Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File: 92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier: 5uqz9L7g380XQzW7MIayJBKLcgcxVNYjk2dW1HHFbHY=
Subject key identifier: A5:A8:6F:F5:7F:87:EA:5A:D0:66:D7:7C:5A:7F:E1:CF:30:95:C0:69
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial: 019D3B2F4BBAC62CC704B53F6D52C2232874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number: 10A8
Signing time: Sun 29 Mar 2026 20:00:48 +0000
Manifest this update: Sun 29 Mar 2026 20:00:48 +0000
Manifest next update: Mon 30 Mar 2026 20:00:48 +0000
Files and hashes: 1: 3RUzNJxN8N-FLHx-HBIM3ssFpQs.roa (hash: SC6R0zqJ1csv36Fng7Scp1JucKAec+aLRs2P091gAAQ=)
2: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: f9jFLZSnp6z0Qy1pAxJj06zibw6fsPLSz31P52NP+eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:2f:4b:ba:c6:2c:c7:04:b5:3f:6d:52:c2:23:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Validity
Not Before: Mar 29 20:00:48 2026 GMT
Not After : Mar 30 20:00:48 2026 GMT
Subject: CN=a5a86ff57f87ea5ad066d77c5a7fe1cf3095c069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:62:90:71:0c:fc:05:4f:7d:19:56:69:51:
49:06:82:7d:84:92:66:93:b1:6f:0e:25:27:25:d4:
46:1c:6f:a9:5a:a5:22:d1:27:d1:b3:0a:2f:09:64:
a4:b0:7e:69:b1:a7:78:0f:d4:bc:96:01:9d:c4:aa:
1e:3b:6e:90:65:36:c3:59:de:04:43:69:83:0c:1b:
a2:39:7b:42:5b:c6:62:11:3d:55:d0:f7:1d:0d:a4:
fe:a5:f5:29:c5:39:bd:ed:91:82:99:8f:21:0f:a0:
ad:40:b5:60:fb:43:e4:a8:8a:92:43:32:4e:9a:3a:
cf:11:09:a5:ef:43:ef:97:e9:b7:b9:8d:3b:a7:2a:
0f:91:f2:20:1f:e2:e1:eb:00:75:73:2e:ea:0e:eb:
80:70:9d:74:eb:b9:bb:54:11:cf:ed:d1:ba:d7:6d:
22:19:8d:b1:e8:5c:f3:f1:ef:8e:9c:83:7a:75:52:
e6:8a:c3:18:d7:99:1d:09:ca:ff:25:c7:ca:d3:2f:
a5:ae:40:d3:d6:fd:0d:57:3b:c3:7e:44:0e:89:9c:
37:fa:4c:c6:c9:43:ea:03:22:42:07:ea:22:1c:14:
c1:c2:bb:f9:f7:09:93:a8:bf:1e:12:4e:b4:51:00:
33:fb:be:cb:05:55:3f:4a:79:8c:32:3d:02:36:b1:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:6F:F5:7F:87:EA:5A:D0:66:D7:7C:5A:7F:E1:CF:30:95:C0:69
X509v3 Authority Key Identifier:
keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:4d:6d:e8:7e:cf:91:84:a2:af:ae:b8:73:dc:11:5e:db:
c8:e9:37:16:5b:58:75:2c:7c:67:20:b5:3c:fe:97:5d:80:5e:
d4:e4:00:d3:f6:a5:80:42:44:30:a6:ee:a5:14:08:ce:9f:7e:
71:79:ea:fe:9a:e8:f9:1e:4a:4b:a7:1b:93:14:07:44:8c:53:
da:f5:13:0f:84:95:32:16:51:ec:f9:18:59:8c:40:c8:dd:b4:
0e:58:91:f6:bc:bd:e2:95:50:d9:cb:af:20:9e:98:ba:5f:da:
cb:e4:03:dd:43:bb:b2:5f:3e:9f:d5:c9:76:d1:c9:df:31:5e:
4b:d9:8b:35:3f:d2:b0:8b:5b:c3:6f:9e:59:bb:41:1b:82:0d:
7a:bb:23:f9:ea:a7:55:86:6c:e6:78:4a:23:fd:e7:36:9d:2d:
ea:ee:b5:47:e1:e4:1d:81:31:ba:97:a9:75:3f:58:e6:2d:20:
13:26:ef:53:ec:ef:b4:a2:ff:f9:ba:d1:e0:69:ac:45:69:f7:
8a:f8:a5:41:64:75:d6:1d:5a:ff:c5:f7:78:a0:0a:1b:e5:a3:
d7:93:8c:ae:ea:5d:39:07:a0:cb:89:ee:97:65:a9:06:9f:63:
92:8b:fd:d3:68:9e:c5:31:e2:7d:d0:9c:a3:75:df:24:42:60:
7e:67:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:27:13 2026 by rpki-client