Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: KLhrt/Hdf1Sxe9JyLvYKGStJkM/FNnJcvXHZhYKXR3U=
Subject key identifier: B1:64:E3:91:77:A7:2C:9D:9B:71:12:A7:33:E8:10:3D:CB:98:B4:2D
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 019D371B84BB6667AE97A68781D719E2F9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 1575
Signing time: Sun 29 Mar 2026 01:00:43 +0000
Manifest this update: Sun 29 Mar 2026 01:00:43 +0000
Manifest next update: Mon 30 Mar 2026 01:00:43 +0000
Files and hashes: 1: MxmtZpT39ziVe-pzqj79_Ed_jAo.roa (hash: 4OhUHwywmDOO3mmhT6ZwnGr79zua7TEwc4pRLTJjvFc=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: XQZAB3WuXnFskL/AyrSxuIAW3BLQopZCfazCY/l1on8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:84:bb:66:67:ae:97:a6:87:81:d7:19:e2:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Mar 29 01:00:43 2026 GMT
Not After : Mar 30 01:00:43 2026 GMT
Subject: CN=b164e39177a72c9d9b7112a733e8103dcb98b42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:3d:bb:58:9f:9c:f4:ad:ab:0a:7c:68:12:
1e:7d:3e:1f:fc:d5:80:86:7a:4b:f5:74:3d:51:3c:
12:79:c2:a5:7d:2b:83:11:98:54:2b:38:85:59:c6:
f2:03:c1:f2:1f:25:b2:73:4f:ac:a3:d9:9d:de:cf:
a0:4a:ec:be:73:a5:cc:14:f7:6c:17:56:51:01:c8:
d3:b1:4b:38:f0:9c:f7:35:d0:17:d4:ae:f4:e1:9f:
99:87:c9:9d:90:f0:c1:b2:21:08:fb:cf:f5:51:94:
9b:33:15:4a:5d:01:c3:1e:ca:cb:f3:b2:f9:68:02:
66:dc:18:c6:01:d5:16:29:52:11:7c:14:15:3a:82:
ef:15:6f:45:46:9f:32:0a:1d:1e:23:ca:1e:90:9e:
45:93:d2:0f:33:de:e8:30:80:0b:3e:f5:d4:99:fd:
ca:a8:a8:28:68:19:ee:d9:c0:05:2a:c9:ed:99:b1:
02:54:fc:82:3a:41:be:43:fb:b0:f4:9c:b5:73:8a:
ba:38:19:26:86:99:b5:5f:0d:23:6e:af:12:94:45:
ce:cf:a4:e2:fa:11:3f:57:eb:c1:3c:3c:ed:c1:d1:
95:7c:89:a6:be:60:fe:c7:30:2e:7e:99:70:88:71:
4b:49:54:8f:3d:cf:e8:2b:b4:0d:e4:92:c3:80:6d:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:E3:91:77:A7:2C:9D:9B:71:12:A7:33:E8:10:3D:CB:98:B4:2D
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8b:25:80:29:de:a9:de:05:35:13:e2:63:b6:7b:c6:95:09:
24:48:77:2f:0d:62:ed:56:17:f2:3a:fe:6d:5a:ee:23:47:24:
32:58:b6:d6:48:6e:b0:e6:af:92:71:2f:68:97:64:9b:f5:98:
ec:38:99:a2:e4:0d:75:85:62:f1:21:d9:3a:5b:b6:5a:47:af:
7e:64:c7:11:3c:8e:8f:78:11:8e:57:bb:3e:df:e6:04:d1:e0:
f8:c4:31:e8:ca:44:2a:6d:61:e2:71:89:44:44:a1:6e:9a:54:
04:09:8a:dc:db:4d:26:4b:7a:08:ad:15:50:d1:e2:16:1d:26:
06:d0:2c:7f:04:94:a1:1c:33:d2:88:fb:ce:29:d2:5d:5c:94:
c2:4a:0e:8c:91:fb:2d:57:38:d7:de:bc:c7:23:5d:04:88:01:
0c:0b:bd:1b:6c:c1:7d:fd:f5:6f:59:a8:a4:c5:f9:2f:3e:63:
f4:91:30:b8:8c:4f:9b:7d:99:4b:51:ce:18:bd:79:e6:ba:27:
df:a3:ca:45:6b:d1:1b:0d:ac:2a:7f:b8:f3:53:c0:cb:f1:53:
e3:18:28:6d:14:d3:9a:73:55:b5:71:50:c8:1c:a9:42:c6:ba:
47:be:e8:54:fe:2a:0b:ff:c6:5e:af:41:2a:c0:f0:d0:f6:68:
cc:3c:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:17 2026 by rpki-client