Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: bgTjQi9InR4H7+2h9L3a1jQewxAHvVPPp4ptvD/RQHY=
Subject key identifier: 02:11:EF:FF:44:07:95:05:A6:7D:AD:BE:B0:C8:77:9E:69:7D:1E:D8
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 019D38D34A61F372154FD0A6AD41EAD3B9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 0D0E
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: LgEKkY0W7bK54eTCJn+Q2AvMXotrhvJ1kf1kQFzqr44=)
2: cc8BNFaMVlbaSTGI8x6HmWHwtwY.roa (hash: WhsxgLT9TP0uFAV72UNKZ0OIf3Wuow/e/T5+vO3eQUw=)
3: hj9vrZtu_ptlT9holTDhc3lmO9I.roa (hash: HyRkrnYbKZroL4ZELZRBl7Cqf0iZoQ21yLkLhmG2ZnI=)
4: zATzhpg9xiU_0_8udzecrn-BFdM.roa (hash: LXOXPntIpCX+wDiB9sHExrI1VhXJrNUwhw9OhSaFlRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4a:61:f3:72:15:4f:d0:a6:ad:41:ea:d3:b9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=0211efff44079505a67dadbeb0c8779e697d1ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:81:c1:bb:9a:42:21:06:a0:64:e6:e0:79:
e5:f5:31:ff:ba:3a:61:4c:fc:b7:a5:7a:ae:aa:c5:
4c:a4:fa:0f:2c:77:04:37:e6:86:72:39:55:b7:3d:
2f:ca:61:4d:48:41:50:10:55:79:3c:2b:3f:5d:14:
b7:1f:09:81:c4:89:ee:d3:88:84:6b:6d:1a:f3:6b:
b0:9b:ce:57:bc:3f:48:ce:4a:ff:16:fb:cc:5e:3d:
6f:28:70:d4:c7:5a:b4:33:c8:15:f5:9f:60:62:38:
99:0a:fd:5f:ba:7d:c7:86:53:c7:8d:0c:99:12:0b:
f8:98:e0:1e:a6:2d:ed:52:91:d8:de:46:6f:c1:13:
53:9c:2c:2e:fd:f4:2d:b0:02:6c:ae:86:8c:4c:74:
29:ac:1a:8b:f5:ad:98:07:67:b2:14:d6:c6:6d:71:
16:b7:2e:90:c6:8b:b5:10:78:33:8b:ec:a1:88:e0:
3d:88:b3:e3:cc:5a:2f:24:47:31:70:eb:0f:30:2d:
83:cc:af:ef:2b:c2:32:75:4f:a0:42:8e:9a:da:e1:
67:af:32:ca:33:ee:9a:30:9a:1c:6a:a5:cf:95:3a:
24:65:3b:34:45:a1:3d:95:9e:1a:33:23:04:39:49:
0b:54:c8:5f:84:75:70:d9:6f:f8:84:3f:f8:0a:50:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:EF:FF:44:07:95:05:A6:7D:AD:BE:B0:C8:77:9E:69:7D:1E:D8
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:4e:b5:3a:a9:9f:c1:c4:b7:9f:15:7f:84:99:ca:6c:31:
7d:24:03:5d:a0:99:84:d4:c3:e7:aa:1c:0d:76:38:24:dd:9c:
72:1a:8d:d6:d4:f1:4c:cc:67:7b:03:00:d2:e8:a9:1e:cd:99:
d4:3a:f5:c6:e0:99:61:80:cc:43:a2:95:28:f4:82:da:36:fc:
a8:f7:1d:9b:ce:da:70:73:7a:ec:1e:af:38:ed:bd:5a:63:3b:
eb:d2:ea:3b:eb:e1:bf:55:2f:f2:91:ca:06:2e:ca:1d:f1:02:
cf:af:25:f1:92:99:dd:92:70:62:13:61:e4:6e:60:f3:64:f2:
da:e4:07:cc:19:af:e6:bc:0f:a3:2a:13:be:b2:02:d6:6f:16:
eb:46:ca:f2:36:7c:45:18:ee:46:10:83:85:28:a0:23:f5:52:
a6:8a:bf:ef:84:fa:df:76:07:49:2f:8a:94:8d:23:7c:a5:ef:
aa:e0:74:08:68:0e:02:1c:4e:82:c0:8e:80:d2:0a:f0:ee:40:
ca:fc:d0:c5:49:5f:d0:e9:3e:e0:be:44:f2:5d:42:95:7b:e7:
a5:9a:a1:d5:bb:b3:94:31:44:8e:35:eb:a4:43:68:81:ba:60:
4a:eb:38:ba:7c:ad:dc:60:b1:8d:3e:0d:3a:7b:ff:8a:c5:9c:
ae:87:19:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400ph83IVT9CmrUHq07n1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3
MDliZmUwHhcNMjYwMzI5MDkwMTA0WhcNMjYwMzMwMDkwMTA0WjAzMTEwLwYDVQQD
EygwMjExZWZmZjQ0MDc5NTA1YTY3ZGFkYmViMGM4Nzc5ZTY5N2QxZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4qBwbuaQiEGoGTm4Hnl9TH/ujph
TPy3pXquqsVMpPoPLHcEN+aGcjlVtz0vymFNSEFQEFV5PCs/XRS3HwmBxInu04iE
a20a82uwm85XvD9Izkr/FvvMXj1vKHDUx1q0M8gV9Z9gYjiZCv1fun3HhlPHjQyZ
Egv4mOAepi3tUpHY3kZvwRNTnCwu/fQtsAJsroaMTHQprBqL9a2YB2eyFNbGbXEW
ty6Qxou1EHgzi+yhiOA9iLPjzFovJEcxcOsPMC2DzK/vK8IydU+gQo6a2uFnrzLK
M+6aMJocaqXPlTokZTs0RaE9lZ4aMyMEOUkLVMhfhHVw2W/4hD/4ClBbowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIR7/9EB5UFpn2tvrDId55pfR7YMB8GA1UdIwQY
MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt
NWRmY2NkNjFhOWIxLzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx
LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBFOtTqp
n8HEt58Vf4SZymwxfSQDXaCZhNTD56ocDXY4JN2cchqN1tTxTMxnewMA0uipHs2Z
1Dr1xuCZYYDMQ6KVKPSC2jb8qPcdm87acHN67B6vOO29WmM769LqO+vhv1Uv8pHK
Bi7KHfECz68l8ZKZ3ZJwYhNh5G5g82Ty2uQHzBmv5rwPoyoTvrIC1m8W60bK8jZ8
RRjuRhCDhSigI/VSpoq/74T633YHSS+KlI0jfKXvquB0CGgOAhxOgsCOgNIK8O5A
yvzQxUlf0Ok+4L5E8l1ClXvnpZqh1buzlDFEjjXrpENogbpgSus4unyt3GCxjT4N
Onv/isWcrocZuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:48 2026 by rpki-client