Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier: GRnq7I19gkj7kuM3jvJ9hPmjYsEpFaW0OcYhW3ZLOKQ=
Subject key identifier: A0:2D:7A:C8:63:E4:3F:8D:EE:0E:5A:BA:25:9E:0E:18:40:39:F1:C3
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 019CE66D100B979010C4D6E356086CAD935B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number: 173A
Signing time: Fri 13 Mar 2026 09:00:33 +0000
Manifest this update: Fri 13 Mar 2026 09:00:33 +0000
Manifest next update: Sat 14 Mar 2026 09:00:33 +0000
Files and hashes: 1: DEI7QCWRV6X21080tz8p9YYE_qI.roa (hash: EN4qKM5rhCJ+s58Drux9dsURlwu/EvBmHKAt2KAeoi0=)
2: SLDmAijGZOcd5frrWpDur506vuM.roa (hash: fXeTnCjaeXZCdY9tyeELwVUATm4Y5QQiz2mZBpqAt/g=)
3: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: fvT6SJxNOyEIn6zexi0GspYBV5NvJirbp+JBPuFEznM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:10:0b:97:90:10:c4:d6:e3:56:08:6c:ad:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Mar 13 09:00:33 2026 GMT
Not After : Mar 14 09:00:33 2026 GMT
Subject: CN=a02d7ac863e43f8dee0e5aba259e0e184039f1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:4c:db:d3:aa:7a:45:8e:eb:c1:bb:00:ab:
5c:8c:bb:b1:43:c5:86:48:47:9b:de:c2:1f:99:14:
50:6b:bd:55:13:60:1c:c0:19:ab:a4:b3:ab:71:46:
90:9c:14:65:ba:77:0a:51:9e:3c:4f:27:77:8b:34:
55:74:b6:4b:63:db:ae:52:66:04:28:78:a5:d1:50:
b5:90:b6:2c:73:90:ff:2b:f5:5b:67:17:ed:04:a9:
e8:60:7f:67:80:30:50:48:9b:a4:ad:c0:f9:31:16:
80:14:1d:60:f4:bf:27:32:e3:84:8c:88:1e:3f:42:
66:12:0a:d6:1c:5e:39:12:10:6a:84:94:10:8e:19:
e8:c6:1f:07:36:46:51:11:32:39:34:9b:08:58:2c:
89:eb:da:0c:35:23:c9:8c:33:2b:9b:c5:b3:31:8a:
66:32:11:8b:9c:90:aa:04:a0:d6:fc:4a:35:6f:86:
76:b4:61:60:c6:cc:96:08:d6:84:1f:69:83:dc:17:
db:82:bb:0b:fb:7a:1e:8d:19:b6:ac:04:bc:bf:11:
fe:ea:2d:0e:64:f5:48:9f:f1:5f:5b:78:8b:ad:af:
2c:90:5f:e9:76:b7:6f:e4:7b:28:7b:59:ef:f7:51:
ef:9b:90:2e:f5:f2:b4:5d:06:52:dc:c2:24:a1:ce:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:7A:C8:63:E4:3F:8D:EE:0E:5A:BA:25:9E:0E:18:40:39:F1:C3
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:d5:be:b9:da:7a:30:91:ec:09:55:80:61:ea:63:37:8e:
c0:4f:68:65:d8:1c:a9:90:c8:05:56:d7:33:d4:31:03:23:99:
00:48:98:e6:02:3e:fe:d3:e4:6d:ab:cd:5a:49:57:24:32:2c:
d8:e0:f1:b8:b0:7a:f4:08:15:67:cf:9a:c2:ab:ea:f4:3d:82:
b5:61:6e:0f:6b:04:fb:62:67:48:de:f6:c0:5b:d0:c7:70:30:
5b:38:08:ee:1b:16:7b:c9:1d:80:fd:e2:62:bb:65:3d:dc:13:
34:da:12:aa:f9:c0:d1:ba:e7:fd:e8:81:50:20:d3:5f:f0:e2:
02:d0:70:21:93:35:e9:70:a6:c1:19:4d:10:58:12:97:e8:dd:
a1:e0:80:96:eb:d6:8c:4f:70:02:7d:a0:90:ee:0c:82:54:f1:
e6:62:7d:82:81:df:6d:a9:0b:e5:e0:d0:92:1d:f6:60:64:d7:
b2:9e:e6:93:53:a0:1a:c2:35:3e:ee:4b:fb:b4:d8:7c:f1:4b:
bf:4e:62:e5:32:9e:54:c6:e0:4a:4a:f3:d3:b9:0b:4f:f1:33:
c6:cd:ae:a9:98:43:e3:b9:cc:e7:ea:2f:dd:5d:d4:ca:00:05:
8e:48:a5:b7:3d:39:fb:8e:7c:04:3c:54:f4:0d:76:a4:c7:47:
0a:65:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:14 2026 by rpki-client