Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: xiOLKemTKTxL9T1iFKylOFoLeL37pQ6VhwklCzdib2Y=
Subject key identifier: 46:F0:5F:39:6C:36:4E:B5:2B:F1:E1:68:28:9C:C0:74:B6:F3:CF:C1
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019CE4B5F11285DF929E1CE81DD61AD72394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0E37
Signing time: Fri 13 Mar 2026 01:00:54 +0000
Manifest this update: Fri 13 Mar 2026 01:00:54 +0000
Manifest next update: Sat 14 Mar 2026 01:00:54 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: /4x7cSTHkBurQS33P/RwPsZwwKVT3D7qoT0aVETUOPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:f1:12:85:df:92:9e:1c:e8:1d:d6:1a:d7:23:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Mar 13 01:00:54 2026 GMT
Not After : Mar 14 01:00:54 2026 GMT
Subject: CN=46f05f396c364eb52bf1e168289cc074b6f3cfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:c8:ab:5f:5d:42:44:e9:d6:b9:95:35:e7:
ee:01:cd:a8:4f:ef:ac:61:0a:fe:0d:12:72:d7:ee:
48:44:08:d5:d1:ee:62:36:38:64:e3:91:03:30:57:
b0:17:5f:4a:cd:aa:2e:11:c4:0f:33:ec:df:83:3b:
c1:fc:be:b5:4b:1b:9f:19:3f:7a:89:ad:f2:7e:45:
74:79:d1:61:2b:90:ef:7c:72:49:ca:f1:b2:03:d5:
69:53:c9:87:2f:db:ce:6e:89:e5:69:6c:9c:d4:5c:
38:46:ff:61:2a:80:70:48:c4:62:1c:15:aa:f1:00:
0f:71:b8:38:fa:cc:2c:73:22:8a:a7:9d:73:45:4d:
4e:95:76:c7:03:02:3c:23:7a:9b:40:fd:5e:24:f2:
16:d7:53:65:9c:ca:14:b9:74:c7:e1:30:e4:f4:88:
a2:5b:d1:b6:e8:79:40:d3:e1:f9:6c:64:bf:ff:7b:
22:c0:83:4f:4e:ce:c1:cb:8b:c7:f3:de:59:0e:7c:
b5:ef:f5:33:5b:1d:af:c1:b1:f0:bb:df:78:e2:26:
fd:8a:ff:fd:aa:d2:0f:5e:0c:66:25:b3:0b:85:a1:
be:be:bb:32:4e:4e:da:02:1b:c2:53:1b:a2:8d:28:
da:d0:9a:24:5e:1f:cd:50:99:78:64:6f:18:f6:c9:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:5F:39:6C:36:4E:B5:2B:F1:E1:68:28:9C:C0:74:B6:F3:CF:C1
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:29:6d:39:e6:32:61:8b:88:73:1f:2b:fe:94:bd:44:90:67:
5d:1d:b6:94:bd:04:0c:a0:2f:21:e0:69:af:6d:9b:62:4a:37:
8b:79:b4:a6:f6:e6:44:50:d5:05:0a:91:53:c2:59:3f:0c:7d:
0a:06:22:97:8d:ba:dd:dc:64:d5:e9:f6:d0:73:0d:d8:60:f4:
77:c8:3c:0d:37:65:99:40:b0:60:32:2d:fd:88:c9:a7:fc:f9:
71:fd:95:2f:64:73:6c:ef:97:ad:a7:44:74:72:ab:3c:7f:03:
61:eb:21:60:80:0f:46:b0:f3:d4:4c:f6:08:e8:b7:c8:b5:c4:
03:d2:67:0a:d0:45:96:a3:df:2a:02:30:d6:db:d5:0a:7e:e0:
c3:dd:1f:50:8a:b0:ea:32:c8:7d:3b:00:ff:28:dc:f5:81:93:
c0:1d:a5:08:1f:4a:88:17:84:3f:60:da:33:06:27:74:a5:34:
63:13:36:3d:d7:a6:53:d0:e0:b7:0f:50:85:dc:ab:1f:cc:ae:
54:0c:8d:73:ba:93:c4:a5:28:fe:d7:f1:03:9b:3b:8f:21:91:
e5:05:6d:d4:0c:0b:bc:26:65:52:7a:0a:d2:06:4f:35:bf:09:
c8:3c:a8:8c:0c:77:73:8e:63:81:ce:e3:9d:9e:25:1d:2f:60:
00:41:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:56 2026 by rpki-client