Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
File: VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft (raw, json)
Hash identifier: jHRuz5Mpdk06ZkYI8mOvqNrpNngEhH1CgrHy84uZZ3M=
Subject key identifier: 63:EC:9A:47:91:31:4F:F6:E9:6E:34:31:A2:75:1B:BD:94:65:36:33
Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
Certificate issuer: /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Certificate serial: 019D394092D7016D46997F229310D8FC531D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: F_4HRfGZ4DSq8Yan6ITw9ijxBSw.roa (hash: N5WEBXopx2PPKlcC41tM4IKPvt/ddBOWJi67v3cU+5Q=)
2: VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl (hash: N+VGcA7dMnMqeySacHKEcMrbuIh7s8VWEDrSkJ2fbVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:92:d7:01:6d:46:99:7f:22:93:10:d8:fc:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=63ec9a4791314ff6e96e3431a2751bbd94653633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:73:bd:98:74:e4:e2:30:5e:66:5e:7a:4d:
da:2e:44:5c:61:9c:03:89:24:1c:56:8f:76:07:03:
98:74:4b:3d:e7:28:8c:2c:24:60:7b:2d:f2:11:78:
b2:13:73:e1:96:e3:8a:3c:7d:b9:45:aa:50:ac:1a:
80:76:cd:a6:59:c7:27:c9:7a:53:5d:3f:a8:c9:6a:
0d:21:c7:c6:ba:2c:5e:a5:9d:9f:7e:f7:14:24:29:
2d:fe:15:74:50:cc:b0:1c:2f:47:65:2a:a5:e2:0c:
1d:1f:57:84:ee:6d:76:89:1b:0f:a1:ba:2d:5b:d6:
80:85:a3:96:2f:af:31:7d:6f:d3:bc:9c:05:a3:d9:
ed:4f:43:00:4e:1e:4a:28:1c:3f:b1:d4:2d:52:bc:
25:77:43:bc:bf:00:80:3c:fc:28:9d:2b:c6:11:03:
ff:69:61:27:cf:43:af:b3:a6:5b:73:0d:71:db:f9:
ba:94:aa:28:ad:10:05:e0:ad:0a:aa:45:06:65:55:
27:4b:1d:63:19:33:d6:c2:81:53:a3:41:8e:48:8a:
33:e2:1a:aa:68:ab:19:2d:6f:2a:29:68:a3:23:07:
38:fb:5b:6b:c0:b2:10:de:09:81:37:2c:f5:78:b5:
63:d3:4f:11:17:f2:54:45:e7:c2:2d:0e:cc:d9:78:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:9A:47:91:31:4F:F6:E9:6E:34:31:A2:75:1B:BD:94:65:36:33
X509v3 Authority Key Identifier:
keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e4:90:a7:ab:2c:d3:47:13:43:34:c8:39:c8:42:19:5c:56:
fc:72:a8:b8:ba:e5:04:9d:ce:fa:35:86:a1:05:b5:0e:e0:f9:
82:bf:9b:88:f5:de:fb:43:42:cd:3d:b5:17:88:db:8e:44:12:
85:fc:b8:63:14:46:08:93:dd:5a:5b:3d:e3:57:af:8a:e1:76:
4c:c3:18:61:04:6c:88:3e:fd:c2:7e:94:c6:89:5e:44:90:bd:
01:0e:6e:88:a0:57:05:97:95:02:c2:0f:da:1c:87:7c:4d:83:
f8:27:c8:9c:fb:48:13:a4:bc:32:9f:4e:17:28:37:bd:40:67:
4c:56:41:66:17:a9:74:b1:ab:7f:f5:27:a5:f2:d9:c8:14:11:
8b:5b:38:57:7d:24:f0:a6:0f:ca:65:b3:92:7c:60:74:a7:af:
1d:93:a5:60:e2:ef:25:69:a5:63:cc:52:79:3b:b1:c0:e0:6e:
8d:50:2f:42:94:0e:d4:d9:f1:8f:b4:df:ef:14:ab:00:93:53:
71:10:50:91:b6:48:ee:f1:3a:d3:f1:b9:bc:0a:ad:2d:88:6e:
3e:b1:30:9f:98:23:be:03:80:22:38:95:6b:fb:9f:bf:2c:a4:
e1:05:68:45:43:5d:bc:8e:1b:3f:59:59:44:96:ee:75:a2:21:
fc:4b:b4:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJLXAW1GmX8ikxDY/FMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OTBlZmEyM2M3NzhlZjc0NzBmM2FjMGE5MDU2MTliYzdj
Mjc3ZTQwHhcNMjYwMzI5MTEwMDI2WhcNMjYwMzMwMTEwMDI2WjAzMTEwLwYDVQQD
Eyg2M2VjOWE0NzkxMzE0ZmY2ZTk2ZTM0MzFhMjc1MWJiZDk0NjUzNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN1zvZh05OIwXmZeek3aLkRcYZwD
iSQcVo92BwOYdEs95yiMLCRgey3yEXiyE3PhluOKPH25RapQrBqAds2mWccnyXpT
XT+oyWoNIcfGuixepZ2ffvcUJCkt/hV0UMywHC9HZSql4gwdH1eE7m12iRsPobot
W9aAhaOWL68xfW/TvJwFo9ntT0MATh5KKBw/sdQtUrwld0O8vwCAPPwonSvGEQP/
aWEnz0Ovs6Zbcw1x2/m6lKoorRAF4K0KqkUGZVUnSx1jGTPWwoFTo0GOSIoz4hqq
aKsZLW8qKWijIwc4+1trwLIQ3gmBNyz1eLVj008RF/JURefCLQ7M2Xh2bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPsmkeRMU/26W40MaJ1G72UZTYzMB8GA1UdIwQY
MBaAFFaQ76I8d473Rw86wKkFYZvHwnfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2It
ODNhZTJmMjE0MTIxLzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2ItODNhZTJmMjE0MTIx
LzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeSQp6ss
00cTQzTIOchCGVxW/HKouLrlBJ3O+jWGoQW1DuD5gr+biPXe+0NCzT21F4jbjkQS
hfy4YxRGCJPdWls941eviuF2TMMYYQRsiD79wn6UxoleRJC9AQ5uiKBXBZeVAsIP
2hyHfE2D+CfInPtIE6S8Mp9OFyg3vUBnTFZBZhepdLGrf/UnpfLZyBQRi1s4V30k
8KYPymWzknxgdKevHZOlYOLvJWmlY8xSeTuxwOBujVAvQpQO1Nnxj7Tf7xSrAJNT
cRBQkbZI7vE60/G5vAqtLYhuPrEwn5gjvgOAIjiVa/ufvyyk4QVoRUNdvI4bP1lZ
RJbudaIh/Eu0Bw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:26 2026 by rpki-client