Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File: viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier: NDSHvlRUV3Wwce6qjQH0O5ElV6TudF1MIR87uVADLfo=
Subject key identifier: EF:01:D3:22:B0:AF:CE:6B:BC:B1:91:9C:F1:C4:F2:34:BE:25:FC:1E
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial: 019D37C0B52B49AF610C5A3FFDA5BD8843BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number: 03DA
Signing time: Sun 29 Mar 2026 04:01:09 +0000
Manifest this update: Sun 29 Mar 2026 04:01:09 +0000
Manifest next update: Mon 30 Mar 2026 04:01:09 +0000
Files and hashes: 1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
2: viphXepqVOryff6ZwH483I13X74.crl (hash: VmULojcq2XThi3SmkorczpS4WolL0pkLNZP83jbad2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b5:2b:49:af:61:0c:5a:3f:fd:a5:bd:88:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Validity
Not Before: Mar 29 04:01:09 2026 GMT
Not After : Mar 30 04:01:09 2026 GMT
Subject: CN=ef01d322b0afce6bbcb1919cf1c4f234be25fc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:f8:8e:77:80:48:31:07:c5:40:22:db:02:
50:74:bc:29:16:0b:ec:6f:55:ea:f6:60:89:e0:58:
23:2a:52:f1:7d:d2:ca:b8:2c:04:6e:a8:16:14:19:
d1:ca:a0:98:79:ef:82:7e:db:26:46:10:a3:3a:ee:
14:3c:db:21:e0:d6:ac:ec:e2:1c:9f:eb:4c:62:dc:
e0:6b:bb:26:bb:d0:38:b9:51:3d:44:1c:02:9a:a6:
0c:d4:6e:06:db:83:c9:73:9f:b3:df:72:cb:fe:48:
a4:a9:68:d6:01:60:67:2d:8b:f4:5d:17:9a:70:6e:
92:4a:85:c1:21:0b:61:22:a1:6c:39:21:08:86:d1:
b9:bc:f0:be:f1:46:3c:bc:15:bd:f9:e1:84:ba:7b:
ff:83:58:20:0a:04:d6:b7:60:ae:ab:33:cd:7e:8b:
5f:96:fd:3d:be:5d:66:73:80:19:60:09:50:5b:4d:
2c:90:db:76:52:53:f6:86:de:1e:85:1b:74:4e:18:
29:1f:c4:72:9d:01:ba:ce:19:92:66:5f:17:63:1e:
9e:1e:24:2f:6c:e7:bb:47:fb:ab:f6:22:ee:6d:69:
28:54:a2:da:6a:1c:fb:8d:04:6c:75:67:76:15:ce:
e7:24:35:74:08:54:c5:b4:83:05:a4:db:34:b8:0f:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:01:D3:22:B0:AF:CE:6B:BC:B1:91:9C:F1:C4:F2:34:BE:25:FC:1E
X509v3 Authority Key Identifier:
keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:77:c3:ee:75:b3:78:c9:46:88:3c:c4:3e:c0:49:db:48:f3:
b9:a2:f1:32:ca:40:73:96:35:62:65:ca:0d:ea:75:78:dd:61:
12:88:74:e5:ae:d3:d3:c2:fa:81:50:81:71:fb:f9:32:b1:ff:
9b:dd:c4:6d:d1:be:f0:f9:57:a1:ac:97:a3:48:cd:d9:ad:30:
c2:ed:5b:db:a4:54:d1:f0:d6:72:48:14:ee:34:66:c9:a1:19:
33:c1:9f:05:85:5a:9d:ad:95:63:eb:bd:43:96:c1:c8:99:99:
85:bc:81:de:e0:5d:3d:41:dd:7c:a6:c4:79:71:8a:a9:73:e7:
4f:bb:fc:f7:d3:ce:a1:e3:a3:09:d3:d4:01:50:8b:19:ea:28:
8d:da:b0:89:51:3d:8a:96:bc:dd:23:90:3b:0c:17:7e:a4:e0:
4e:55:bc:27:78:14:78:47:db:a3:4d:d0:97:79:10:24:24:e7:
9c:d8:ae:34:28:56:ba:2c:7d:47:96:0a:6e:c7:ba:22:a0:73:
a0:a1:01:ca:10:47:70:42:0a:8e:b3:d9:a8:ce:6e:50:5a:f9:
29:f2:3b:b4:c4:22:37:84:14:35:bb:99:e8:ce:24:6a:7c:6e:
33:74:8f:0e:19:7a:05:d5:e2:45:d2:2c:e2:05:a8:da:45:45:
ed:84:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:26 2026 by rpki-client