Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: nhNApwqzy1j7lJjiDXdRPNtUeipSVyVHIonldBqCyIY=
Subject key identifier: A8:7A:37:64:E2:9D:72:1F:E3:32:A2:D1:23:72:08:E0:CF:34:6F:2C
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019D058A6912D0DB051FEFF6C4BBBB93A71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 18B0
Signing time: Thu 19 Mar 2026 10:00:50 +0000
Manifest this update: Thu 19 Mar 2026 10:00:50 +0000
Manifest next update: Fri 20 Mar 2026 10:00:50 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: 6TgAKIt/O7YWrIPLD3CujJLM4tva14wwqjVQJ0JZKAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8a:69:12:d0:db:05:1f:ef:f6:c4:bb:bb:93:a7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Mar 19 10:00:50 2026 GMT
Not After : Mar 20 10:00:50 2026 GMT
Subject: CN=a87a3764e29d721fe332a2d1237208e0cf346f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:78:88:fa:d9:de:9a:3a:69:1e:9f:96:d4:
16:f2:fe:7b:bd:10:f4:85:2b:ac:52:dc:81:79:7f:
06:c4:5f:b0:fe:ee:d6:9a:20:e0:a0:b6:e9:b3:12:
12:bf:30:eb:ba:d3:b9:3d:a7:b9:60:0b:5c:34:67:
af:07:7b:4d:af:1a:37:59:e4:4c:83:9b:54:ff:be:
fc:8a:b0:a9:ed:7f:14:95:53:1a:a5:08:e0:c9:e3:
e5:1a:2f:6b:75:50:64:d1:8f:12:d1:5b:23:dc:d3:
f3:39:cf:35:8c:89:c7:3b:98:48:11:6e:6e:f2:f9:
c2:4e:6f:a8:4a:57:fc:22:35:8a:11:e9:40:aa:a4:
87:8b:49:87:1d:30:1c:9d:18:7c:e9:92:6f:b6:bc:
ee:d8:cf:c0:15:88:fb:f2:fb:72:8f:8b:a6:d0:37:
33:0c:ea:26:5d:d8:26:6d:3b:7a:59:b5:a4:d0:12:
b6:d1:00:d1:11:39:d8:58:eb:58:85:8b:52:05:d6:
0c:43:b7:53:58:ad:0e:81:9b:d6:dd:d2:05:46:a6:
02:02:f4:7a:25:1b:fd:2e:82:ce:58:74:6f:4e:88:
c0:b8:33:de:9b:e6:05:76:83:6a:c9:70:dc:91:33:
fd:b2:39:a8:a3:b1:fd:98:ce:72:4f:3a:d6:81:8b:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7A:37:64:E2:9D:72:1F:E3:32:A2:D1:23:72:08:E0:CF:34:6F:2C
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4a:3c:05:40:0a:cb:b2:2d:89:b6:64:65:2f:e7:eb:15:2a:
23:c0:19:bb:9f:2e:a6:7c:2a:d8:6f:0e:bd:22:06:91:49:d1:
4f:24:b3:a5:56:3b:56:3a:ed:b4:ee:32:9d:48:71:43:72:22:
2b:17:0e:ef:8f:70:84:db:15:03:2e:53:35:18:5b:3f:75:c9:
d6:8a:1c:35:78:4d:6d:07:67:12:c9:c6:91:59:84:aa:29:b2:
8b:db:cf:17:eb:66:3d:59:09:cb:b8:1a:94:fa:20:f5:2c:52:
29:24:fc:e2:c0:74:c1:e7:89:c2:11:bd:3e:0b:f8:de:c0:41:
a4:92:36:f9:65:58:66:2c:e3:8f:70:ce:95:b6:ec:42:d7:f2:
95:0f:01:8c:e7:55:a2:95:31:88:0e:36:e0:36:1d:34:90:5b:
f5:26:40:5c:54:12:13:e2:18:81:b4:19:c7:23:33:ee:70:5c:
77:67:a2:7e:99:6c:08:10:81:28:59:86:be:0b:fe:8a:7c:9d:
35:8e:a9:78:d8:22:6c:3c:5e:1b:ed:d5:e0:1e:26:4b:45:f7:
b4:f1:7f:33:ef:e1:54:05:85:0b:e1:04:c4:fe:42:9a:05:fb:
bc:1b:d0:51:c7:03:cf:5e:2d:26:58:43:60:93:7b:60:02:3f:
61:7d:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 20:03:03 2026 by rpki-client