Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.mft
File: _K_VIH33oRSnrMP2CXpqVRvRjEo.mft (raw, json)
Hash identifier: qqmQO+tDpUTD/grqf8SsvPhDhVxmC1PdWwtw0LbjwXw=
Subject key identifier: 90:B4:3A:59:8C:50:92:65:CB:A8:BF:6E:A3:18:64:7E:05:47:18:5A
Authority key identifier: FC:AF:D5:20:7D:F7:A1:14:A7:AC:C3:F6:09:7A:6A:55:1B:D1:8C:4A
Certificate issuer: /CN=fcafd5207df7a114a7acc3f6097a6a551bd18c4a
Certificate serial: 019D39E5E29C04FFB3C3494E1BC3B8DE1295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_K_VIH33oRSnrMP2CXpqVRvRjEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.mft
Manifest number: 35
Signing time: Sun 29 Mar 2026 14:01:00 +0000
Manifest this update: Sun 29 Mar 2026 14:01:00 +0000
Manifest next update: Mon 30 Mar 2026 14:01:00 +0000
Files and hashes: 1: _K_VIH33oRSnrMP2CXpqVRvRjEo.crl (hash: NatO+dUMOsRAEr9RwCv9UMQSoo+AKc16/8y3KLQhiGo=)
2: axEycWf5krmxOnb41bjuLZiwLfI.roa (hash: LwLWXJAxbgoGPjjjARg0O01L7/SW1wOTSWcnk+gZU5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_K_VIH33oRSnrMP2CXpqVRvRjEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e2:9c:04:ff:b3:c3:49:4e:1b:c3:b8:de:12:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcafd5207df7a114a7acc3f6097a6a551bd18c4a
Validity
Not Before: Mar 29 14:01:00 2026 GMT
Not After : Mar 30 14:01:00 2026 GMT
Subject: CN=90b43a598c509265cba8bf6ea318647e0547185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:6d:2e:b2:00:76:b7:59:58:7a:10:28:e6:
f8:a2:9a:05:9c:b1:7a:61:4c:8f:40:b0:44:7d:0e:
45:35:28:b1:43:44:50:12:8c:33:42:71:68:dd:9b:
2f:03:61:a2:0d:34:81:1b:1b:35:1c:2a:28:58:03:
ad:2c:0b:87:f2:2d:93:d3:16:ec:37:1b:ff:68:02:
6d:ed:81:1c:ac:fc:5c:26:d9:fb:d7:1b:b1:fc:74:
00:6f:65:f8:7e:f5:95:49:fb:fd:4a:0f:18:9e:bf:
1b:9f:3d:ab:50:ff:93:c6:b2:27:98:2f:3d:7e:92:
15:f0:84:3d:87:85:d6:cc:02:fb:4f:ab:29:79:ad:
c6:c7:bd:86:06:23:5f:00:c8:e0:65:3b:a8:2a:d0:
ca:e0:9a:aa:90:9d:44:7c:f3:fa:46:57:97:be:6e:
85:9b:0f:00:1c:f7:bb:63:f6:3e:28:2d:31:0e:74:
b4:8b:15:5d:7a:2c:ad:40:4e:a8:0d:e3:62:ad:49:
d4:94:3f:fc:0d:3a:01:cc:3c:ae:2b:b0:ec:70:11:
1d:4a:b4:51:58:dd:90:04:88:72:3b:1a:68:9f:8a:
7a:97:33:b0:e0:a9:f3:9a:4a:41:9f:3f:85:16:77:
95:dd:51:65:a5:14:80:df:64:22:f1:1c:7d:f7:46:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:3A:59:8C:50:92:65:CB:A8:BF:6E:A3:18:64:7E:05:47:18:5A
X509v3 Authority Key Identifier:
keyid:FC:AF:D5:20:7D:F7:A1:14:A7:AC:C3:F6:09:7A:6A:55:1B:D1:8C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_K_VIH33oRSnrMP2CXpqVRvRjEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7ec4a-c645-4dd1-8771-6828b156b4cd/1/_K_VIH33oRSnrMP2CXpqVRvRjEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:af:bf:0a:92:e6:5d:33:dc:0a:33:4e:48:b3:02:c8:6e:
53:2c:d4:08:e2:7a:88:22:a1:9e:e1:7c:52:f1:92:4c:91:76:
23:f9:9e:b8:18:ab:57:da:54:e3:ed:0e:9e:7d:be:b1:da:eb:
bb:b9:af:dc:2c:7a:83:49:38:e0:cd:2b:2b:5d:0d:5c:f5:66:
83:33:a8:cf:63:50:4f:02:44:3c:02:11:18:6e:1b:9d:b2:e3:
12:f0:cd:4f:2e:6d:13:b9:40:fc:7a:af:f1:01:1b:bc:79:ec:
7c:5c:95:03:ca:d7:20:52:ee:27:30:b4:f3:62:f6:2c:0b:21:
1d:08:fd:7f:68:7a:1d:dc:0e:46:9a:76:1f:50:6e:26:cd:87:
a6:5b:16:90:db:cc:cd:e1:f1:60:24:82:98:5c:3c:ca:c8:9a:
16:d8:e5:23:0b:8f:91:e8:d8:b3:0b:56:c7:85:b4:ba:c9:82:
ce:d6:db:28:62:11:28:46:99:33:26:0d:d8:0b:8d:46:c8:8a:
07:1d:8e:9a:00:58:4a:da:0f:3a:3a:64:cd:bc:d0:af:c9:18:
4b:fd:b7:7f:db:db:6b:28:d2:6c:95:00:b3:66:04:d3:36:da:
8f:8e:bb:ac:8c:ee:fc:eb:1a:c8:8c:7a:a5:68:3b:32:f4:14:
e2:04:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:30 2026 by rpki-client