Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: kflthNKSTvIfqM1GQngThvZT8Aguqgi6WtqJ91mxpzs=
Subject key identifier: 0D:CF:8C:7F:C6:68:9C:92:17:0B:D8:84:E7:9D:68:5E:C9:7C:22:78
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019CECDD66AE3D098F47AA4494D29F2EA013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 15AF
Signing time: Sat 14 Mar 2026 15:00:58 +0000
Manifest this update: Sat 14 Mar 2026 15:00:58 +0000
Manifest next update: Sun 15 Mar 2026 15:00:58 +0000
Files and hashes: 1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: jFearZTXp9yzV+CS6GcG2DaWt13hcBf6IXcD3mUTxZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:66:ae:3d:09:8f:47:aa:44:94:d2:9f:2e:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Mar 14 15:00:58 2026 GMT
Not After : Mar 15 15:00:58 2026 GMT
Subject: CN=0dcf8c7fc6689c92170bd884e79d685ec97c2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:55:69:b8:8e:98:ca:b6:d4:56:1b:fd:16:
a4:4a:2d:8b:75:22:3a:67:a4:da:80:77:e3:bb:e6:
26:7d:47:f4:bd:80:6e:35:c9:b0:93:40:56:bc:cd:
4e:a3:a9:cb:02:a7:84:98:8c:17:b0:37:85:24:ee:
c0:42:7b:3c:0e:d2:ed:6a:b0:8e:cc:3e:28:bf:9a:
9a:1f:0e:3c:1a:19:11:ff:18:8f:b4:9f:4e:92:5f:
2f:de:ad:00:24:a3:e3:a8:12:bd:f2:a0:01:4e:da:
cc:17:fc:bc:d8:b1:68:48:34:f3:b0:b3:54:9e:58:
76:65:91:b4:a9:d0:1e:3e:b2:19:d7:92:ff:15:5e:
4e:59:65:27:09:ed:b0:66:8d:25:bd:8d:6f:3f:28:
fb:d4:52:02:bd:02:36:00:d2:17:4d:47:f5:eb:db:
f6:5b:0a:93:f8:ab:88:11:63:81:1a:91:40:77:7e:
f3:1f:01:f3:45:71:8b:df:d8:ce:2b:e7:1c:da:a8:
97:dc:40:e0:12:bb:f2:05:e3:6a:fa:12:6f:b8:e4:
ee:1e:33:41:a4:d6:24:cd:17:6b:02:6a:4f:c1:ff:
2f:c5:bd:36:6a:4f:ca:a2:c7:09:52:d2:fd:14:d6:
e2:17:e8:b5:e2:cd:7f:35:13:bd:76:56:d3:80:87:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:8C:7F:C6:68:9C:92:17:0B:D8:84:E7:9D:68:5E:C9:7C:22:78
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:87:6a:34:f0:4f:bb:8c:16:62:b8:14:b6:a1:ea:f8:1a:
82:d7:53:61:b2:eb:8e:39:c6:4b:0a:59:bc:9f:55:3d:da:f2:
ff:74:c4:5f:3b:76:6a:57:a6:e1:01:6b:77:cf:5f:a3:55:91:
ff:5e:25:10:2c:52:9f:b3:bf:cf:1c:66:ae:d5:e1:a7:8d:75:
d5:b7:16:2f:70:86:ac:7f:a5:a4:eb:d1:0e:98:cf:c2:7a:07:
09:95:2b:f3:38:f7:30:12:60:6b:94:e5:2a:ce:42:24:d4:ff:
86:fc:9f:b4:b9:32:4f:c3:a1:e2:09:76:51:44:d7:70:d4:8e:
4e:b2:2e:48:74:e0:d4:99:88:a1:2b:f6:75:fa:1d:e7:12:cd:
88:a1:24:05:2f:6e:d1:0a:53:6d:de:1e:25:98:4d:50:9c:7f:
02:55:df:b5:b9:88:91:e0:93:0b:6f:47:e6:3a:e4:31:50:30:
ff:1b:e2:52:b6:74:01:1a:a0:4e:ca:97:5b:76:35:bb:88:a7:
b9:c6:8c:1d:cd:2b:0c:9a:fd:13:c0:cc:30:b8:c4:23:c5:8b:
8e:57:4e:f8:f3:3a:de:f1:59:84:28:1d:d0:72:b0:f1:da:f3:
00:a1:98:07:80:2e:4c:6d:5e:f3:cf:57:8d:78:9e:c6:6e:50:
c8:8d:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:11 2026 by rpki-client