Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: HF+qdD7qxhd8aCj6x16sTDKZtVbxLkMYvRVhdU+QIu0=
Subject key identifier: 38:C2:FE:5E:42:99:E4:F6:F8:DF:51:4F:51:74:D7:2C:F3:89:01:DB
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019D37F71B2F234C61DA8E0E3B282A9DC387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 11BA
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: 1iFK6omms//+tBeiSHbz+sAUnwSJykcms388p5oHI60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1b:2f:23:4c:61:da:8e:0e:3b:28:2a:9d:c3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=38c2fe5e4299e4f6f8df514f5174d72cf38901db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:8a:86:ab:22:65:6f:10:81:4e:50:6a:21:
9b:f4:b8:69:79:9a:7a:db:b5:83:30:4f:06:ae:a9:
77:b8:69:09:17:d4:c8:55:6d:54:8d:14:75:62:b3:
84:58:70:40:f9:68:bc:44:b1:b3:b4:12:04:08:46:
a7:46:97:10:97:97:5e:c8:a2:9c:c2:5e:35:6a:8f:
90:0c:c5:4a:8f:c1:35:c5:0d:f6:44:7f:55:1c:dc:
dc:8d:22:ad:8c:5b:80:d1:db:fa:e7:22:65:43:96:
8a:12:39:37:e7:a9:1d:71:c1:8f:33:6b:25:f3:99:
34:65:57:f5:9e:e8:5b:91:51:c8:42:1f:98:b0:3f:
42:55:09:e7:c5:9c:d1:ce:15:07:14:b2:83:bc:f0:
03:4a:23:c2:a3:13:c9:bf:18:85:d9:55:8b:96:c1:
e3:71:7c:f2:ae:da:b0:66:d7:38:01:d5:1b:e7:90:
fd:bd:26:89:19:55:1e:ea:87:58:c2:30:c9:c9:7f:
67:13:f8:df:f1:36:29:c2:80:b8:32:8f:c5:df:fb:
4f:16:34:d9:2a:4a:01:97:8a:80:c9:07:de:bb:e7:
a1:eb:7a:ae:9e:4f:0c:25:06:66:7e:1c:54:5c:6d:
07:16:f9:41:48:67:37:b5:85:dd:77:21:b2:2d:da:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:FE:5E:42:99:E4:F6:F8:DF:51:4F:51:74:D7:2C:F3:89:01:DB
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:02:51:ef:d5:90:ea:e1:ba:ae:b1:db:1e:50:8d:62:2f:
30:8e:2d:23:5c:79:b5:24:92:cf:33:36:a3:fe:b8:fb:d3:67:
9a:10:92:94:64:11:ff:9e:d5:2a:c9:b7:b6:7f:fa:41:a3:2d:
0f:44:e9:d4:03:37:a0:5a:c0:2e:f8:88:16:8a:5b:1d:08:41:
0c:8e:86:0f:22:0f:62:f0:17:70:07:6d:e0:e6:4a:65:24:44:
9a:6b:1a:c4:33:34:f3:f6:90:9a:ab:f5:dd:3a:bd:e3:12:ea:
46:e8:17:d2:fb:8d:b2:44:bf:f8:15:73:f8:cd:d3:a7:16:29:
29:3f:a9:e8:1a:a3:0d:a0:59:f3:8e:46:30:7a:82:82:7a:94:
80:61:9b:bc:7d:ee:b5:32:0c:14:f6:b6:c8:61:f9:7c:c9:64:
f1:8f:52:97:e6:8a:36:2c:4f:02:06:de:fc:20:ac:35:73:ba:
b4:e0:d6:6d:e6:13:34:d6:6f:8b:37:3e:ed:d0:3b:80:2a:0b:
08:55:2b:d8:9b:4f:dd:68:30:db:0a:d9:ed:31:64:b5:4d:63:
9c:47:13:63:6e:c6:af:c8:8b:aa:47:e1:e1:20:41:df:81:0b:
dc:71:af:ba:dd:ab:35:8e:38:6b:3f:95:44:2b:0a:80:d3:91:
04:85:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:30 2026 by rpki-client