Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier: RiP9mtf2ekuGf3HDb6SWHPp/NZLyXS4yFpXyCdpx6MQ=
Subject key identifier: C7:93:D4:14:8A:D3:8D:D5:88:51:73:CB:9F:76:58:7F:CC:27:F5:5D
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial: 019D39E59A564E7CB3E8ACB82ABC4E18D0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number: 0154
Signing time: Sun 29 Mar 2026 14:00:41 +0000
Manifest this update: Sun 29 Mar 2026 14:00:41 +0000
Manifest next update: Mon 30 Mar 2026 14:00:41 +0000
Files and hashes: 1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=)
2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: Tlzu8kuD5aw4IMaL7pEgpD+WJoESVaV2Be/I+/rXY0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:9a:56:4e:7c:b3:e8:ac:b8:2a:bc:4e:18:d0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Validity
Not Before: Mar 29 14:00:41 2026 GMT
Not After : Mar 30 14:00:41 2026 GMT
Subject: CN=c793d4148ad38dd5885173cb9f76587fcc27f55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:d0:20:36:a7:a2:1c:11:35:66:27:86:9f:
29:d1:7e:d5:4f:bc:f8:dd:43:4b:8f:cf:5b:10:c2:
1f:83:7b:25:dc:e2:e1:07:e6:1f:ec:5d:84:cb:aa:
6c:7f:e7:ee:93:fa:1e:1b:dd:e9:ee:15:5c:4e:03:
e7:9d:48:b8:5d:ec:16:77:2b:88:dc:a3:09:32:85:
ae:9f:56:85:82:c2:be:c9:dc:91:d8:47:81:3f:3d:
04:65:3a:cc:63:71:2c:70:46:1a:12:53:ee:7b:e7:
2e:1b:6b:98:a3:5e:02:e2:8e:fa:41:b7:30:f5:c4:
f7:b5:88:c1:9f:27:06:90:04:5e:6f:5c:5d:d5:0f:
c5:96:19:c7:3b:01:0d:31:b7:c4:f0:f3:8c:b2:bd:
36:6f:8f:57:1e:13:8b:5d:cb:00:b7:9b:6a:1d:6f:
86:41:66:73:68:5d:ab:e6:55:67:0d:9c:b0:c5:dd:
46:12:57:a1:a5:be:46:55:47:eb:6f:f0:43:c7:f3:
d2:a8:8c:fe:3a:ce:0b:8f:80:0d:db:25:be:41:98:
50:e8:d3:c8:5c:66:79:c7:5b:e2:c9:26:d4:87:b1:
d2:da:d1:3f:13:41:ce:7f:8b:de:0a:07:e9:c7:98:
d4:1a:4e:ba:54:39:65:fb:2a:ec:79:e5:1a:c4:6f:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:93:D4:14:8A:D3:8D:D5:88:51:73:CB:9F:76:58:7F:CC:27:F5:5D
X509v3 Authority Key Identifier:
keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:41:83:2d:72:e1:71:7b:07:51:ba:f8:b9:af:3d:9b:62:
89:50:4d:27:ae:39:93:27:e1:e5:c8:3f:8d:60:8b:97:fe:e4:
02:97:8b:74:2a:82:8e:7e:1b:7d:81:3f:14:fb:03:54:b9:3d:
14:2b:99:eb:40:f0:66:78:55:e3:13:77:05:35:c1:3b:fd:2a:
c8:2e:99:af:9e:5e:f4:3d:8e:f7:e6:85:a7:84:a4:6a:ea:49:
bf:51:7c:d1:4e:cf:66:c8:73:2f:32:23:44:c1:10:7f:c3:77:
eb:dc:01:64:07:4a:82:48:5b:a4:ad:60:04:37:9a:3f:a0:01:
a3:84:20:ec:ba:4c:64:4d:de:87:b2:06:a8:6f:ca:b3:5d:70:
61:aa:e1:b8:ca:f2:c7:13:c9:17:8f:7d:a6:0b:a9:2a:db:c8:
c5:6a:21:6b:07:e4:92:37:1f:1c:87:cf:af:92:40:80:c2:ee:
fa:a2:c8:63:16:9d:0a:b8:24:be:0b:67:67:34:cd:0f:ed:89:
3f:22:cb:f6:9d:e2:38:35:8d:66:89:a6:5a:7b:54:59:d4:bc:
00:51:d7:80:7f:80:d4:57:13:8c:90:64:32:d1:96:90:95:a9:
65:f0:f6:72:42:42:c8:d8:62:3d:a4:32:8c:af:15:fd:a9:c9:
de:94:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:44 2026 by rpki-client