Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier: yBU9vfYi4wftjHPrHt8l7KxgAj76nDFeSft4WPSCe5U=
Subject key identifier: 72:58:71:92:3D:B6:62:58:72:B2:25:54:FB:1C:40:67:56:DD:32:31
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 019D39776A707806655BD469010C249428A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number: 0C2E
Signing time: Sun 29 Mar 2026 12:00:20 +0000
Manifest this update: Sun 29 Mar 2026 12:00:20 +0000
Manifest next update: Mon 30 Mar 2026 12:00:20 +0000
Files and hashes: 1: 40PEkc-tm16gXqeqAbwomk4v-Yk.roa (hash: kAK1M/TYnJhlmuxrKwwSccKl4wPc1ihYIyT7lVRZWKM=)
2: FeRSaI58Ev-Ln_omefqDS1wpOcE.roa (hash: VtwF2AwRtjXtkXBam50V21xolPQHIDHrw5e0KXt9pQE=)
3: _rHEyFhBMkve8XY-2u_0M5SvUEY.roa (hash: 3MBR6pVJ71rnlILr1LVMBWKjPMEZiQ66W90KvCwSbpo=)
4: uAaaAwkHh37Yh7QiaeM24N_2cQ8.roa (hash: YODqMDn+FW1RXiU9YTO7+/jhAjNogHVA29ZzT3M5hD8=)
5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: jpcPt9ZYOpGnvgJNUEvFlw3vpZHJ/gdxYelJ2kUhcQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6a:70:78:06:65:5b:d4:69:01:0c:24:94:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Mar 29 12:00:20 2026 GMT
Not After : Mar 30 12:00:20 2026 GMT
Subject: CN=725871923db6625872b22554fb1c406756dd3231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:4a:71:0b:17:81:76:db:f9:e5:65:9c:59:
3a:f0:d2:71:8e:ce:65:58:13:77:09:c4:91:a9:71:
33:24:4d:fb:2d:5a:dc:75:5c:e8:fe:f3:0e:a0:74:
13:f2:3a:ae:50:bb:8a:02:aa:72:68:74:d7:46:45:
63:09:9a:65:1e:85:3c:1a:73:7a:86:84:c9:a5:44:
7d:2e:57:d1:74:aa:ad:7f:17:fd:0c:00:f5:55:3c:
08:4f:5a:e0:f4:ef:58:71:f6:f5:ed:20:9c:4d:b9:
8b:ae:3a:06:6a:a5:f6:61:17:71:63:12:86:96:44:
9d:c2:94:f1:20:f4:92:94:0f:70:52:0b:d8:31:b3:
25:47:8d:cc:a0:b2:de:9b:fe:0d:25:76:4c:5c:02:
03:11:ce:19:19:4e:16:bc:07:5f:c4:cc:0d:46:85:
50:79:2a:a9:12:72:82:d8:4a:8a:9e:c0:c2:8b:8f:
3c:35:4b:7d:01:de:23:51:e1:15:f5:d1:6e:7d:34:
1f:ec:42:de:0c:ca:58:24:0e:ba:3d:e3:59:62:e9:
2c:f6:78:4d:90:84:38:77:9a:e8:ee:d7:e0:ee:16:
f3:55:4e:6b:a2:e4:da:7c:21:34:c2:d4:24:04:70:
ef:36:dd:d3:2a:c1:a5:9a:d1:06:2d:33:80:8e:90:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:71:92:3D:B6:62:58:72:B2:25:54:FB:1C:40:67:56:DD:32:31
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:08:86:69:e6:74:4a:e3:04:f1:75:1b:8b:5d:5d:33:2f:
2b:b5:af:f1:0f:fc:9a:ba:3c:97:d4:7a:58:63:0f:80:1e:ae:
c1:85:56:43:60:fa:f1:d0:7e:d5:1b:ab:e3:bc:0c:b6:24:d9:
ed:02:47:9e:25:b1:b6:7d:74:2c:e2:3e:be:ac:4a:db:6f:65:
ba:3f:00:a8:5c:9a:0c:e0:e2:fb:a8:51:a2:85:5c:d9:58:76:
70:84:3d:74:d2:74:a2:ab:7e:b6:14:0b:0a:b4:da:56:d5:cf:
18:d5:96:d5:01:0a:68:80:14:35:7a:62:ab:1f:e6:b9:fb:a7:
2f:3b:d9:d6:fc:db:fb:fc:7a:f4:68:e1:c1:ae:e9:1d:a0:b1:
2a:74:22:e5:8e:77:c0:49:69:a5:77:bd:34:75:07:fe:74:5d:
2f:e0:64:39:4c:06:59:2c:7a:cf:4d:e0:82:0f:6d:2b:53:3d:
03:c2:a3:ec:ef:b5:fb:e7:40:fb:0a:21:85:b4:3e:5e:44:cb:
16:39:3b:8c:e7:94:6d:e5:8b:04:39:c6:3c:c1:b0:bd:c7:b0:
a3:77:a4:8f:cf:ac:63:7e:4e:e3:93:f1:af:6b:71:5b:9c:25:
74:d9:0b:fe:6e:d3:56:99:93:ba:e4:97:1a:3f:f6:9e:0e:0e:
4c:1e:08:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:48:49 2026 by rpki-client