Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: ObGks0Wj97qFKHqbHvSky8yIPLYjpAILJKH3nsbAmlE=
Subject key identifier: 4A:30:D4:59:66:F9:DA:C6:2E:F8:84:F7:39:CC:A1:30:57:5D:14:0A
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019D38D3AB60EBE789D0843DC2865124006C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0D1C
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: XB3RFpr5dvPGfou0KpjXpsKLypJ/Md6V5bS1cEwbL2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ab:60:eb:e7:89:d0:84:3d:c2:86:51:24:00:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=4a30d45966f9dac62ef884f739cca130575d140a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:e3:cc:15:28:24:05:85:b0:05:a3:e8:50:
ed:68:3e:69:15:d2:45:8d:46:7b:62:c3:79:97:7f:
7b:20:04:eb:39:40:65:9d:9d:57:49:48:63:f2:8b:
73:af:df:c8:05:41:46:82:33:c0:aa:16:8e:e6:82:
9a:90:e4:36:51:6a:f0:4e:59:cf:e4:03:a2:a7:4b:
f3:24:ea:d5:eb:45:7c:8c:de:f4:11:9e:dc:d1:83:
14:f4:ee:95:80:0f:94:93:33:61:96:dd:df:1c:ed:
4e:9b:74:1f:a8:23:0c:c3:cd:48:44:5d:b8:dc:2a:
21:aa:e5:e1:4a:f8:02:af:e0:7a:3a:7c:ec:76:9e:
58:07:c2:dc:d2:d9:6a:c5:27:60:44:af:65:2a:aa:
46:20:2c:3d:1a:72:25:fd:f8:b3:4d:22:56:f1:12:
bd:64:31:44:5c:6c:2e:35:59:c7:ea:c1:ec:18:42:
d3:e9:56:47:85:8a:f5:a6:83:a0:29:8b:7b:2a:b1:
b9:97:d8:22:aa:93:6a:07:78:26:51:84:86:19:f4:
6a:1f:a7:fc:25:63:81:64:41:3c:87:72:74:35:75:
2a:16:92:bc:05:4c:ee:8b:f1:28:92:13:c0:56:14:
87:17:bf:e0:c0:82:52:1f:3a:fb:fe:27:0f:fc:19:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:D4:59:66:F9:DA:C6:2E:F8:84:F7:39:CC:A1:30:57:5D:14:0A
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:67:9b:34:92:50:53:3c:3b:0a:a4:01:7f:56:c9:91:3c:bf:
cd:f9:a5:bc:e4:57:06:8a:bb:48:c4:a0:1a:3e:5b:41:01:e4:
7f:8c:92:f4:05:df:ce:28:df:41:d6:73:46:1f:22:96:03:6b:
dc:9a:56:a7:9d:70:a0:dc:38:0c:42:fa:44:2d:2f:79:14:09:
be:70:e0:28:7a:42:5f:e2:d9:7b:64:a2:da:6f:98:22:79:36:
45:e9:58:92:78:c9:4c:70:9f:f9:20:ce:49:53:06:73:33:1b:
e4:2f:ee:91:2e:2f:e7:76:bf:93:32:dd:b4:4e:c4:06:01:67:
83:8d:6b:65:4e:7b:ed:b3:c6:a6:7f:09:99:4d:ad:f2:7f:e5:
74:73:aa:ce:19:23:9a:d2:51:46:d2:08:ce:ef:0c:5d:70:07:
ec:93:51:4a:b8:4e:28:0f:7f:2d:58:86:a4:91:db:f9:1c:59:
87:aa:5e:3c:44:cc:22:a1:f8:14:b9:07:d0:38:2c:1f:28:cc:
2a:ea:eb:c3:12:d6:ab:35:5c:5b:22:52:b8:2c:00:b8:fe:97:
e8:65:79:3b:c0:5a:a6:ec:47:00:89:ee:94:85:a5:18:fe:84:
93:1c:22:2d:4f:cb:27:d8:8d:e3:93:32:22:7f:e4:6c:fe:d2:
32:52:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:02 2026 by rpki-client