
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: 6EQoNhX4uiSA8DGMUel/SPfx8sT5zi2jIlOYgB//jTA=
Subject key identifier: 32:9B:76:12:AE:A1:42:25:EC:7E:B2:59:4C:4F:87:5E:BE:06:BA:1F
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 019D39AEA4E05F193744FCE8E2245682F13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:39 +0000
Manifest this update: Sun 29 Mar 2026 13:00:39 +0000
Manifest next update: Mon 30 Mar 2026 13:00:39 +0000
Files and hashes: 1: t38nL5oN5Hl7YW2Um4h4b4mkFQY.roa (hash: yo6pqMRWLvkyp3h1nhu6jmRo6lvB15VlScam6f7A8qw=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: 5dD4YWIbQXbzh9nEZ+H5M0yF87W8wSdoVfBTIT8rWR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a4:e0:5f:19:37:44:fc:e8:e2:24:56:82:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Mar 29 13:00:39 2026 GMT
Not After : Mar 30 13:00:39 2026 GMT
Subject: CN=329b7612aea14225ec7eb2594c4f875ebe06ba1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:4a:44:3a:f9:eb:16:33:74:04:6b:72:35:
ee:e5:ce:57:82:60:62:7e:25:10:77:08:5b:b5:56:
ad:de:81:a5:cc:7e:10:83:21:f6:32:1b:9c:9e:c8:
c9:72:13:31:d2:21:c6:dc:a7:f8:82:b9:ba:84:a8:
c3:4d:93:1e:bf:4e:a7:35:97:86:06:f6:2d:97:64:
a5:57:0f:83:8f:b1:d9:2b:05:63:23:91:a7:11:e9:
95:c8:c0:be:90:d3:62:0d:98:05:e5:50:56:62:ba:
e3:3c:3f:53:cd:54:52:db:e1:ca:18:f6:b7:da:a2:
70:aa:f4:98:29:03:2e:f4:a0:24:a3:40:c3:d2:0d:
12:1b:d5:57:46:6b:3e:61:ef:07:46:32:0c:a6:1a:
77:f0:70:69:a3:e1:47:b5:d3:f7:c6:f3:df:f8:74:
e3:41:a5:70:a5:1b:21:68:9d:39:e0:98:07:08:bc:
f8:c2:24:b3:f4:3c:87:6a:b7:70:a5:84:55:fd:b5:
64:b5:91:ba:bd:17:e8:9b:07:6d:29:8d:7a:36:ad:
82:9d:97:43:00:51:33:9c:c9:5a:68:ad:d2:9c:2d:
79:95:5b:1d:63:dc:4c:ec:a5:da:b3:eb:da:e8:79:
be:12:60:9c:c2:6e:f0:2b:f0:17:6d:c6:15:1b:2a:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:76:12:AE:A1:42:25:EC:7E:B2:59:4C:4F:87:5E:BE:06:BA:1F
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:17:25:d3:1d:cf:78:a5:af:ba:62:f3:d7:13:29:9c:3f:75:
39:8a:b0:fb:9a:4a:8d:07:71:14:93:1e:02:50:52:56:e0:1b:
be:1d:02:47:55:1f:29:e5:80:8e:de:66:a0:40:6b:b2:12:0c:
9d:af:8d:82:69:0b:eb:8e:13:1f:37:60:eb:58:d2:89:81:17:
4e:5a:f7:93:c3:24:48:a3:26:04:4d:92:92:d2:1d:50:9d:77:
61:12:8a:6c:5c:9a:11:20:5d:eb:a7:48:f0:5d:32:fc:09:78:
f3:02:0f:e3:2f:0e:28:3d:5b:bf:a0:cc:14:44:75:b0:43:7d:
7a:e6:bf:cb:f2:d6:4d:f6:e0:9c:9f:be:ba:57:9e:2f:4b:fd:
d0:3a:d9:f7:a0:28:d8:99:f6:bf:cf:bc:20:e2:97:b0:92:b1:
61:8c:77:40:2c:4c:c8:6f:8a:f2:9e:e8:9b:9b:89:ed:ce:ef:
d8:03:41:bf:49:90:0e:44:2f:7b:25:c6:1b:aa:57:24:5b:f3:
51:85:fe:15:85:23:6e:87:50:01:36:3e:98:bb:06:6b:ad:da:
f7:b5:49:01:ca:6e:a8:70:34:8d:73:fd:5b:d6:7a:33:9a:68:
0a:52:b0:4b:5a:44:e8:91:2e:85:4d:5c:5f:02:eb:10:9f:04:
77:c3:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:00 2026 by rpki-client