Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: oJrXrCz/FFxb0SwsSykqKVYH/OrcMsT4elAsQkRC6lc=
Subject key identifier: C4:42:30:9C:9A:5A:40:08:8A:08:93:E7:73:D7:ED:A0:09:39:40:48
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 019D051D790199B6BE354F3756F41C2627E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0BE2
Signing time: Thu 19 Mar 2026 08:01:50 +0000
Manifest this update: Thu 19 Mar 2026 08:01:50 +0000
Manifest next update: Fri 20 Mar 2026 08:01:50 +0000
Files and hashes: 1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: 0ALxJrrRUOt0VMsb4nVu+u7aMbOwoG/1NcJ/76okTCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1d:79:01:99:b6:be:35:4f:37:56:f4:1c:26:27:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Mar 19 08:01:50 2026 GMT
Not After : Mar 20 08:01:50 2026 GMT
Subject: CN=c442309c9a5a40088a0893e773d7eda009394048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:95:8f:6a:f7:09:57:8f:0e:d6:14:53:a4:
1e:35:5f:e1:f8:cd:9c:9a:0c:c4:9f:60:ec:91:61:
94:9e:e2:f2:73:c4:33:08:fc:94:d2:e6:d1:50:dc:
36:3d:5d:d0:28:46:ab:da:b9:ab:38:6d:2c:27:c8:
56:08:44:e0:dc:fd:fa:5d:8d:bf:18:cc:1b:f1:f6:
50:34:9f:98:16:b2:5e:99:d3:c6:05:b3:e0:3f:3a:
78:1f:a1:92:a2:e3:42:58:8b:69:ac:a8:b2:61:e6:
cb:f0:84:e9:ad:a2:68:cc:e7:3e:42:ac:a7:a6:82:
90:fa:4a:24:30:bb:30:f8:4d:00:1d:7e:96:85:25:
b4:ab:1d:12:79:98:2e:e1:c3:c9:0a:0c:76:27:70:
f0:1a:46:ce:de:00:bc:65:3a:73:60:31:f6:3d:87:
93:47:d5:ac:31:0b:56:58:ac:54:de:65:9a:79:33:
96:44:91:f0:3d:f2:c1:2d:e3:4b:08:81:5e:d4:38:
00:d6:9c:17:f8:ff:f4:22:49:4f:0e:dc:eb:d3:fb:
0a:ec:1b:bf:fb:ab:0e:0f:3b:2d:9a:8c:9c:d2:4d:
4a:82:68:44:02:42:79:e5:38:a8:f7:33:ca:8a:10:
26:90:21:55:0a:07:42:cc:c0:14:08:94:18:2f:94:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:42:30:9C:9A:5A:40:08:8A:08:93:E7:73:D7:ED:A0:09:39:40:48
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b5:be:20:46:33:0e:b2:38:b4:63:12:66:94:b4:86:d6:86:
5a:e1:7b:45:bf:33:d4:cd:df:5c:b0:65:73:88:41:0d:12:16:
0b:5a:84:73:c2:ef:7c:81:83:1e:45:d5:57:f0:0a:34:0e:ac:
29:85:d3:1d:c2:bd:37:f5:74:7b:ff:5e:b7:31:af:77:b4:e0:
21:60:ae:da:3d:88:66:a4:34:3d:7f:a3:52:d1:8b:13:a1:9c:
ba:b5:8a:5b:2c:e9:54:4a:13:cc:33:f5:69:61:c4:02:27:af:
38:09:ff:83:3d:66:bc:6f:91:14:ec:92:61:09:5e:e4:03:e8:
cd:2b:ee:f4:b7:d8:ec:7d:42:a7:46:1a:b0:69:62:ac:7a:42:
df:78:00:46:22:13:89:08:18:1d:74:03:4f:4d:22:8c:02:4c:
bc:3a:b3:46:ee:34:d0:a5:07:99:12:b6:cd:8f:e1:13:6a:66:
35:5b:75:2d:fd:c1:da:16:e1:b4:74:32:5d:2a:ee:f1:0c:f9:
f6:a3:69:67:8b:9b:76:f3:9a:35:57:19:bf:cb:1e:13:d7:f0:
e5:24:e4:ac:cb:66:a0:4f:56:84:1b:28:4e:36:75:26:47:fa:
5b:12:a0:12:54:5d:19:09:b4:c7:2c:2d:48:42:00:79:7b:c5:
ff:41:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:32:33 2026 by rpki-client