Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: 2HwPdnP2K31KOjn7ieuoTwnQfZ9PDSUaLkicXMkb59Y=
Subject key identifier: A2:A5:61:4B:38:E8:63:BF:F5:FA:35:1F:44:42:B0:AC:F6:96:CD:EF
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019CE410B2303B10A2A9D357CE00CB009B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 17F8
Signing time: Thu 12 Mar 2026 22:00:25 +0000
Manifest this update: Thu 12 Mar 2026 22:00:25 +0000
Manifest next update: Fri 13 Mar 2026 22:00:25 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: vdSjQr1ooAVp1W/nbm9wrneh6i9ZEePRya9HX5kwl/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:b2:30:3b:10:a2:a9:d3:57:ce:00:cb:00:9b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Mar 12 22:00:25 2026 GMT
Not After : Mar 13 22:00:25 2026 GMT
Subject: CN=a2a5614b38e863bff5fa351f4442b0acf696cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:c8:26:37:62:35:8b:90:db:96:11:76:1f:
47:c0:f8:37:fc:34:65:25:a4:40:3a:13:11:01:e0:
2a:87:2e:37:68:5d:e4:f0:18:25:2a:c8:a3:43:e5:
27:53:4a:da:e3:e4:aa:30:1f:fe:00:2c:93:ca:79:
8b:5a:0d:2d:14:c6:c6:40:4b:c1:4f:a2:fa:4e:f9:
25:09:f6:9e:ba:13:6f:2f:de:cd:7a:2c:21:0b:6c:
b4:ee:74:68:77:1f:59:bd:25:b1:cf:27:af:62:60:
7b:85:07:c0:7a:f7:15:81:99:c4:28:c3:73:c3:5b:
7f:ec:ac:9b:9e:b8:89:d1:80:16:4f:89:4c:61:5e:
10:35:05:ea:fc:7b:f6:16:78:4c:21:cf:c6:f6:9f:
bf:ee:d9:c4:e0:bf:c7:8a:30:f8:82:42:95:a2:07:
c3:d6:0e:1f:e9:fb:1a:a8:b6:49:26:5d:b5:87:e8:
32:2d:63:ba:c8:a5:25:eb:e4:b2:99:35:b6:13:b6:
02:b3:d7:61:53:18:97:14:2d:b6:1a:9e:92:38:a4:
65:12:15:6b:7f:e2:c3:24:e6:a9:1d:26:01:a3:e8:
b5:49:93:fa:23:4e:1f:08:4b:6f:6c:12:74:a0:17:
6a:42:b4:a6:44:b6:89:84:6d:9a:cf:f0:59:c8:75:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:61:4B:38:E8:63:BF:F5:FA:35:1F:44:42:B0:AC:F6:96:CD:EF
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:74:e6:c6:0e:a5:4a:c5:10:6e:bf:e6:49:34:ed:0e:6a:
5c:98:4f:a5:d7:f5:14:e5:37:eb:12:bd:37:65:93:9f:95:78:
29:ce:c3:9f:11:20:ac:44:93:cb:69:76:2b:74:52:45:9e:1f:
e3:fe:b5:3d:93:4e:15:0b:f3:62:67:2c:d5:16:af:f2:e3:bc:
07:cb:f7:e8:26:94:e8:6a:ff:0b:f8:bb:25:2b:56:dd:05:fa:
e5:b9:bf:a7:c1:59:70:20:f5:91:07:b6:94:95:4c:a7:89:48:
e4:7e:fa:33:b9:d0:16:0b:0f:0f:61:6e:68:07:03:57:06:ff:
8f:81:e0:8e:64:f6:03:02:f4:ab:96:fa:5e:31:f7:bb:36:80:
0e:7f:07:ff:89:df:00:bc:84:0d:84:f4:7a:50:ac:74:e7:2b:
0b:ee:99:17:93:8a:0e:16:87:bc:e9:d6:74:ec:e4:c2:b6:eb:
23:97:a8:96:15:c2:bd:b5:7d:91:13:d4:3d:48:e9:13:bf:04:
da:e4:3d:2f:ae:8d:2d:c3:9b:63:df:13:78:73:65:76:ce:ee:
af:b1:a5:7f:b1:64:f0:64:17:36:3f:3f:fd:8e:2b:a9:55:83:
8e:99:c9:0f:4e:2e:31:18:f3:75:a8:83:62:1d:67:48:d0:5c:
b8:7f:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:08 2026 by rpki-client