Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: WeiCoFGttz0abgAzOnVSm0+/dOm79Lsk4G6LjHhSQUQ=
Subject key identifier: D2:E5:4E:C8:21:7F:2D:68:9A:07:C6:8C:B9:AC:87:B3:D7:F9:1F:47
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 019D37C0CC35A333758DC26F18EC068E2E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 1272
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: bbz47osIb4c7uoiyZJGPaxcYxu8.roa (hash: yDftJ0V1zP6tNWS59D23nQ4A6wYjaRjcaKzcMkYk8QQ=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: CjSv0W8Q5YilaIgznNGqtI+x0aLfRDeRJqMT7GZD3Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cc:35:a3:33:75:8d:c2:6f:18:ec:06:8e:2e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=d2e54ec8217f2d689a07c68cb9ac87b3d7f91f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:5f:87:44:21:3f:11:e7:c7:ca:d4:54:b6:
38:55:da:e0:a4:23:2c:bd:c6:83:d6:d6:a4:28:81:
7e:f3:5e:db:fb:40:86:17:c6:7e:78:0c:d2:37:18:
a7:5e:12:bf:37:ab:4e:01:ee:87:60:8f:07:e0:15:
87:87:24:99:d8:9e:6c:e6:b3:4b:3f:e7:90:48:12:
59:4d:48:aa:ce:5b:b0:f0:9e:f1:d5:f3:78:e7:c6:
0c:14:ee:05:0a:e6:48:cb:d7:bc:35:5c:87:6b:1f:
e9:5c:05:75:54:4d:72:4f:51:0d:be:c0:bc:69:3a:
aa:4c:e2:28:00:6f:00:ad:c5:5f:d8:f8:19:85:c4:
ae:da:3d:ea:fa:0a:47:f1:4a:b3:b8:9a:9e:32:da:
43:98:64:46:d8:f7:1b:50:6e:ed:fd:02:ea:23:32:
c8:ae:da:65:16:ed:76:55:9b:c1:c7:12:a2:4a:4c:
cd:ac:37:8a:fe:d6:2d:19:26:e2:ae:b1:77:6d:0e:
90:0c:84:ed:b2:d1:87:31:a4:26:82:f0:f6:16:8d:
69:d5:5b:d0:8c:ea:42:a3:50:80:75:29:f5:a2:0d:
3c:d3:af:ac:41:23:73:c5:82:b7:cf:eb:d4:b2:b9:
68:9b:d5:1e:3c:ff:1f:d0:28:8a:42:a5:8e:1b:d0:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:4E:C8:21:7F:2D:68:9A:07:C6:8C:B9:AC:87:B3:D7:F9:1F:47
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:5d:41:2b:9c:13:af:14:3e:30:8e:bf:c1:e0:a1:0d:bb:2e:
af:e6:6e:e9:fb:6f:56:4d:35:b7:7b:4c:bd:fa:c9:ef:f3:d9:
4d:b8:38:cc:72:05:b9:ca:d5:34:9a:f7:6c:56:e9:6e:c6:cf:
0e:f4:92:ef:c1:40:2e:79:ac:49:53:43:0a:b3:20:86:b6:f8:
bf:46:4a:0c:0e:66:e0:ad:68:e6:95:fa:30:f3:74:71:dc:f5:
15:0f:3d:f1:a7:6f:40:12:35:9b:91:38:a4:aa:91:da:bf:5c:
c9:a6:2d:9a:c9:fe:75:f8:d8:f6:62:8f:14:d9:1a:64:e1:fb:
4f:6f:db:1f:a1:53:b8:79:02:ae:ba:5d:ed:2e:ff:c1:9f:55:
a8:0e:e9:60:5c:f0:77:c8:c7:fb:00:15:d3:7a:21:4f:1d:d8:
5f:59:c3:eb:ef:a9:10:10:6e:07:87:88:dc:e6:84:0e:9e:0b:
a7:03:26:93:2a:ac:d0:b2:46:25:0e:04:55:0c:ca:51:6e:d2:
17:9d:f2:7f:32:4b:3f:94:a3:6e:50:cc:51:9b:9c:41:b4:8c:
98:44:0b:3c:93:44:e4:0b:f7:5e:03:6b:fd:31:ff:e4:08:ca:
b3:a1:30:ce:56:36:17:31:9e:9b:21:1f:a7:0f:8a:c3:46:44:
10:d6:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:23 2026 by rpki-client