Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: BIXN57bMFF+uXdyJMHALkQpBk/taNc0gqLpb8RbO1NY=
Subject key identifier: 20:E2:40:E1:BD:7D:DA:5E:AF:20:A5:83:42:48:5F:75:E9:A2:6F:61
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 019D3AC14D7D301E42A2E657E267A94580D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 0475
Signing time: Sun 29 Mar 2026 18:00:39 +0000
Manifest this update: Sun 29 Mar 2026 18:00:39 +0000
Manifest next update: Mon 30 Mar 2026 18:00:39 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: S3RGaYiWK+iUpnPxwuJXoAf6hT9KY2vQWlx7nei4nWA=)
2: oPgMAi_-EmiOlppJM0s65xmeflo.roa (hash: AY2dJHoY3JrtcePk6obcHFCfyE5blcFF6JMAQBSwLWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:4d:7d:30:1e:42:a2:e6:57:e2:67:a9:45:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Mar 29 18:00:39 2026 GMT
Not After : Mar 30 18:00:39 2026 GMT
Subject: CN=20e240e1bd7dda5eaf20a58342485f75e9a26f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:3b:62:31:c1:33:96:cb:54:87:75:53:59:
4f:ed:9b:4a:1b:e2:66:38:45:2f:92:bd:df:85:5b:
93:61:b7:f3:d2:06:48:f5:36:35:1a:37:ba:21:cf:
92:25:28:46:c8:c6:0a:f4:2b:4a:ca:3d:8f:ce:34:
c5:c1:7e:a8:47:24:88:38:e5:3d:0e:3a:4c:63:05:
7b:a2:ce:0f:9e:6e:0c:8a:a0:e6:c3:8b:c7:1d:e8:
8b:56:f6:22:9c:c2:0a:d1:02:43:02:52:6e:a0:13:
c8:71:24:f2:b4:e8:d1:0b:45:08:b8:5d:ac:7b:25:
b6:85:f9:58:e5:7f:40:24:84:b4:a3:63:5e:14:a2:
50:82:c9:7e:94:88:25:32:67:92:d9:52:21:15:26:
21:e0:13:1f:a0:3f:96:e9:5c:cb:e5:d8:40:ef:b3:
bd:10:83:8a:da:ce:ac:82:ae:a1:f2:9f:c2:d0:b5:
d2:3a:f3:f3:d8:1c:cf:b1:ab:8b:40:4d:f1:0c:ec:
6c:da:8f:b9:0f:d4:4d:e4:40:42:32:8c:31:0a:69:
71:40:2e:eb:bf:4f:c4:4e:75:b3:19:f8:74:5d:14:
db:92:c7:b3:a1:46:ca:35:10:51:38:8b:64:85:b8:
66:51:be:aa:06:66:0a:c1:21:82:e4:86:df:17:29:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:40:E1:BD:7D:DA:5E:AF:20:A5:83:42:48:5F:75:E9:A2:6F:61
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b4:cf:bb:53:bb:a7:5b:a4:11:df:90:75:ea:41:db:ec:9b:
c1:0f:49:7b:ec:0a:8b:76:80:64:f7:ad:54:42:59:2d:94:4f:
59:93:4f:16:4e:3c:10:bc:3e:01:65:cd:a0:5a:3f:96:c6:6f:
aa:62:79:f8:8b:7b:4f:00:37:f2:ed:d3:fc:d9:42:ca:a1:1b:
6a:74:59:85:e6:ba:30:de:ae:82:0f:d9:2a:b2:68:36:8f:f0:
a0:ab:73:f0:f5:33:e0:ab:16:26:dd:e5:34:b6:af:76:0b:79:
8a:c4:ba:30:d1:31:d6:dd:06:85:50:eb:81:17:78:d5:60:18:
d8:10:71:46:44:2c:1f:a6:59:1b:5c:52:b3:a3:aa:64:99:89:
29:01:4a:79:69:5b:0f:b2:1f:1a:28:ae:a9:a6:fc:ee:0c:55:
d1:09:a5:25:c2:13:c3:7a:80:0b:fc:6a:cb:d7:c8:86:f1:fb:
8d:33:da:71:3d:66:11:90:9e:b4:29:da:ff:34:f6:27:f4:dc:
fc:8d:4e:a6:a3:bb:5d:e8:7c:4c:8d:93:cb:f5:b6:7f:7c:5a:
80:96:7e:3b:21:88:8c:d5:0f:bf:8f:1d:8c:ee:04:7f:87:94:
9a:64:ab:55:70:eb:f3:f5:d0:0c:53:b1:fd:5f:ca:1c:28:2b:
a2:fd:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:25 2026 by rpki-client