Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier: x4NNA+rZT8ZKhhwIaOe+uH7y1TtVGc4jVedklPf5G64=
Subject key identifier: 14:C1:B3:F2:46:D0:5D:87:17:DC:4C:3A:D6:8A:9C:D3:3E:44:92:5E
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 019D37F70E14FCC80C54A7A5E7246F0EADA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number: 084D
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: TiOuXl2Q6wOQFGF7jg66qaSdky8.roa (hash: wT30EzG4ZVMuETn0p/EI2klu+YujqvMu+EM2q0pIlpI=)
2: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: sbBD74vjDM3gKRAqL5YeJBsRcPmYlTjkOWajJ8fkd+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0e:14:fc:c8:0c:54:a7:a5:e7:24:6f:0e:ad:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=14c1b3f246d05d8717dc4c3ad68a9cd33e44925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:f8:ef:8c:0c:ec:ed:d1:4c:79:1a:f4:24:
e3:42:e7:9a:57:ad:a3:40:61:48:13:f5:a3:ea:a0:
8d:8f:75:47:79:f4:9c:69:60:be:3a:fa:7e:c4:a3:
43:eb:33:b1:fb:64:18:d2:82:b4:31:f9:74:7a:c8:
1d:4f:db:85:c9:58:30:ef:64:6b:42:cf:13:81:51:
1d:a0:4a:76:8a:6a:ac:eb:8a:6a:2a:68:23:9c:17:
b9:b0:13:d7:17:83:71:0d:b4:ff:af:3a:8e:6c:a6:
3e:94:64:22:2b:ca:fd:4d:dd:dd:f3:c8:ca:b1:b4:
ad:c1:4f:60:cc:7f:bc:a4:f5:11:50:df:17:84:c1:
00:25:b5:f5:8c:cb:7d:ed:cb:fc:ac:62:0e:17:d6:
ad:d9:69:8d:ed:a0:d5:c4:4a:b7:4e:03:d2:da:ee:
d2:6b:dc:1c:ef:69:08:29:05:67:b4:d4:57:5e:d7:
96:49:b9:f2:a2:33:ea:00:36:11:4a:f1:c7:6d:de:
e5:a9:a4:4c:bc:49:b4:28:ef:f2:6c:d2:69:12:62:
4d:75:0d:58:99:1b:9a:31:52:73:fa:43:71:2c:aa:
4e:20:4c:0f:03:fa:72:79:ad:2b:9f:10:64:fc:2c:
2f:af:ff:ae:99:d0:12:2f:bf:67:04:02:db:98:8d:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:B3:F2:46:D0:5D:87:17:DC:4C:3A:D6:8A:9C:D3:3E:44:92:5E
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e5:cc:52:2f:8e:ef:6a:2e:af:af:fc:88:af:d5:14:e2:95:
9a:03:97:d2:26:69:c3:83:e2:68:74:52:0d:0c:7b:a0:3a:ce:
cd:f1:e7:08:52:44:f0:b9:63:9a:c6:7a:be:86:8b:aa:0f:19:
c9:91:b0:59:66:03:90:da:a8:9a:65:9c:47:80:48:50:99:e2:
2b:0f:51:6f:65:39:4e:9b:af:01:4d:10:11:7a:12:41:1e:f9:
6d:8c:d8:56:4e:23:c3:41:9a:63:f6:17:27:12:d8:25:f8:ce:
6c:55:21:ba:5a:6a:af:6b:70:5f:47:b1:9d:d6:64:e7:2c:d9:
b4:5f:e0:ef:65:f9:cc:d4:1c:c4:dd:7a:9a:99:7d:61:68:49:
a4:59:d1:c5:6a:48:99:be:2b:d2:a2:ea:b2:65:22:87:07:5e:
30:b4:a8:ba:6b:41:af:86:75:48:61:71:33:d5:ae:f1:88:58:
90:6d:87:49:cc:08:fb:97:96:cc:51:4f:eb:0b:a0:d8:ab:4b:
16:a8:60:49:d5:32:57:4d:77:3b:0f:e7:4c:04:8e:6e:fa:b1:
4b:c3:a8:b7:ae:5f:fa:4f:a3:35:85:4c:52:de:52:5f:a3:51:
14:70:01:df:31:b8:ef:67:d7:4f:aa:d8:84:43:83:6c:9f:16:
f6:3e:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:16 2026 by rpki-client