Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: xQ7RCf6030pYUILVXoK8/RmhniRHQ+8uOl+2ch/noAY=
Subject key identifier: AD:6E:FB:3A:8A:72:29:2E:F9:F5:CD:5C:6A:DA:65:1C:D5:AC:7B:0D
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019D3865DE337426F2A48B4378D26EE5ABFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 0379
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: BOt1nk9yAlr0VpMLiq29FItm0bUN/+BjQGPTgRDdigw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:de:33:74:26:f2:a4:8b:43:78:d2:6e:e5:ab:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=ad6efb3a8a72292ef9f5cd5c6ada651cd5ac7b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:55:dc:b6:83:94:4e:a5:54:73:f4:05:b0:
45:50:24:9a:9d:a1:ba:e6:22:ae:73:a3:e2:07:bf:
1a:fe:73:22:e7:91:e6:69:ec:00:12:1e:dc:2a:b3:
34:00:77:f1:39:d9:23:00:c4:73:9a:5b:45:75:bc:
ad:ab:27:74:05:13:45:0e:40:fb:7d:6a:9d:5d:4f:
4f:a4:e2:2d:ca:f8:3e:2c:1e:e3:74:6d:24:ff:a6:
b1:c4:69:b1:c1:a1:6d:e7:19:92:57:3c:4d:51:10:
50:df:21:a6:69:78:ef:0b:61:80:6c:df:10:02:19:
57:69:3f:b3:aa:c7:2d:17:1b:7c:b3:14:9a:e2:d0:
f7:09:e5:11:6a:4a:2a:fb:63:70:85:b5:ad:e5:12:
b3:2a:1b:8e:d5:d6:7f:99:d4:80:97:9a:b6:ec:d0:
ae:b0:07:51:72:dc:bf:7d:6c:51:a5:76:66:85:5a:
5d:11:75:88:9e:11:93:ac:8d:98:b8:09:05:d8:2a:
bd:18:d0:ba:e6:35:18:b4:b1:ec:24:82:31:d2:91:
4a:ed:9b:31:ef:26:d3:f4:7f:ca:1e:bc:0a:a4:b0:
ba:58:a8:42:14:38:85:db:f4:6e:5a:2c:82:b1:5e:
20:4c:e1:ee:6f:bc:d4:7b:09:d0:44:81:aa:93:c8:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6E:FB:3A:8A:72:29:2E:F9:F5:CD:5C:6A:DA:65:1C:D5:AC:7B:0D
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4c:a1:9f:3f:3a:ae:48:6b:32:d3:88:50:0d:13:17:9e:6d:
ed:74:8c:46:0d:74:5a:72:cf:7d:62:c8:dd:39:18:32:de:47:
6d:e8:08:15:ce:ed:cb:e8:54:6c:e6:e7:d4:a3:2e:c2:3a:64:
e9:85:6a:ca:d4:87:75:d8:43:64:cf:b1:57:5b:29:b0:43:55:
7d:32:a8:8a:d6:ec:f4:3c:e2:4d:e1:f1:48:97:81:ec:e4:d4:
5c:2c:99:10:00:d4:de:0a:dc:a6:37:0f:61:56:5b:87:b8:a7:
25:95:8b:30:aa:47:14:2d:86:24:74:c9:80:40:7d:42:9a:c5:
12:a2:2d:65:08:4e:0e:71:d9:30:65:09:ad:c3:6b:d6:2d:57:
c1:34:fe:1b:61:09:57:a4:ce:ca:34:81:8c:3b:30:0f:8b:7a:
f2:aa:65:a8:a7:3f:b3:cf:a8:dc:e0:5b:41:ea:a3:44:96:08:
f3:bb:b8:9b:4b:fa:ad:9d:8e:01:a7:91:23:b4:23:e1:94:a6:
c8:81:12:7c:9b:f3:86:92:1e:29:52:5c:9b:53:75:e7:83:02:
ee:93:61:c1:23:d9:66:9e:f2:ec:cc:ba:0e:09:86:ce:da:9d:
f7:88:bb:73:57:dd:bd:7d:0c:18:67:16:90:05:8e:00:b1:bf:
b8:b3:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:53 2026 by rpki-client