Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: wLVVzuhtc/VzW0W1pm9eDpRGpwyrLD7hhYWWzypP8Ms=
Subject key identifier: 4F:5E:B7:7A:56:A5:85:F3:AF:95:59:87:E5:99:0E:BF:8D:31:A0:98
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 019CBC28B7509B6E068F44FB2C3121B53E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 1857
Signing time: Thu 05 Mar 2026 04:01:50 +0000
Manifest this update: Thu 05 Mar 2026 04:01:50 +0000
Manifest next update: Fri 06 Mar 2026 04:01:50 +0000
Files and hashes: 1: GJIEMFvCXOGxwMSx43guQFRPh8M.roa (hash: oeNhpu1q2YVhaNJfdDI1KC0StxYU+WfFhgtlfHrXwlM=)
2: N7xp5A4irg8DKzqXWFOFM39t3u8.roa (hash: qInCZHWCOK/PbCu1c+rmFecdDUSwXaQ9cyfT/I5HPdo=)
3: hTMMYpMuqGPoG2J1CKhmES38yHA.roa (hash: rvTmRXH6/6D95X7iHQWTgs6oiDZA0aQ3QNoQMnR5ayw=)
4: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: FVO0faFwaF92SUIlWUxATmP67WadegzmikDLwVGntHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:28:b7:50:9b:6e:06:8f:44:fb:2c:31:21:b5:3e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Mar 5 04:01:50 2026 GMT
Not After : Mar 6 04:01:50 2026 GMT
Subject: CN=4f5eb77a56a585f3af955987e5990ebf8d31a098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:1f:54:05:c5:f2:fa:ba:3d:59:f4:15:fb:
0a:d8:63:dd:13:c9:cc:27:01:79:69:40:48:3f:ac:
58:e2:23:7f:96:3c:92:05:5d:8e:d1:17:76:f2:64:
b3:90:8c:d6:61:04:98:12:1c:09:e6:b0:50:6d:0f:
2f:6a:f4:17:90:39:81:71:9f:5d:d9:3f:36:c0:54:
6a:58:29:9f:fc:ab:f8:69:2e:eb:2b:71:d4:d1:2d:
ee:d5:f8:16:6f:e5:5e:7f:a2:54:90:35:e3:e3:c9:
5c:33:e9:40:1f:04:ad:ed:2e:b7:6d:7b:2a:a8:f1:
b7:9e:b3:92:f9:c3:3e:db:6a:b1:16:87:bc:2b:fd:
7e:53:a1:65:6e:1a:c3:aa:11:63:1a:85:50:d2:3d:
90:26:cf:ea:f3:88:b3:75:64:9c:b8:07:34:70:9d:
f8:93:49:84:19:20:2d:8c:65:c5:b3:27:31:fc:ad:
9f:aa:61:d4:11:f9:dc:e9:a1:ba:95:e8:9d:85:8b:
32:9b:a8:aa:48:05:89:f4:5c:49:c4:34:ed:63:1e:
41:35:fb:37:a2:a3:05:97:1e:02:84:24:57:6b:5e:
df:f3:08:0b:81:8a:ff:05:19:17:69:c1:93:44:ac:
75:50:53:94:51:07:c8:7d:72:18:95:1b:9f:e9:c1:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:B7:7A:56:A5:85:F3:AF:95:59:87:E5:99:0E:BF:8D:31:A0:98
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f0:cb:b4:60:56:37:f1:10:e7:07:b5:2f:34:f0:6c:d6:81:
ef:30:8a:43:65:5f:e7:a4:bf:9f:bd:86:77:65:b6:dd:d4:29:
7c:18:fa:eb:da:fe:ef:4c:5d:bc:26:39:c5:63:34:3b:99:26:
bb:6f:20:9c:39:30:3a:4d:a2:58:de:4f:e2:bd:59:6f:4c:8d:
e9:46:a4:03:a8:83:ff:0e:d3:19:bd:94:ef:50:12:80:e0:1a:
bb:32:c7:4e:ef:94:25:57:b5:ed:bb:f7:fb:51:d5:e3:08:5f:
8d:78:e2:31:b9:b1:dc:33:64:0d:5a:07:8c:d6:4d:1f:1f:e8:
22:e7:12:30:39:1d:2e:ae:d0:48:f6:8a:92:f0:d0:ef:07:62:
b8:35:da:45:bc:ba:c7:fb:63:0d:9c:95:82:bd:c4:7e:50:21:
92:b5:34:b1:b1:7e:aa:3d:ca:2e:ea:09:56:93:64:1a:05:5b:
01:e6:81:ba:24:91:f3:82:3b:20:a9:82:86:35:14:c5:52:04:
07:61:60:ad:16:5e:94:1d:4a:7f:cf:4e:1b:5f:60:76:f1:b0:
03:57:a8:12:18:39:be:af:fa:ba:29:0f:7d:fc:c1:e8:fe:cf:
3c:07:4e:09:8a:79:ab:df:32:95:5c:74:d2:d6:9d:ff:10:a4:
aa:3f:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 12:52:39 2026 by rpki-client