72:18:5e:48:e5:2d:cb:ae:e6:52:
97:7b:5c:ff:b8:fc:66:c7:4e:5e:3b:23:54:4c:81:6b:98:00:
6c:b9:7d:53:d2:1b:a2:c6:ac:d7:cb:8e:1f:29:08:c2:66:6e:
ab:b2:84:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:55 2026 by rpki-client