Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
File: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft (raw, json)
Hash identifier: oZ+LFy44gJ8pfO+uETXGSFNZryDg/+Nj4LGPqqQ7NGk=
Subject key identifier: 68:C2:7C:85:F3:07:A0:A6:53:66:12:22:36:38:AC:B6:A2:2D:82:7F
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Certificate issuer: /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial: 019D37F73FA0932747D7D1CAD2992D5B69FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
Manifest number: 121A
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: AlMjmcR8h2duCbNC95EnaGY9_3A.roa (hash: ptbGb9EdDKFPOd43q/T+LHJ7YQ4htAGE8y7UU6PJeXQ=)
2: VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl (hash: KDEjdbbMn/MUGWweYnJtaTvrQUTd40SqET0/mt90rFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3f:a0:93:27:47:d7:d1:ca:d2:99:2d:5b:69:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=68c27c85f307a0a6536612223638acb6a22d827f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:35:ce:23:a8:17:6e:f2:81:60:12:6a:4a:
ba:be:c9:77:3d:91:a8:e0:cc:ac:66:ab:39:8d:a8:
fa:41:e4:91:54:78:60:59:8f:a6:9e:aa:7c:a4:7d:
f7:61:b7:14:5e:f9:78:d5:d4:b5:85:eb:2d:3a:f5:
f0:89:44:35:4b:89:6e:72:47:29:75:9d:61:1d:9e:
c1:c7:74:88:38:d0:aa:ea:dc:ab:c6:e5:ea:9c:1a:
5d:69:4b:ec:20:f8:6b:7b:40:3e:01:49:60:b9:08:
33:04:23:a5:97:86:12:c8:8a:29:02:52:49:a0:92:
56:0a:23:24:30:f2:32:13:9d:05:2d:a2:02:2c:fb:
75:55:70:1d:80:ed:8c:ab:05:10:a3:71:b4:60:01:
71:4d:bd:f6:d6:97:1c:f5:4c:2f:6b:9b:a8:e4:96:
1a:b0:5c:4a:af:a2:16:3b:92:21:61:f2:0b:2a:60:
6e:85:1b:be:c1:ea:76:3c:69:2b:75:04:ff:77:5e:
43:aa:d9:5d:f7:bd:c2:2f:ac:ec:d1:b1:bb:c5:86:
43:d8:7e:e2:ea:9e:03:69:5c:cc:ab:74:41:5e:8a:
35:34:37:d0:e2:23:a2:0b:26:b6:91:1d:e9:e2:a9:
6d:bc:58:49:1c:54:af:ee:cf:f5:f9:7b:78:80:1d:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C2:7C:85:F3:07:A0:A6:53:66:12:22:36:38:AC:B6:A2:2D:82:7F
X509v3 Authority Key Identifier:
keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:df:71:65:be:35:0f:69:d6:7e:89:15:41:d1:20:bf:63:11:
f3:1c:16:e9:52:27:e6:e6:a1:4f:40:65:64:ca:af:b1:9d:ce:
98:6b:23:18:73:91:00:7f:f8:e6:47:f8:af:68:db:1a:66:f8:
f0:fe:57:92:13:d7:8e:17:b8:7f:38:ff:f3:3d:f1:eb:b9:5c:
bf:d2:61:b8:11:ca:f3:f0:38:49:95:58:a2:9a:77:c4:5e:11:
1d:13:7e:16:9d:9d:14:0c:a3:46:ce:ca:8c:ce:90:5b:6d:df:
0e:1e:6a:39:ce:fd:e1:b4:d9:8e:80:10:49:eb:60:45:47:da:
e4:de:51:6c:4f:55:6e:04:bd:9d:bc:4d:ea:22:f1:3c:aa:c9:
53:fa:c6:01:9d:b1:21:5d:cb:ea:94:d8:e8:a1:b4:42:dc:e3:
20:e9:9c:ed:97:5f:16:87:70:16:07:d2:8b:dc:d7:a4:f5:c9:
b8:6d:57:45:8d:c2:c3:c6:76:45:f0:63:df:36:85:48:23:23:
d2:bb:eb:9f:7b:41:3e:d6:b3:d5:b0:15:ef:b7:f7:96:30:51:
1d:26:90:8e:69:8e:23:59:83:cf:c5:eb:a8:c6:02:26:69:a6:
dd:63:7c:85:0c:18:ca:cb:97:c3:9c:ed:aa:81:7e:86:ee:49:
fa:df:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:28 2026 by rpki-client