Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier: TkVXaGZKpdJKebTgkV0xWuxZUBVqT8QPIgtASJ+mQAM=
Subject key identifier: EE:33:9F:3E:A1:63:2A:AA:C1:87:BA:46:16:59:33:47:CB:24:DC:3F
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 019D37F76E5ED07F0CBC81A7A17ECFBFF147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: 84MfHJLKzctmo0mHAvztpqrXAruTQKA9QAWnQnB/CxA=)
2: b5RJOv7qZAeN9fC5WkVRpB4SgFc.roa (hash: Wt8WdKPtW4g2V/ELjbMd7aeJz0MptjN56nKh7aTTs9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6e:5e:d0:7f:0c:bc:81:a7:a1:7e:cf:bf:f1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=ee339f3ea1632aaac187ba4616593347cb24dc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:79:d6:38:ae:14:4a:83:bb:3a:24:c0:18:
80:a5:57:67:39:5b:7c:fa:b6:9b:7e:91:4b:70:ec:
96:4b:d3:29:30:d1:13:f7:d0:78:dd:17:d7:23:29:
97:4e:5f:3e:c0:bd:11:fe:84:0b:37:37:8a:c7:73:
3f:3b:f4:7a:79:84:ac:eb:54:59:2f:70:b8:cd:3a:
88:5d:b2:6d:85:3f:b9:ac:b5:a3:78:c8:6d:29:c7:
3a:c5:ff:11:67:5d:43:51:a3:bd:97:25:1a:04:f2:
a7:54:1c:51:1e:33:9f:f7:c3:52:31:37:db:d1:db:
b6:93:d3:45:d0:a0:09:e2:5e:37:a6:5a:41:7a:b8:
f5:53:f8:a0:2d:20:fe:34:0d:bc:f4:52:13:df:6f:
19:63:a1:31:d2:36:d1:4a:ce:18:03:80:6f:a5:b5:
54:66:22:29:89:d0:6e:5e:1d:07:e5:26:cb:3b:56:
b4:b7:e6:e0:83:e0:ab:f0:3a:ae:b9:5c:15:76:3a:
07:9a:2c:b8:25:af:b7:e4:a8:8f:cd:c2:de:94:aa:
6c:c3:c7:36:a2:4b:3f:50:ff:da:ea:f2:fe:40:d5:
0b:4b:6e:c0:31:8e:10:7c:49:e4:b0:ad:76:ed:f4:
0f:cc:8a:89:d4:b8:ed:4a:2b:ac:59:a2:3f:c5:2e:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:33:9F:3E:A1:63:2A:AA:C1:87:BA:46:16:59:33:47:CB:24:DC:3F
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e6:3c:27:41:f9:e0:a6:7e:ee:29:22:8e:9b:5a:9a:fc:17:
2f:84:e7:be:9f:07:c2:4b:7a:fb:e6:41:b5:25:04:6a:24:45:
85:52:a3:f6:24:89:8b:bf:b5:4b:22:e4:c3:98:48:49:25:59:
81:a9:19:8b:f2:63:c7:93:23:ed:80:03:96:54:bb:f3:bd:18:
c3:4d:e0:6f:5e:0d:d8:b4:20:70:4f:9d:19:e6:a5:fd:3c:84:
f0:86:03:7f:c1:87:48:c7:e6:b4:52:b5:dd:ae:b8:1d:33:5d:
25:12:df:72:e2:38:25:c4:64:c0:07:0b:e5:0b:93:8d:ce:f0:
70:21:90:59:85:72:4d:a3:a4:e4:46:66:ac:a9:53:14:5f:dd:
9e:fa:8a:fd:d2:73:14:17:fc:41:8c:01:c3:46:3d:4c:ab:6f:
e2:6a:bb:55:98:a7:17:a3:f2:cb:ea:33:45:49:b8:ff:49:c5:
12:d9:67:2d:15:19:fa:1c:2f:10:e3:51:b3:d8:b1:16:4d:07:
12:74:f7:39:60:d5:e6:f2:de:95:2b:64:30:e3:1f:ef:a3:9b:
99:84:30:74:bf:b7:de:7f:7e:d9:fa:f9:2a:c9:ed:10:b9:9d:
d0:0c:70:02:04:5b:85:a3:b2:02:f2:ad:10:92:9c:0c:a2:68:
65:27:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:49 2026 by rpki-client