Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: FJO4+mrKSrM5b9bJ1QnI3jWAm5YXjky0Mp7of5MEdmo=
Subject key identifier: 32:00:41:54:82:10:AD:1F:34:B5:F1:43:FA:A4:80:1B:C9:DC:8A:56
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 019D37BFF75635C782FB40A08D371335CA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0F98
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: S9kGmLdkpv2ILDDQ-SlcOK9Lj1o.roa (hash: QivYNDVsph6A7kkTjUq1Ljk/FMFPW+uo2Qe8RGmCL8g=)
2: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: 8QCKOCUizLJ/JSok544Y0QpmAW/cjm8iERUW9HmjjnI=)
3: eMKt2DWZjokC0ieIU1oM30l3M2M.roa (hash: L8Kfu464KFJxNJalzdL9bOwXAKJk3f1Ymgq59SssnCA=)
4: fjBLPKVRL2N3R-A_WZpV7UMJS-E.roa (hash: g43UU/wrTcddspCCnr8Ra6+FoKvZBu/4AB1pQY+Nmvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f7:56:35:c7:82:fb:40:a0:8d:37:13:35:ca:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=320041548210ad1f34b5f143faa4801bc9dc8a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5a:aa:f0:8b:62:48:eb:fa:0c:42:bc:fe:1d:
8c:61:8a:34:81:d4:05:af:0a:46:c4:ef:4b:00:d7:
5c:1b:26:9f:8c:2c:2f:e2:2d:a6:c1:2f:07:de:35:
42:6c:bc:69:53:a0:38:69:aa:cb:fe:e5:51:2c:1c:
cc:c5:c5:6d:32:53:b5:e1:29:79:ca:6d:58:05:7a:
8b:b7:54:c7:b1:0c:22:29:4f:56:b8:bc:39:d0:6d:
63:af:d5:bf:e6:42:72:8c:21:0b:5d:c9:dc:5c:12:
9a:c5:f3:78:be:65:5d:ae:38:8c:23:f5:9c:ee:6d:
3a:01:2f:a3:08:16:67:c4:5b:ee:e6:06:c4:6d:2e:
66:57:d4:73:b8:35:fa:8b:d5:46:f2:06:ad:82:6a:
5a:a1:1a:84:fb:60:1a:5e:53:7b:9a:d4:b7:58:b3:
03:fc:22:1c:6b:f9:a5:f5:44:b5:f5:3b:74:b3:67:
72:08:3b:10:88:89:d4:0f:36:d6:bd:a1:99:38:76:
98:43:1b:a8:95:9b:2d:f0:ae:e5:7e:06:ee:08:6e:
6f:2f:bc:b8:2b:e8:bb:06:90:63:45:17:96:e4:6e:
4e:bc:f5:87:40:cd:3c:d3:9f:b5:8a:ad:ce:5d:e5:
dc:ea:9a:48:e9:83:de:af:f7:30:2c:73:cb:a8:df:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:41:54:82:10:AD:1F:34:B5:F1:43:FA:A4:80:1B:C9:DC:8A:56
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c0:1e:30:aa:46:00:57:30:13:5d:34:2c:99:a8:8c:83:08:
e1:0d:78:e2:f7:0c:40:36:2a:52:03:92:cb:72:cf:3a:42:84:
92:48:8e:23:cd:81:9f:50:47:6c:54:1f:37:d9:f0:d7:ed:97:
b5:34:1f:83:72:f5:c1:09:4c:11:2b:87:ba:4f:c6:f6:b2:9e:
ca:5f:a1:f2:f7:30:f9:44:7a:3d:c6:0f:97:5f:b8:4f:16:62:
ea:20:05:51:9f:1c:fc:70:99:80:c2:08:ae:b0:20:d4:e7:60:
e6:26:64:04:06:b3:29:06:23:68:a3:a6:7d:7b:08:c3:ad:18:
4f:6d:39:80:b8:09:80:61:27:a2:e1:ab:db:80:f0:1f:12:75:
92:7d:03:db:55:b6:fe:d8:df:f9:b3:4c:66:83:41:e2:f3:a2:
f8:1f:f9:c0:79:f9:78:6a:60:7b:62:24:58:b2:3b:47:5e:44:
9f:3c:55:eb:9d:ad:f4:b3:56:c4:93:1b:73:8a:a2:35:9a:0a:
c0:13:be:1b:f7:13:cc:7b:6c:ed:f3:76:9b:03:0d:78:62:23:
04:36:b5:62:ac:19:1d:ca:db:78:f0:54:f0:d9:ce:6c:d9:38:
b8:b4:32:0f:53:e5:6b:7f:7f:a8:c1:81:98:43:c5:a1:30:8c:
29:06:85:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/dWNceC+0CgjTcTNcoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz
NmNiYzYwHhcNMjYwMzI5MDQwMDIwWhcNMjYwMzMwMDQwMDIwWjAzMTEwLwYDVQQD
EygzMjAwNDE1NDgyMTBhZDFmMzRiNWYxNDNmYWE0ODAxYmM5ZGM4YTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lqq8ItiSOv6DEK8/h2MYYo0gdQF
rwpGxO9LANdcGyafjCwv4i2mwS8H3jVCbLxpU6A4aarL/uVRLBzMxcVtMlO14Sl5
ym1YBXqLt1THsQwiKU9WuLw50G1jr9W/5kJyjCELXcncXBKaxfN4vmVdrjiMI/Wc
7m06AS+jCBZnxFvu5gbEbS5mV9RzuDX6i9VG8gatgmpaoRqE+2AaXlN7mtS3WLMD
/CIca/ml9US19Tt0s2dyCDsQiInUDzbWvaGZOHaYQxuolZst8K7lfgbuCG5vL7y4
K+i7BpBjRReW5G5OvPWHQM0805+1iq3OXeXc6ppI6YPer/cwLHPLqN9UCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIAQVSCEK0fNLXxQ/qkgBvJ3IpWMB8GA1UdIwQY
MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt
OGI4ZDcyMTcyMDkwLzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw
LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMAeMKpG
AFcwE100LJmojIMI4Q144vcMQDYqUgOSy3LPOkKEkkiOI82Bn1BHbFQfN9nw1+2X
tTQfg3L1wQlMESuHuk/G9rKeyl+h8vcw+UR6PcYPl1+4TxZi6iAFUZ8c/HCZgMII
rrAg1Odg5iZkBAazKQYjaKOmfXsIw60YT205gLgJgGEnouGr24DwHxJ1kn0D21W2
/tjf+bNMZoNB4vOi+B/5wHn5eGpge2IkWLI7R15EnzxV652t9LNWxJMbc4qiNZoK
wBO+G/cTzHts7fN2mwMNeGIjBDa1YqwZHcrbePBU8NnObNk4uLQyD1Pla39/qMGB
mEPFoTCMKQaFZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:37 2026 by rpki-client