Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: jXg2BZss5ByqRpKOn9iMz/8M2xBufwejv5LOJT/7prk=
Subject key identifier: C5:90:11:FC:26:0F:C0:98:C6:42:19:20:09:63:58:45:5E:51:3A:CC
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019D37C0B6DF2B7D1FE39373BAFF038FDD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0C90
Signing time: Sun 29 Mar 2026 04:01:09 +0000
Manifest this update: Sun 29 Mar 2026 04:01:09 +0000
Manifest next update: Mon 30 Mar 2026 04:01:09 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: JaKOeVdbaLMuYTK7RgmIYXx7JOar63WWGzXlA2qAXm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b6:df:2b:7d:1f:e3:93:73:ba:ff:03:8f:dd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Mar 29 04:01:09 2026 GMT
Not After : Mar 30 04:01:09 2026 GMT
Subject: CN=c59011fc260fc098c6421920096358455e513acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:c7:6c:32:88:97:54:b7:07:b5:f3:1d:3e:
d1:3f:59:e6:ed:4a:6f:99:28:37:96:60:f1:bf:08:
f8:84:e5:58:46:e6:5f:4f:f0:7e:68:6b:54:1a:47:
37:5a:05:61:c5:32:99:75:62:43:9e:ab:37:c5:e0:
20:9c:64:e8:85:f8:be:17:18:a3:e0:16:7c:3f:a8:
2c:0b:fe:5b:54:3e:38:1f:c9:f8:fd:77:d7:3f:f5:
a1:0b:ef:ea:23:f7:d2:b8:0e:af:f8:e1:f6:6e:f7:
ba:ca:5e:57:58:b2:31:05:bf:02:d0:95:42:c3:2f:
35:56:6a:2f:e0:55:c1:9a:d9:3f:8b:ba:49:01:f2:
c7:8d:a3:17:f2:28:47:36:bf:6a:47:4e:a1:8e:12:
81:e3:5c:d7:ce:02:aa:14:87:cf:7b:38:76:ab:f5:
d2:68:31:16:3b:07:85:0b:0f:36:07:86:7f:30:67:
8f:9f:df:1f:4e:98:f3:d8:e0:e7:65:42:ab:65:4e:
e7:12:11:c4:b7:06:36:cc:49:88:ae:60:93:48:dc:
a0:82:87:60:19:21:c9:76:39:bd:ce:89:51:c7:f8:
de:c4:44:d1:bf:3c:14:f0:62:15:37:60:39:9e:b1:
66:05:a2:9a:41:08:56:bb:b1:c7:3f:66:11:7c:6c:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:11:FC:26:0F:C0:98:C6:42:19:20:09:63:58:45:5E:51:3A:CC
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c1:77:7c:1d:8b:6b:13:22:3a:42:65:4a:08:97:34:74:8c:
b2:64:3b:c8:8a:dc:ef:0c:60:01:e4:7f:03:3a:7b:fa:39:6b:
e3:07:75:41:8c:40:f4:a8:72:ab:d4:13:f4:74:d1:f0:09:1a:
99:c1:22:ee:84:a8:d5:58:fb:fd:47:e0:83:cb:e1:12:ea:04:
f3:02:79:f5:bb:0c:41:0b:28:49:4f:25:78:ec:26:a6:42:8a:
0e:65:32:70:12:29:6e:c3:58:95:18:c0:84:66:68:db:88:e6:
71:e9:d3:3b:80:86:ad:e6:50:83:27:a9:48:6f:ca:25:f0:ea:
e9:0f:40:a0:64:12:c9:5a:48:a7:e6:19:19:27:b5:4c:bc:96:
1a:6e:0c:df:39:8a:11:7f:4c:24:87:91:0b:a2:f5:ed:e0:7f:
29:dc:bb:ed:9f:03:4d:38:61:b5:8d:76:66:5a:61:5a:40:9e:
bb:bd:4f:f4:27:95:e3:18:e7:8a:01:b0:a4:fe:e2:69:fe:92:
ca:4b:e1:fe:71:b2:6f:d4:c5:3f:72:97:bf:f8:b4:44:32:4c:
06:c7:ff:78:44:de:c5:2d:e7:f8:af:b0:c2:88:b3:6e:9e:ab:
9c:9c:3d:7c:b6:97:10:20:35:47:da:c4:a1:37:6b:53:28:61:
09:0d:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:27 2026 by rpki-client