
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
File: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft (raw, json)
Hash identifier: aJtAQm0hYrl9agpQT+9oqaMCqZ5mA4uyT673eCzJuZE=
Subject key identifier: 39:F8:C8:44:4C:02:68:4B:95:49:FE:1D:BD:C2:46:F4:3F:60:F1:B3
Authority key identifier: BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
Certificate issuer: /CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Certificate serial: 01A03C03A60471A458EA9CABC5E1D0C1E33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
Manifest number: 0133
Signing time: Wed 26 Aug 2026 03:01:07 +0000
Manifest this update: Wed 26 Aug 2026 03:01:07 +0000
Manifest next update: Thu 27 Aug 2026 03:01:07 +0000
Files and hashes: 1: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl (hash: c/epESjRg7q/0Qhw2Aeqrr4nab2N7tyclR6JJZ4baWo=)
2: y2ErD9gPt2srsosZxZsZGcaxQRw.roa (hash: 0tcvB5250a30cb/eASboxE8tX1iGV0W6SMgOYqA9S+0=)
3: yH4YewMKblaB_L12xQ35G0SXRYk.asa (hash: nott0T0TIvklgCDjdkStX556EDcXcSa/s6c9BihWlRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:03:a6:04:71:a4:58:ea:9c:ab:c5:e1:d0:c1:e3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Validity
Not Before: Aug 26 03:01:07 2026 GMT
Not After : Aug 27 03:01:07 2026 GMT
Subject: CN=39f8c8444c02684b9549fe1dbdc246f43f60f1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:49:10:3e:ef:f3:dd:6e:ed:a3:f1:ff:5f:
62:8c:45:dd:b9:4e:37:42:d1:9a:e2:62:23:bb:64:
d9:87:10:70:b9:70:39:f9:60:59:f7:c6:23:04:a7:
ef:d5:5b:3c:d3:f3:5a:52:6d:69:af:7d:ab:5e:82:
e3:ec:00:90:cc:48:9e:c1:d9:93:54:22:1c:d1:79:
4d:c5:6f:ac:ed:57:06:85:4b:48:94:a0:03:1f:e3:
e1:a5:5c:de:39:ba:21:19:a7:68:a0:04:4a:d5:cf:
4b:fe:25:33:e7:f8:73:b0:8f:db:fe:e1:fe:17:d3:
2b:44:d9:41:91:79:31:c5:7f:ef:f9:a3:26:00:b4:
50:c7:01:52:5f:fd:64:2e:26:46:f6:67:89:93:94:
ec:f2:d4:d0:1a:46:5b:1e:ef:50:9a:af:ec:70:68:
6f:42:9d:8b:37:59:03:1c:01:07:60:90:3c:a7:a5:
75:20:6d:ce:cd:34:5b:26:1b:4c:63:a6:a2:71:76:
cd:3f:a9:9a:ce:2c:a7:51:e8:b0:50:00:56:76:b7:
96:4d:d8:ae:a5:38:6a:22:b0:a8:32:3a:68:59:6b:
e8:34:6b:45:a0:0f:f6:fb:28:6c:78:99:f4:36:89:
08:8b:14:d2:4e:11:c3:5a:bc:dd:b7:15:db:37:ac:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:C8:44:4C:02:68:4B:95:49:FE:1D:BD:C2:46:F4:3F:60:F1:B3
X509v3 Authority Key Identifier:
keyid:BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:da:3b:73:da:6c:ad:f7:49:43:5d:ea:8c:a7:1e:5d:5a:a4:
07:7d:ac:a5:51:95:76:a6:8a:cd:36:8c:a7:a9:66:2c:b1:2e:
ab:2e:3c:d3:58:b8:a5:86:52:61:c7:f4:76:b3:37:40:07:74:
41:e8:61:3d:95:ef:e1:dd:ae:ce:e3:ee:fc:75:38:46:44:ed:
5f:fd:13:34:45:cf:c8:19:37:ff:60:ff:17:72:91:64:ab:03:
2a:dc:6f:08:78:50:f5:aa:24:8a:c7:7e:e2:35:ee:bc:c9:20:
b9:2c:51:64:ca:8a:87:15:5c:06:4f:90:7f:6d:47:ef:c1:83:
ad:c6:bb:8e:84:6e:e2:a7:50:35:26:3f:59:4c:8e:52:9e:6b:
e4:4f:10:44:76:2d:24:ed:ca:60:d5:07:e4:df:f5:51:0f:9c:
95:b7:70:d8:2d:e7:1f:1f:e2:b7:f5:b7:10:44:cb:46:c3:f0:
f8:ed:1b:5e:be:b1:03:26:0f:70:0b:b1:60:4f:2b:b3:02:c0:
d5:72:89:7b:9d:b4:00:e0:2c:14:ee:b8:4d:f7:39:84:7c:5b:
1e:ac:75:04:70:7d:4a:0c:4f:aa:96:f6:5c:46:1d:6b:6f:19:
7f:a1:bd:1d:ea:ae:0d:8d:03:2b:0f:6c:3f:02:5f:58:60:2a:
f1:d9:6c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:13 2026 by rpki-client