Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: 6hVGHWTApiKaDrsGZLEVaS25NsjjeoLZ8HyjEmCRjQs=
Subject key identifier: 7C:D1:3A:82:30:CF:99:9D:E5:F2:C3:3D:C3:A0:E2:1F:9F:21:49:3F
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 019D3941627D5488A78ED3CCE7A532396E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0E57
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: 7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa (hash: 5arTTImvBzaIRupQVayIK37D8OB4WYArstAWqXrZVwM=)
2: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: +ZEHEXW0cKuFQEPZt3CfEGRY5wZR6mMP9d4JqjsQqqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:62:7d:54:88:a7:8e:d3:cc:e7:a5:32:39:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=7cd13a8230cf999de5f2c33dc3a0e21f9f21493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:21:be:89:aa:51:13:ad:87:28:ab:52:e0:
04:43:f2:66:95:0e:8b:4d:dc:71:0e:31:58:46:66:
0c:45:3a:3c:43:98:16:40:df:aa:6a:81:57:c4:18:
ed:29:94:a2:89:5c:6e:14:50:46:ad:81:eb:fa:bd:
1c:45:81:51:df:f0:9d:49:37:5e:ed:24:77:96:cd:
74:56:76:62:9d:16:4e:7a:bf:4d:4a:07:95:9e:83:
82:47:1f:6b:f0:b2:95:4b:a2:63:48:10:f6:1e:98:
53:6c:02:99:fa:dd:52:3b:9d:24:e9:a3:2f:3f:d2:
43:29:9c:ed:f4:33:dc:1a:da:06:61:d3:e0:57:02:
ea:b0:1d:4e:75:06:d3:76:78:c1:2f:a0:63:a1:d9:
07:50:46:88:82:09:6d:ac:3d:3d:4a:ec:12:51:f4:
b2:4b:31:a3:1d:4e:1d:2f:86:72:55:03:e1:23:5a:
d5:9d:73:8c:fa:cf:7e:56:19:ab:47:32:7c:5d:ae:
d1:20:89:79:c4:e8:02:c2:e9:68:68:4d:e4:65:1b:
69:da:5b:d6:63:57:56:e4:34:40:3d:de:64:b5:b0:
33:b4:68:5e:e6:83:52:a9:70:64:b8:1f:91:34:8a:
a5:6b:e9:85:1d:4a:47:2b:e8:06:13:39:36:83:ff:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:3A:82:30:CF:99:9D:E5:F2:C3:3D:C3:A0:E2:1F:9F:21:49:3F
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:a4:2d:16:89:c3:2b:de:af:c8:b6:32:a8:74:08:26:68:
f5:0b:82:88:c0:b6:60:6d:97:7e:84:6b:60:75:46:48:17:32:
32:aa:04:98:32:44:98:75:da:53:26:57:24:00:12:08:71:38:
46:8a:ae:f6:85:52:f4:be:2a:0c:2d:45:50:7a:ac:0e:3a:7d:
47:94:2b:d9:10:8d:25:6c:a3:4d:2d:c2:82:b3:a7:a4:c7:17:
77:30:08:a2:02:12:19:72:4d:8e:01:66:f0:6f:e6:1f:cc:c1:
c4:74:a7:cf:80:eb:7f:50:9b:17:95:79:e6:da:41:0f:5e:98:
5e:29:10:6c:a0:db:82:14:b7:8b:07:54:19:cd:fa:31:55:c6:
a4:4b:04:82:12:d0:4e:c2:67:ce:88:8c:8c:34:49:df:8c:67:
3a:36:1c:87:e4:2f:51:ad:e9:ac:a6:fe:3b:3d:67:d1:25:7e:
f4:09:7b:4b:4c:5f:b3:16:18:78:f0:ad:57:c9:ad:f9:c4:ad:
30:09:39:ec:b2:f6:8b:f8:98:a3:59:70:ad:c0:75:07:5c:46:
00:b6:9c:10:8a:01:7e:f6:b9:35:28:58:9d:38:ed:5c:6c:ee:
03:79:01:11:3b:8d:12:5b:f5:4c:b5:f4:f3:61:e6:f7:5e:54:
9a:c8:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:45 2026 by rpki-client