Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: 4b9sgeADr33OEOzgql3zgw2UoIKPCu8u/E6OTqy2OY0=
Subject key identifier: 53:79:2C:8F:E0:F4:4D:C3:7F:24:24:6C:C7:A0:4A:EF:52:66:22:47
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 019D3752E250BC9776A0BA36CEBADBE60221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 1777
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: SDu33Jeh8c7arCHbWi8vSsrtoRg.roa (hash: mOOpOXQQCP8piIIEBcEgAzeCzN5EN9HiWhAzdTUbVms=)
2: kOyZYgSX80CsRnrKhHMAejR73Kw.roa (hash: /AadyvBuTOLqb+dP0xaY/xt4sTbRJkvJBZZOyXanfbw=)
3: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: RUcxFC0IUVUVx/23Z+A5c/TPIcfzGOdLOgRBgWXK0y8=)
4: wH_YLSDY4b5XgVUcKfrsKH4Px0s.roa (hash: KLtMxNZ5FPCN1sTLToHlbj9Dq8r/htuRuv+o2DrmCdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e2:50:bc:97:76:a0:ba:36:ce:ba:db:e6:02:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=53792c8fe0f44dc37f24246cc7a04aef52662247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:1d:b4:27:5b:0c:cc:97:c5:38:75:48:ef:
bd:66:b2:d7:a1:26:f0:ec:ff:4d:2d:1f:36:07:28:
3c:20:25:9e:00:6e:26:cd:68:de:6d:b4:6e:18:3c:
a5:35:7a:68:47:12:04:bf:17:d0:a0:c7:ff:23:01:
e2:b3:60:e8:2c:c2:59:47:82:66:19:91:83:c0:d6:
9d:75:ce:e9:84:b5:e7:6c:5e:27:48:2d:be:58:c8:
7a:2f:42:da:dd:07:6c:4e:34:d7:1e:ec:37:16:30:
ee:c0:5e:8d:b1:fb:6c:3f:b4:e4:67:3b:29:8d:ca:
5e:fa:bc:a2:3e:b0:7d:2a:59:0d:8b:bc:25:7b:69:
05:bc:f9:b3:41:e5:8f:a7:b8:03:b9:07:fc:8e:78:
30:62:cd:c1:83:55:d0:31:72:71:f9:4e:26:07:91:
df:9a:17:cc:bb:c9:65:b1:85:ca:06:9a:04:13:e6:
92:87:4e:0c:74:f8:53:97:40:f8:ef:59:8a:f9:7a:
5c:fa:0d:77:2d:32:33:81:40:1f:9a:00:6a:6d:7b:
c8:8b:09:ec:2c:f5:b9:10:ab:ed:86:19:c5:8c:2f:
ee:01:46:38:49:42:28:f6:81:16:83:dd:9b:43:f1:
2b:a0:a1:dc:95:63:f4:6b:03:51:23:00:01:bf:4f:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:2C:8F:E0:F4:4D:C3:7F:24:24:6C:C7:A0:4A:EF:52:66:22:47
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:35:a5:7a:1e:76:ca:1d:24:8b:93:ef:03:80:9d:98:d2:b9:
40:d6:f1:4c:28:15:2c:1c:be:b1:2c:b7:01:c0:7a:37:66:6a:
9d:d6:5a:09:c3:b0:81:d2:d5:fd:14:69:67:79:32:06:db:e8:
8f:9b:c9:07:9a:6a:92:17:b3:33:d8:85:3b:f6:89:15:4c:9a:
16:90:c3:df:3d:e5:b0:00:1e:0b:29:46:26:24:c8:de:57:f2:
9c:f4:d2:37:b4:d8:92:95:02:40:f1:ab:6d:6b:31:77:20:ea:
a6:61:4b:a5:50:a0:a7:ed:9b:93:01:8f:e8:b5:21:5c:f0:3e:
2f:36:fe:dd:0f:65:83:ad:3d:54:0e:9f:60:9c:25:a6:1d:46:
46:c9:05:ea:a4:2c:38:97:07:d8:da:0d:00:87:df:96:0e:c3:
80:cc:8f:39:0d:69:42:04:d9:18:09:5c:df:3e:ac:4a:51:0a:
09:4c:cd:1f:85:7e:f3:64:e9:3e:7a:13:a7:24:b4:2a:a9:14:
b5:12:16:07:57:2f:ff:0e:eb:39:90:9f:ed:1d:b7:85:4c:a8:
0b:f1:0e:7e:19:87:85:29:1f:0d:37:50:03:b8:65:71:7d:eb:
bf:eb:14:3a:3e:18:7d:04:c2:af:5a:4f:ca:ef:be:1e:91:88:
33:5e:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client