Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
File: VwciOmKIeWeXTXTfTljijV5DfYY.mft (raw, json)
Hash identifier: 3Abs0OE4koF6OCB4BZIS5qGrOMEEEFhGZYH4pJe+BVQ=
Subject key identifier: 17:A0:DE:BA:32:3B:F1:BE:0F:24:89:F1:0A:D7:8D:FB:F5:70:37:C9
Authority key identifier: 57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86
Certificate issuer: /CN=5707223a62887967974d74df4e58e28d5e437d86
Certificate serial: 019D3865754D271C9020668831398A82B1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
Manifest number: 0190
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: VwciOmKIeWeXTXTfTljijV5DfYY.crl (hash: m9zTTAPrNZzBPkISk5fgJZkRxzvNHVRK5St96IvpvGY=)
2: p0ShZyZrwUY3Z8d8i-UzhwWKWVc.roa (hash: Xb9kX/JSqQvcz9Un5jVk/fOLkQYgqLNMso1gG+CAwN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:75:4d:27:1c:90:20:66:88:31:39:8a:82:b1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5707223a62887967974d74df4e58e28d5e437d86
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=17a0deba323bf1be0f2489f10ad78dfbf57037c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:51:16:7d:5d:04:55:5e:eb:2b:40:d1:58:
92:de:2c:90:a2:3e:ed:54:1f:4c:b3:31:b3:d0:e2:
4c:49:44:52:6a:58:27:18:42:67:27:0a:b6:c7:67:
a0:28:96:6d:d1:c2:e8:42:44:a5:3d:26:af:e7:85:
65:7b:d2:82:b3:93:09:04:9b:47:54:5e:f4:14:6a:
42:ba:55:1d:a9:aa:03:db:b2:64:38:8e:c1:ca:ae:
2f:4f:2a:72:e2:cc:14:5b:f1:d5:56:ec:e4:3a:a6:
1e:28:2f:31:85:64:ba:47:c6:70:4f:07:45:b1:52:
40:5b:dd:ea:67:dc:4c:16:10:ca:2a:15:cb:d5:30:
b6:96:59:1b:87:2b:17:b2:29:f1:8d:04:83:6d:79:
4c:42:27:ac:f2:72:8d:85:bb:41:ff:89:d0:67:31:
46:ff:c8:27:89:0a:6f:37:e8:f0:b1:42:99:8e:de:
d8:8d:9a:e3:64:d7:0d:5d:d5:f3:47:21:0a:cb:f7:
be:76:63:ea:d3:81:a8:e5:28:73:9b:d0:87:cb:f0:
7f:43:16:22:d9:4d:03:15:7a:35:79:f7:2d:ac:66:
48:49:0a:a2:80:71:e0:63:7c:4b:2a:bd:bd:96:a2:
1c:85:ef:d8:bc:e4:05:70:1f:56:c0:63:6a:b3:c5:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:DE:BA:32:3B:F1:BE:0F:24:89:F1:0A:D7:8D:FB:F5:70:37:C9
X509v3 Authority Key Identifier:
keyid:57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:99:15:c1:57:be:6f:8a:11:8c:4e:0e:12:aa:e0:e3:23:94:
65:c8:74:1b:4f:5d:48:7f:10:6c:44:06:ee:76:ea:d2:ec:42:
96:e9:58:d0:21:03:8f:66:0b:22:5d:ce:a6:d5:c7:34:91:4c:
74:9a:69:2e:2c:73:ef:73:3b:f4:0e:04:43:e2:c3:1e:47:c9:
a4:85:b0:0a:f3:60:1a:b2:2c:2a:b2:1c:bd:51:64:3a:a1:d3:
69:b0:9a:c3:b1:d1:83:02:4b:33:e1:87:f4:86:89:31:2c:5e:
f0:a0:46:97:0b:27:62:dd:2a:3e:7b:e0:3e:5d:84:76:08:b6:
58:33:e6:89:ad:97:7c:e2:73:90:7b:38:e2:38:0a:a2:4e:72:
b6:35:89:58:8e:f6:83:a7:2a:17:a5:2e:9c:92:6a:dd:2c:c3:
af:54:5f:52:88:29:3a:07:8e:9a:b9:f8:92:66:9e:db:fd:30:
bb:f0:40:42:3d:24:6b:4b:72:eb:5a:fb:7f:54:ee:dc:8b:05:
a5:20:22:c1:29:b1:f5:1e:80:18:8e:06:74:59:38:0f:8f:14:
1b:fe:85:29:13:8b:43:81:b7:ee:e9:b6:7f:4a:6d:01:e8:ac:
75:c2:38:98:82:fa:d6:60:19:38:2f:65:db:bb:75:4d:3a:03:
a1:ce:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:49 2026 by rpki-client