Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: qNCjWGSARkxcTo27ndiknZbCNshGGJO+J6iUfoUlq3Q=
Subject key identifier: 2D:25:DC:CA:B9:8C:80:12:CD:E2:80:BA:6E:F8:B6:C2:C5:11:C6:FD
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019D3A53D6E63EE8D34DDED271D1EFB1EBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 0206
Signing time: Sun 29 Mar 2026 16:01:06 +0000
Manifest this update: Sun 29 Mar 2026 16:01:06 +0000
Manifest next update: Mon 30 Mar 2026 16:01:06 +0000
Files and hashes: 1: Jcx0b1zHDF9UJEjNraMW7Wkin54.roa (hash: OyMTt7xgc2x7/DsfiJtLeI1ThqbxPs1lS0m0QvvcPzI=)
2: Xf5rpKoBI7BsYh_voz1J6f7LZno.roa (hash: yCI1kMz5PIyVImE2jYrenMk6gjrCzrC62f+tybJ0tIQ=)
3: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: 0mrRcvr8cm/m7BOWSddIEhy1ix3yJMZyuLEOW1R2HCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:d6:e6:3e:e8:d3:4d:de:d2:71:d1:ef:b1:eb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Mar 29 16:01:06 2026 GMT
Not After : Mar 30 16:01:06 2026 GMT
Subject: CN=2d25dccab98c8012cde280ba6ef8b6c2c511c6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:06:a0:64:75:e6:f7:e9:19:7c:92:4a:24:
a7:15:2f:ad:cc:49:f5:9f:bd:6c:89:3a:fc:b4:be:
54:ab:ce:21:00:60:22:16:27:1a:01:50:8b:e2:af:
3b:12:5c:16:ce:9a:94:02:e2:b4:41:a7:cc:d3:fa:
af:94:75:af:df:b0:93:c3:b5:21:ad:61:77:c6:22:
82:a7:43:ff:17:7a:39:b7:9f:34:4d:ae:50:fa:fb:
73:10:5c:a9:98:53:06:2f:9a:91:ec:ec:53:43:29:
4b:98:cc:2f:3f:29:e4:d2:cd:a7:9f:ee:4f:95:90:
0e:f2:2a:0e:e7:dc:de:7a:77:3e:a5:bb:00:a4:9c:
41:67:d0:85:f5:b0:2c:69:48:6f:cf:0f:79:9c:46:
e9:c3:42:05:f8:aa:3e:ca:73:4e:02:81:d9:2c:b8:
b6:8c:91:3a:09:18:4d:a1:5b:52:d6:35:ec:21:65:
88:4c:c2:cb:c6:73:78:14:59:d7:56:3c:60:7b:3e:
03:c7:53:03:2d:e2:13:0e:d6:29:24:9c:cb:1b:25:
7d:56:43:01:3c:7c:8e:74:3f:1b:75:e5:da:d2:7f:
9b:a5:36:a7:f2:74:a0:90:6c:fb:24:f0:ad:d7:a7:
2b:53:a0:17:96:ac:f3:f8:2d:06:49:e5:1a:dd:0a:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:DC:CA:B9:8C:80:12:CD:E2:80:BA:6E:F8:B6:C2:C5:11:C6:FD
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:27:24:86:18:9b:e2:af:a0:56:5f:0a:8b:d0:33:3c:70:2c:
f4:07:bd:84:ca:b2:fe:91:3a:80:bd:c8:ec:ac:02:1a:86:ea:
a0:05:58:be:c8:42:97:82:76:67:34:0c:7d:8c:ee:16:3a:6e:
b8:bc:56:eb:1a:35:6e:5c:49:ba:ec:96:05:3d:81:22:dc:4d:
20:01:8b:80:5c:ba:b1:ec:33:5b:53:22:17:37:1b:d6:24:8d:
91:9e:a9:6a:04:af:f4:58:71:e6:43:b0:97:10:c6:9e:fc:c0:
81:e1:ad:a7:53:38:27:a4:1e:14:9b:d1:b6:fb:48:f0:96:1c:
64:ad:06:b4:c7:d7:c9:f3:dc:53:32:fd:86:83:ee:a9:56:ee:
65:2c:8d:78:60:15:70:f6:69:02:64:ec:74:99:c3:86:ab:42:
61:c1:76:c1:d5:bd:66:c9:01:cb:09:b2:fd:54:0a:d9:9f:4e:
7c:a6:e0:07:b4:b5:26:0f:83:32:72:96:c2:aa:a2:4f:b8:7f:
88:b2:22:9a:f8:4e:e0:71:0d:0a:3e:dd:10:bc:94:04:b6:46:
f1:23:79:46:23:69:f3:fe:48:3e:15:c7:2b:d2:6c:fa:06:9d:
7b:a2:59:44:fb:56:b7:79:01:0e:a0:51:ba:4c:db:0f:e2:31:
ab:3e:4e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:12 2026 by rpki-client