Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: KE43pUdf5ZiQf5jERQOcWmz7gEitJfYdW8wPKklAS8I=
Subject key identifier: EF:79:3D:77:B1:2D:C4:BA:15:27:B4:85:54:BC:9A:7F:5E:B8:BB:74
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 019D38D3ADBBB2F4579C92149C88B54F1258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 06C6
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: oj97Ng3JgLvsyAIw1yTVTtpM69s.roa (hash: vIQENoGSkGXr7OaQKpDZcQK7eabU4UndqxZJRNZu8JU=)
2: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=)
3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: 9oFjPAbo6hDj4f15sxYKFVWrxXsMsh0Ns11pzQVjYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ad:bb:b2:f4:57:9c:92:14:9c:88:b5:4f:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=ef793d77b12dc4ba1527b48554bc9a7f5eb8bb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:14:4e:2e:87:01:36:78:b0:e7:aa:0a:1c:
c4:a5:9b:d9:4a:42:dd:d9:58:07:b1:f6:6c:c1:04:
72:c0:b0:64:b2:94:13:e4:19:32:64:53:64:9d:a5:
c7:9d:f8:a8:64:58:fc:e0:7a:eb:74:67:07:ef:16:
5b:c6:22:f5:60:57:aa:23:de:b4:ae:08:69:36:d6:
1d:39:4e:eb:f4:dd:26:e5:10:c4:47:a1:e0:10:08:
52:26:ef:b9:3f:84:df:b6:3a:80:60:13:3e:76:38:
e6:12:48:8a:41:cc:71:52:90:21:30:36:86:c6:74:
55:1f:b6:91:3c:aa:b2:53:2e:80:46:2d:dd:c1:ae:
51:7f:36:92:08:02:26:ca:26:fc:03:1e:e8:4a:9c:
e6:1b:90:7e:c0:3e:18:45:dc:2e:5c:ef:87:3b:83:
b2:b8:65:f5:70:6c:2b:44:ce:08:6a:e0:f1:6f:87:
97:2a:53:ae:1f:76:3d:e8:84:89:93:3b:b8:83:22:
b2:ae:70:c2:9e:ce:52:3c:9c:b5:41:75:ab:10:02:
69:41:a0:9d:9b:ee:85:75:16:2a:2f:05:28:7e:4c:
ff:fd:49:34:63:5a:87:46:ab:4b:6d:16:e3:60:e2:
fc:a3:8a:36:50:44:e0:0b:49:92:d0:d3:25:91:f9:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:3D:77:B1:2D:C4:BA:15:27:B4:85:54:BC:9A:7F:5E:B8:BB:74
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1a:ab:4a:08:7c:74:2f:90:20:75:31:81:7f:48:55:dc:15:
1e:bd:64:61:6d:71:c4:e2:67:f0:46:f2:6a:c2:d6:68:ca:b4:
7a:01:3e:ab:9e:ca:2c:48:37:05:6b:e2:00:8e:04:3c:c1:83:
ce:92:aa:65:65:22:7d:91:f4:73:62:08:d2:ed:48:b9:87:c3:
b4:bd:aa:48:6a:23:d5:e9:16:93:b5:85:b9:0c:77:12:03:8c:
5b:a3:ce:54:49:ce:0c:ab:e2:89:14:49:9f:67:d1:1d:6d:3e:
d9:20:80:0e:27:e9:d9:0c:95:94:e5:35:ef:09:2b:b4:f1:69:
a7:65:81:34:9e:52:35:b8:c3:4f:9b:ab:ce:30:72:27:dc:ff:
49:64:77:2f:12:8e:ba:c6:78:6e:b6:71:cd:e7:55:b6:fd:ff:
fd:a0:e3:23:56:96:25:ec:1f:71:56:4a:01:27:4b:61:74:c6:
75:21:fc:b7:c6:98:55:6a:48:89:a9:91:b3:c1:2a:14:a3:22:
55:0f:f5:ab:42:9e:69:64:27:cf:04:10:d2:92:08:a0:5d:ae:
51:6b:27:29:0d:7b:07:ab:c0:d8:d2:c0:cf:b6:03:82:ad:86:
75:7f:9a:52:58:47:79:83:38:55:60:16:a0:3b:8e:e4:43:e8:
1c:39:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:17 2026 by rpki-client