Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: 3HnI2R+fUeD6Z5qpX+6RW2NLq3Kr2FAg7Uv+JZaG12o=
Subject key identifier: 78:FF:23:B3:CE:B4:A5:93:15:D8:EB:C0:0E:64:42:FD:8E:FD:BA:D8
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019D390A3FFAB47FF495CDD1C9C9908ACEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:01:06 +0000
Manifest this update: Sun 29 Mar 2026 10:01:06 +0000
Manifest next update: Mon 30 Mar 2026 10:01:06 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: ucA3iWiSZ28Ts34LB3MSgg9Yfavkfzj5CA2OhTMZCeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3f:fa:b4:7f:f4:95:cd:d1:c9:c9:90:8a:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Mar 29 10:01:06 2026 GMT
Not After : Mar 30 10:01:06 2026 GMT
Subject: CN=78ff23b3ceb4a59315d8ebc00e6442fd8efdbad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:85:97:85:3e:89:f2:88:b8:9c:ae:27:78:
62:47:99:fc:1e:a7:9a:00:e5:26:c4:61:05:f8:f3:
0e:9f:f1:4a:5e:d8:85:29:4d:ac:5a:55:b6:53:f7:
7b:ac:cd:7c:29:c8:81:4f:53:99:b3:43:89:9f:82:
14:78:6e:11:3c:05:98:22:f2:cb:75:b2:d2:2f:02:
5b:ce:50:be:ea:a8:d4:b6:63:43:d3:da:ec:74:8e:
a2:54:67:f9:9f:e6:99:89:c6:92:bb:a8:cb:dd:b8:
a3:a8:56:c7:34:9d:73:e9:21:7d:df:84:6b:dd:87:
5f:3c:98:ad:e2:81:46:10:c1:88:20:6e:53:f5:43:
c0:2a:98:85:13:81:64:dc:5b:91:33:75:a4:b8:4c:
10:0f:44:c3:e2:e2:8b:11:ff:20:d1:a3:3c:51:17:
4e:66:bf:2f:a2:bc:43:8f:4c:31:e1:13:78:93:98:
49:c9:3c:fa:6b:f5:4a:41:23:f6:31:0e:0c:be:88:
43:8c:84:4c:40:13:49:db:5b:3e:53:3d:26:b6:b1:
97:65:f8:4f:5a:31:b9:2d:33:3e:3e:ce:ab:60:2c:
57:c2:33:a2:90:e7:44:43:79:92:6e:16:dd:8a:ad:
3c:3c:0b:d8:fc:0b:b7:80:e6:37:e5:92:e2:d1:1c:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:23:B3:CE:B4:A5:93:15:D8:EB:C0:0E:64:42:FD:8E:FD:BA:D8
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a0:01:fb:8b:a9:3d:df:ac:f8:0c:83:44:37:6e:4b:d0:5e:
75:53:59:50:27:26:bd:b8:61:4c:95:99:7b:86:09:1c:fb:d0:
c4:bc:b0:f7:e6:08:b3:68:08:55:33:6f:96:8f:ed:42:ef:ed:
1e:38:59:ef:ca:b0:3d:72:ba:42:80:30:1a:c5:3c:aa:1d:ec:
4f:c1:9b:36:de:d0:9a:39:05:52:14:a2:72:43:9d:6e:b2:49:
72:8e:72:38:de:78:d0:e9:47:01:e0:0d:ea:1c:e0:f8:5d:35:
3b:d3:c3:ab:66:88:2a:83:1f:63:f5:52:74:e3:95:e3:b8:53:
ff:fb:dd:15:0c:14:52:32:1d:ec:c8:5f:bf:5c:3b:0e:c1:8e:
2f:f1:c0:35:da:47:dc:7f:f1:6f:b3:20:86:0e:26:69:3d:39:
ab:ad:bc:a8:19:b4:fa:df:d6:b3:6b:59:92:a5:58:c1:06:4d:
3b:26:74:d0:c8:ef:b5:db:97:34:7c:12:e0:a0:65:54:0c:34:
a3:d4:ab:2e:57:81:fe:83:3a:58:a4:96:3d:e2:fd:bd:fe:4b:
fb:c7:b8:ec:89:2d:6e:90:02:6b:29:77:d4:4e:0a:6c:74:9a:
48:33:a6:34:d9:fc:46:51:66:1e:cc:90:f5:08:91:9e:98:9c:
7f:ba:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:16 2026 by rpki-client