Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: 5eclBGpymv1mXdD9RqIkXfBZyKeoHD2WLaEoLLK1hYk=
Subject key identifier: A7:99:9E:26:28:0F:86:2F:16:75:1F:D8:A1:5F:0D:07:D0:6E:28:5E
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 019D38D35BE8EB9664658F32F11C9D9DC6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 180F
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: R2S8HzOpk0/XoVbsxcSZdMyiYrxcyM2Q42M3eleBiBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5b:e8:eb:96:64:65:8f:32:f1:1c:9d:9d:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=a7999e26280f862f16751fd8a15f0d07d06e285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:9e:9a:0a:c3:38:54:68:ed:da:f3:21:19:
b6:1d:0b:8c:64:2f:c9:c0:91:4a:c9:0e:91:dd:06:
93:ef:79:ab:0d:0c:f6:48:9e:36:bb:b3:96:73:4c:
5d:f1:98:e7:58:ec:32:ae:09:15:af:bc:9b:73:81:
12:41:cc:c6:1b:46:84:07:1d:eb:c1:38:bb:75:c4:
3f:91:2e:11:06:2c:90:ea:86:ea:57:c1:35:1d:a6:
07:bb:50:0a:28:4d:b0:92:f0:bd:06:c8:d4:22:62:
03:d9:dd:4e:22:7f:fc:89:f6:dc:79:a9:ba:21:24:
06:cf:92:93:95:83:74:6f:1e:4f:17:cc:bc:4b:f6:
1d:f4:63:bd:64:21:02:4c:b5:df:a7:f2:5b:f5:d5:
4a:6f:d0:0b:1c:58:9b:3d:6b:be:b8:3e:9e:ae:ce:
6b:55:b4:aa:aa:fa:92:69:94:57:65:f6:dc:32:25:
6b:c6:57:01:4c:3a:be:36:0c:eb:62:89:4a:6f:6f:
b3:f8:c0:e3:40:1d:0d:2a:ce:8f:fa:ba:bd:93:b5:
3b:49:ef:49:34:2e:41:c0:aa:5e:b8:90:8b:21:5e:
5f:23:d4:b5:28:8d:f5:ba:04:7a:f5:e1:2d:16:bf:
27:88:f1:5f:3c:6b:fc:0e:c1:7b:4b:6f:0e:b1:c6:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:9E:26:28:0F:86:2F:16:75:1F:D8:A1:5F:0D:07:D0:6E:28:5E
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:8d:70:c5:4e:5d:6c:f7:a7:a7:f8:6b:99:99:1d:ad:7f:
f6:2c:c6:a1:91:b6:39:fc:01:ad:e9:b9:39:4c:36:0a:7c:0b:
7c:6f:e2:9e:b7:0d:03:77:29:ff:04:10:c1:dd:57:2f:51:7d:
a4:0c:4c:d7:f9:3f:c1:8f:87:7b:cb:8c:9f:cd:6a:bd:01:45:
32:3c:59:8d:e5:97:f7:c0:2e:ec:07:03:71:1b:77:44:c4:eb:
70:8e:b0:ad:12:86:97:ff:87:90:f0:2d:8c:70:01:7f:f3:bd:
91:7d:a8:5c:64:e6:8a:cc:df:2c:9b:af:59:b7:0d:74:05:9b:
85:4f:a3:e4:eb:ee:e0:08:c3:e3:b8:2e:63:ab:2a:b0:35:c9:
05:b9:d8:19:7c:28:00:42:e2:5a:8d:6c:8d:c7:dc:9d:4e:8a:
54:67:30:ab:b9:82:fc:6d:e1:34:66:77:54:04:9d:2a:8a:5a:
0e:1c:9f:40:e5:83:88:4b:8f:d5:5f:55:52:46:ac:37:1b:f8:
48:27:5a:71:c9:62:4a:31:80:17:a5:bf:be:2b:12:b6:18:72:
77:f1:42:e7:00:db:32:3a:d0:79:28:20:5e:5b:7b:6a:91:ae:
6c:34:94:39:07:4e:2c:99:1f:32:bd:f8:93:3c:35:3a:78:b4:
81:43:a0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:35 2026 by rpki-client