Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: fek5/RGSpDrS1EVExRv9jj//R5tvOuAklcSs51BDT44=
Subject key identifier: 0B:D4:63:55:48:D0:CF:3C:7C:84:78:11:CF:FB:9C:25:40:8F:E4:A7
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 019D39E5AB97FAC03842AD5BBEA37A60453B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 14:00:46 +0000
Manifest this update: Sun 29 Mar 2026 14:00:46 +0000
Manifest next update: Mon 30 Mar 2026 14:00:46 +0000
Files and hashes: 1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=)
2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=)
3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: mc0Li/+3wX2RRupgYbzvAsm9W++YgxN7vX977xuiQXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ab:97:fa:c0:38:42:ad:5b:be:a3:7a:60:45:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Mar 29 14:00:46 2026 GMT
Not After : Mar 30 14:00:46 2026 GMT
Subject: CN=0bd4635548d0cf3c7c847811cffb9c25408fe4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:ea:84:22:2f:1e:e4:2e:65:58:cc:dc:56:
4e:08:d7:3f:f1:63:fb:ef:2a:54:ca:dc:0e:94:57:
d4:bb:1f:7c:78:2c:d2:53:93:26:5c:18:9c:48:df:
ae:51:5c:c7:f1:3c:c0:6b:9e:4a:fc:0c:b9:5b:30:
1c:f0:3d:cf:8a:90:66:93:9a:ec:10:a5:0b:82:e5:
b7:da:2d:97:95:79:ab:82:20:be:2e:71:44:3a:b2:
11:15:fc:1e:3c:58:1c:4e:e8:d0:4d:36:bf:d6:ea:
29:f4:6e:7d:3a:7c:a1:73:90:b6:a5:a0:25:d9:37:
7c:21:a2:f1:22:47:c9:13:8a:9d:b1:b9:51:c2:d1:
62:03:e9:1e:95:ed:e4:ae:3e:41:77:62:58:d5:56:
cd:d2:a5:eb:9e:48:b4:8e:3d:1a:cf:14:d3:5d:93:
13:21:43:0c:eb:94:54:2e:d2:c3:72:f5:b0:6f:b9:
31:26:6e:88:29:67:f6:5b:e1:97:62:95:b0:e0:78:
d1:bb:eb:6d:60:ce:b3:e1:dc:64:fa:1b:28:eb:53:
6e:8d:0d:44:c4:5c:a4:9c:cc:d2:90:63:d5:ff:b9:
02:68:09:20:c8:bd:e5:1b:e7:80:1d:72:ba:a2:f3:
56:db:1c:cf:82:b5:52:b4:ad:ae:3f:9b:61:19:5a:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:63:55:48:D0:CF:3C:7C:84:78:11:CF:FB:9C:25:40:8F:E4:A7
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:38:bc:72:3b:92:70:e0:c7:84:56:77:b5:d7:20:27:25:a8:
6f:2a:9f:79:12:b4:b0:56:c7:cb:23:d7:8c:ec:fa:5c:41:e0:
20:93:c1:26:c8:7d:c5:62:36:55:03:0e:49:52:40:cb:3d:4d:
38:4f:6d:5e:2d:0b:bb:16:34:3d:74:32:ec:f0:ad:69:1c:77:
76:81:ac:09:e5:d9:ec:80:1e:4b:2f:79:d6:d3:21:35:7a:4d:
2d:b6:2d:a4:1a:f0:fc:e7:cf:d0:89:c0:03:bd:90:50:72:9d:
e5:f3:8b:5d:e9:fa:ec:d0:13:57:1a:73:f8:62:74:8b:17:1d:
d4:6d:8b:7a:e1:55:da:c5:a1:7d:51:f1:00:23:42:89:d5:63:
da:fc:95:f2:22:e1:6b:84:2f:6a:9d:88:27:84:d8:0c:2c:4c:
8d:ed:05:50:87:ac:28:00:9d:74:eb:fa:ed:6f:af:77:3b:fd:
90:77:59:64:74:2f:f0:2a:d0:d6:4e:2d:97:a1:76:71:06:13:
f8:30:97:20:c5:ef:1b:23:8d:10:00:cd:df:6b:62:f7:69:12:
74:d1:1e:d8:13:9f:d5:bd:8a:c9:92:48:7c:09:84:e8:bc:a0:
8c:fa:a9:ed:be:88:57:27:70:ce:fb:b5:66:b5:ac:39:05:05:
a6:91:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:08:00 2026 by rpki-client