Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: yZetthIHjN0cqtLn7y2Am52HGP+X8oFVWi1eVEzZCRk=
Subject key identifier: 8F:CA:F2:50:14:4B:47:56:DC:09:D9:10:B0:64:13:F6:01:AF:5E:FE
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 019D3A549D6E7F1F7D9BDE19B263702733FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 1524
Signing time: Sun 29 Mar 2026 16:01:57 +0000
Manifest this update: Sun 29 Mar 2026 16:01:57 +0000
Manifest next update: Mon 30 Mar 2026 16:01:57 +0000
Files and hashes: 1: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: vLEKETWvj2XhzJcNGAtQcrWBe9Mtf8nf/4jM8rW4dnw=)
2: o-24i514DTkuFUh3dDk5UW1qU8I.roa (hash: 7BA95YKGV9RSAxhcO9Aev+WO5G9yWtM2WyXAovo8PLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:9d:6e:7f:1f:7d:9b:de:19:b2:63:70:27:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Mar 29 16:01:57 2026 GMT
Not After : Mar 30 16:01:57 2026 GMT
Subject: CN=8fcaf250144b4756dc09d910b06413f601af5efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:ce:dd:6c:fc:22:6d:4f:f1:27:20:46:a2:
34:8a:33:c0:f8:0e:e3:02:29:8f:d5:28:2c:3b:df:
0f:db:2f:bb:19:08:67:d9:d1:0b:6f:a4:3e:fe:a8:
93:3f:44:b1:90:fd:83:d9:70:74:3e:fa:89:95:39:
62:30:68:67:09:d9:31:3e:24:dc:04:be:09:e2:93:
ff:5c:2d:53:c5:4a:50:ff:a9:e4:e4:38:97:31:6e:
5a:83:63:d9:75:d5:e2:ad:41:3b:d2:69:0c:a4:d7:
c1:27:c0:f3:45:80:c4:93:d2:aa:ed:d4:47:65:f4:
fc:4c:3b:29:f8:35:6a:3c:f6:eb:d2:6a:14:35:ec:
66:77:48:5f:24:c2:e7:f2:bc:3b:45:7f:93:5c:7d:
46:99:a5:1b:88:ca:92:3e:ec:4f:27:42:04:28:58:
9f:d7:15:bf:ed:a5:f1:af:cd:36:a6:20:c8:e3:a5:
da:f2:65:21:4d:b4:72:c7:dc:1b:81:43:24:e2:72:
d6:43:78:f6:fb:24:fd:9c:b0:95:60:ac:db:55:1f:
d5:ee:08:3e:3d:a4:d5:4b:5b:68:1d:3b:56:e5:5b:
6c:bc:c1:01:0a:f6:0c:60:cf:13:4f:0a:3d:d6:e6:
61:0b:b8:c5:8e:bf:00:37:01:8b:89:2d:ff:68:67:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:F2:50:14:4B:47:56:DC:09:D9:10:B0:64:13:F6:01:AF:5E:FE
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:5d:73:e4:dc:1a:17:07:5a:d1:52:68:a2:c5:20:5b:7c:
d2:85:66:54:61:04:e7:a1:25:14:9c:20:10:94:81:68:2d:6d:
17:fa:ae:41:29:f2:9d:f2:9d:e9:0b:9b:f1:d5:17:e9:e7:b1:
06:8a:4d:b7:5b:4a:53:e6:37:00:ec:56:8b:51:ee:01:96:5c:
9a:c2:49:07:9c:cf:3a:2e:98:2a:3c:cf:dc:e4:00:74:4f:5b:
82:87:c0:b2:01:86:e7:67:54:b9:c7:d7:94:82:c2:2a:8b:1d:
59:57:07:e9:fd:c6:ae:30:4d:41:c8:12:f4:3f:47:0c:1e:46:
bf:7b:cc:83:e3:96:f7:29:fd:56:d5:3c:e8:5a:47:6d:3d:37:
a7:fb:37:8d:65:f1:3d:f0:2b:13:f2:2f:29:fe:b9:a6:96:3d:
76:0d:5a:27:81:4e:59:ed:1e:f5:f8:29:ae:7e:b0:ed:25:f4:
2a:66:77:c9:e8:0a:93:cf:86:98:be:9f:3e:1e:d5:2e:57:22:
37:0c:e5:a0:13:2d:e9:b7:f9:90:99:9c:29:74:80:b4:22:ef:
81:6e:3d:a1:b8:30:f3:2b:91:56:76:80:ff:2c:59:16:3b:7c:
27:d1:11:b1:9d:ba:51:ab:ed:2f:2a:68:4b:a4:99:ea:90:cf:
16:39:ad:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VJ1ufx99m94ZsmNwJzP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTY2MGI0OGM4ZjA0YzlhMzJkY2RlYTFjZmVlZTUxODA0
NDZiZDkwHhcNMjYwMzI5MTYwMTU3WhcNMjYwMzMwMTYwMTU3WjAzMTEwLwYDVQQD
Eyg4ZmNhZjI1MDE0NGI0NzU2ZGMwOWQ5MTBiMDY0MTNmNjAxYWY1ZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb7O3Wz8Im1P8ScgRqI0ijPA+A7j
AimP1SgsO98P2y+7GQhn2dELb6Q+/qiTP0SxkP2D2XB0PvqJlTliMGhnCdkxPiTc
BL4J4pP/XC1TxUpQ/6nk5DiXMW5ag2PZddXirUE70mkMpNfBJ8DzRYDEk9Kq7dRH
ZfT8TDsp+DVqPPbr0moUNexmd0hfJMLn8rw7RX+TXH1GmaUbiMqSPuxPJ0IEKFif
1xW/7aXxr802piDI46Xa8mUhTbRyx9wbgUMk4nLWQ3j2+yT9nLCVYKzbVR/V7gg+
PaTVS1toHTtW5VtsvMEBCvYMYM8TTwo91uZhC7jFjr8ANwGLiS3/aGcWEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/K8lAUS0dW3AnZELBkE/YBr17+MB8GA1UdIwQY
MBaAFFTmYLSMjwTJoy3N6hz+7lGARGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDct
YTg5YWJlNDVlZGY2LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDctYTg5YWJlNDVlZGY2
LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaddc+Tc
GhcHWtFSaKLFIFt80oVmVGEE56ElFJwgEJSBaC1tF/quQSnynfKd6Qub8dUX6eex
BopNt1tKU+Y3AOxWi1HuAZZcmsJJB5zPOi6YKjzP3OQAdE9bgofAsgGG52dUucfX
lILCKosdWVcH6f3GrjBNQcgS9D9HDB5Gv3vMg+OW9yn9VtU86FpHbT03p/s3jWXx
PfArE/IvKf65ppY9dg1aJ4FOWe0e9fgprn6w7SX0KmZ3yegKk8+GmL6fPh7VLlci
NwzloBMt6bf5kJmcKXSAtCLvgW49obgw8yuRVnaA/yxZFjt8J9ERsZ26UavtLypo
S6SZ6pDPFjmtRg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:48 2026 by rpki-client