
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: dl+QdnnJIO8skqBz3ufXMPF1Co6WgQStxeVXClgLsxY=
Subject key identifier: BB:CF:31:1A:71:9F:87:89:AE:5F:5D:16:DC:FF:C6:9F:CF:84:AB:E7
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 019D37C08E217246628C476703462AD56D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 1331
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: PYk6RC5m7OJWXRNYO3x9foVmPwM.roa (hash: PyAWpAbdnvAvMuGXImxWil5LYMDe43kyqM8HknJO3mg=)
2: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: 2bnm3Tty4VPj+3JCqzZ0dij2XiWFnvx8K1qVI0BnoIE=)
3: VilG8hdH4e2PgtPf0HH0QvCs9SA.roa (hash: X3S3ljAAWfahEeHRRoaDomf7TEYfABDZSsMixEQ2Qa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8e:21:72:46:62:8c:47:67:03:46:2a:d5:6d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=bbcf311a719f8789ae5f5d16dcffc69fcf84abe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:53:0c:ce:94:6a:d6:73:62:24:56:bc:74:
c9:37:83:9b:62:02:f8:57:d7:5c:2a:72:f4:93:11:
71:04:b1:75:f7:55:88:24:b5:d4:b5:59:63:a7:09:
c6:72:e8:24:e2:35:cc:1f:90:42:e7:b4:8b:5c:b8:
a3:9d:c2:32:03:56:a2:6e:1e:cd:92:9f:aa:42:5d:
9a:b1:b9:68:4f:6a:cc:f5:2f:a7:29:9c:1b:3b:72:
79:10:1d:61:db:44:8e:d3:4b:5b:23:5c:e6:ae:3c:
81:6c:0d:f9:0e:4b:ac:aa:92:a9:76:c9:3c:d2:c1:
85:2e:50:5f:14:a1:6b:62:ba:be:0c:95:56:bb:e3:
4f:1b:24:98:63:b9:d6:c6:18:e2:70:18:b9:78:bf:
15:57:6d:30:ed:2f:b3:1d:e0:53:9b:ae:26:8d:89:
0e:76:0a:c7:9e:15:76:b9:03:6b:46:33:10:2d:95:
1b:d2:b4:ec:f1:6e:32:d8:32:ad:0f:91:5f:e0:38:
38:8b:16:ab:af:b0:c1:58:48:64:f6:9a:54:11:45:
88:b5:ab:53:5d:7c:d3:d8:8f:b4:b2:3b:b6:ba:bc:
38:6a:d6:75:e4:59:2f:09:5d:fb:4c:4f:d5:81:26:
7f:19:aa:30:bf:1a:f2:a0:5b:9f:3d:89:a7:47:c1:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:31:1A:71:9F:87:89:AE:5F:5D:16:DC:FF:C6:9F:CF:84:AB:E7
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e7:98:d1:89:b4:51:fc:5b:32:43:2b:85:75:fb:f9:49:86:
3c:c4:8b:96:98:8d:b9:38:fd:bf:9e:f0:e8:06:f3:d1:2f:f7:
7b:31:41:7e:b4:d1:32:34:18:56:30:22:22:7a:1d:41:85:0d:
82:bb:29:da:35:f9:c1:bf:2c:27:7a:a6:b2:20:3e:ff:f5:87:
72:84:ed:6e:9a:5d:90:d2:3a:e8:51:cf:92:9f:d9:eb:e6:74:
21:7f:8b:42:f9:19:09:de:ec:8e:dd:64:4f:dd:a8:88:3e:b6:
01:29:2c:27:3c:41:f4:a7:0a:49:a9:7c:e5:7d:f2:2b:dc:af:
04:cc:97:4a:8e:36:3f:ce:6d:e8:67:82:4e:7b:4d:57:ac:19:
46:e0:a2:12:1f:d5:8d:95:45:8c:ae:94:13:1d:1b:c0:20:b5:
a4:68:28:33:b7:9b:fa:e6:b1:17:e4:b1:67:4d:e0:ad:07:f3:
de:3f:95:1a:e5:c8:be:ba:66:f1:08:fe:b0:8c:2e:cc:ea:60:
2d:cb:52:e6:9f:87:97:80:7b:eb:77:cb:e1:67:18:ae:24:b0:
23:67:83:4b:7d:ba:47:4f:40:fc:7f:35:22:b2:e3:ac:cf:77:
d6:bc:1a:09:5d:64:75:7e:c6:f4:83:9a:67:26:ec:42:fb:b5:
06:6b:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:17 2026 by rpki-client