Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
File: vdAX3W18v-gmYVTBrkNMTPi2ilc.mft (raw, json)
Hash identifier: 8E3t3bGg/GhhH1uUQItYx6LW4LknFCuazmAf6ctilYI=
Subject key identifier: F5:F2:02:50:4F:EA:50:4E:B1:73:96:A1:AC:76:4C:A8:77:A8:71:66
Authority key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
Certificate issuer: /CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Certificate serial: 019D3940E202627EEE03EE67DE146EA9E983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
Manifest number: 0177
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: rAid6SWBifBeRfH_M1UAs5DcdRw.roa (hash: FzoFH/XQPycD4zEWka8Y3TTeasXdHpRVco1PTcTkVs4=)
2: vdAX3W18v-gmYVTBrkNMTPi2ilc.crl (hash: DsLsRgoJYqYHQqrOrCMt6PDXj0WPTQo08O3WMcbErQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e2:02:62:7e:ee:03:ee:67:de:14:6e:a9:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=f5f202504fea504eb17396a1ac764ca877a87166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:9d:6e:60:b0:c6:1b:bd:fc:7d:5a:6c:48:
0d:fd:1d:d7:10:c3:84:c8:84:7d:d8:f2:2e:8f:79:
52:92:af:09:ac:8d:4f:34:03:1f:cf:3a:61:08:a0:
c7:ed:5f:37:4e:41:3e:96:3c:6d:4b:82:5c:17:e7:
50:06:6f:e0:53:65:9c:bf:67:dd:9e:20:65:f7:03:
f7:ea:a2:65:2b:13:74:53:06:34:8c:ba:44:0f:1e:
26:1a:fb:d8:06:39:85:67:a0:d3:b0:b4:c4:c3:07:
d1:5f:e4:7c:46:25:50:f8:48:fc:9e:20:b1:a6:48:
91:f7:19:89:71:fe:64:85:65:d7:fd:2e:90:c8:82:
c3:aa:bd:65:3e:b6:11:aa:b3:cd:c9:c1:af:e6:17:
cb:d4:69:2c:60:4d:81:3f:fd:be:f0:fd:1b:5d:c0:
19:c8:3b:54:73:85:22:b8:c1:2b:aa:61:e9:ad:a3:
8e:7b:3c:52:78:e6:f8:59:fa:17:ca:9c:16:2e:41:
59:c2:7f:be:f6:eb:f5:c0:91:7b:b1:8e:dd:cb:84:
3d:bb:af:ec:5c:67:75:3e:b3:b4:d5:6b:cc:65:d3:
2a:91:65:f9:8a:92:2d:00:19:47:0f:a5:b8:99:22:
51:8f:9b:a7:84:46:b1:3e:7a:45:0e:9b:d1:c2:e1:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F2:02:50:4F:EA:50:4E:B1:73:96:A1:AC:76:4C:A8:77:A8:71:66
X509v3 Authority Key Identifier:
keyid:BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:29:a2:e2:af:c8:3a:35:cd:6b:92:a1:ee:e1:c5:96:b0:
46:b9:b1:18:69:9d:fc:6d:c8:b4:51:29:09:af:a3:2c:19:aa:
03:be:83:58:53:2f:23:f4:45:f8:60:d2:21:6a:93:be:60:cc:
21:77:28:a7:ff:cc:ef:4a:d8:e9:e8:97:e8:86:d4:bf:48:fd:
30:ec:a5:fc:ff:02:c3:22:1a:8d:fb:11:4c:f5:f0:53:dd:5b:
6e:ac:16:b1:e6:0d:a5:cb:8b:e2:da:8f:9e:72:1f:61:b3:66:
f5:f9:e6:a8:65:a6:67:3c:90:31:52:fe:6c:06:0d:60:bc:2e:
58:5e:8d:8f:18:86:26:7a:cf:88:ae:82:3d:ab:c6:86:88:83:
91:d1:6f:82:7a:88:b9:b0:bb:e9:17:f0:fb:8c:7d:94:3b:2c:
0c:fe:76:f7:3a:18:e5:a8:bd:52:5e:d5:4e:3b:af:6b:38:7d:
6c:09:ac:fa:d6:60:c3:9e:9e:f3:85:96:87:d1:d7:f0:77:e5:
3f:b9:5d:da:71:63:4f:a5:3d:ca:72:27:66:2f:96:e4:47:1f:
c8:ed:19:ac:67:1d:86:22:63:93:67:e8:53:eb:2c:92:4c:1e:
de:25:40:96:68:ab:7c:71:98:6d:82:c0:a4:4e:9d:86:43:f7:
75:1b:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:14 2026 by rpki-client