Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: EmktujsHTQb+T9BxvoOeW9mVOiGzbcohk7G2mwnApEI=
Subject key identifier: D3:5E:BA:39:CA:AF:EE:6F:F2:04:7A:CD:1C:F6:6B:AF:8D:67:3F:75
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019D389C37B2DE49F25F20C0E8E0EC43CDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 03C0
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: ZPit1YUxivEM+iB1f8uHP3wGxlHmGhYdkNwJQn5kbqE=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:37:b2:de:49:f2:5f:20:c0:e8:e0:ec:43:cd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=d35eba39caafee6ff2047acd1cf66baf8d673f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:2c:80:6f:e5:d8:65:5c:f4:c5:e8:41:e9:
e4:6e:ba:65:01:0a:28:37:71:9e:0d:12:1b:c5:5e:
08:76:17:a9:35:24:43:0f:c2:ba:04:63:9b:9c:52:
a7:70:26:b5:7d:ea:81:fd:38:f4:88:d8:41:a3:83:
b7:6d:db:59:3b:bf:6d:38:07:d6:63:58:80:f2:c8:
83:68:41:aa:42:23:e7:d4:37:68:93:23:13:c6:de:
00:44:cd:f9:d8:70:dc:e6:e5:b7:11:c4:ab:ad:d5:
46:ea:af:5f:6a:e4:92:6c:4d:7c:de:91:2e:3f:6f:
ce:17:ce:be:f3:c5:8f:92:b9:4e:16:6b:61:f5:7e:
50:b9:cb:c4:67:28:4f:15:05:d4:89:0e:fa:88:3e:
06:c2:84:35:77:2b:8c:0a:c4:51:db:aa:10:2b:59:
32:90:a1:cf:66:00:16:97:98:01:3f:75:7a:97:fc:
ab:71:31:f4:65:5a:30:38:31:a9:fe:d2:cc:ef:51:
df:5c:a9:16:d3:c2:a2:ff:24:4e:87:c0:0b:8f:36:
c4:b2:4a:fb:fb:07:40:ed:f2:8f:0d:e0:97:d3:7c:
00:70:af:b9:69:54:8a:d6:51:88:20:76:e7:b9:c6:
5e:ae:1f:86:7e:db:15:b8:5c:d9:aa:4c:5e:ed:4f:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:BA:39:CA:AF:EE:6F:F2:04:7A:CD:1C:F6:6B:AF:8D:67:3F:75
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:16:71:39:a2:ce:a5:35:fc:02:b7:8e:cc:4d:f0:37:32:69:
51:f7:58:a8:57:92:ab:9e:9d:58:1a:5e:5a:74:9e:db:d6:8c:
d2:91:3b:fd:0b:3d:d8:f5:c2:be:23:34:90:74:95:ba:07:9c:
67:49:c5:3d:9f:6f:31:2c:cc:16:c6:45:02:33:74:ff:2d:78:
10:a9:00:99:5d:89:c3:8b:4e:46:8b:75:8c:0b:b7:e0:d2:fc:
5f:93:32:38:39:14:da:42:9c:d8:9b:ae:a7:5a:a8:a7:43:e3:
b1:30:3a:b3:79:33:de:c1:f9:32:7a:54:a8:2c:e2:02:97:18:
01:39:f9:d9:b7:b2:61:af:71:42:92:04:bc:29:da:0f:c6:a4:
4d:b2:d0:9f:2f:d9:5a:4d:bd:37:ea:6f:20:ac:3a:14:6a:fe:
86:e6:37:6c:04:2d:f3:4f:36:6a:02:74:8e:ed:a1:f3:ac:d1:
3d:5a:04:8e:5a:04:98:85:cd:02:7f:b9:64:74:53:6c:b6:29:
36:46:ec:ea:14:ba:d8:5e:2e:42:6f:53:fc:ca:7e:84:68:0b:
a1:75:78:30:76:e7:79:a7:5c:2b:69:73:2d:10:50:38:6b:f4:
c3:8a:8a:59:e5:96:4d:42:32:48:a3:d8:67:fc:e9:d1:c6:b8:
46:c4:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:11:45 2026 by rpki-client