Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: x7MEpeN2bAKPTHSR3F0ZtvuIsSigPuCCRVwD5AYn9io=
Subject key identifier: A4:08:B6:B6:84:D2:1D:6C:80:43:AF:03:E3:92:0E:D9:4A:45:D6:4F
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 019D378961E2EF7F3C37C23D4DC1FAEF21C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 1317
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: dlqROMdfCCOUh5UHb5fE0VDhtw4.roa (hash: HsyhNJLABKhY0BJRKl4WOTqYOZ/p/2IS1Tc+avRiuXo=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: g2obQW8FmRlaunE8xQCgGyBvyqctWvohges6rWrIUZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:61:e2:ef:7f:3c:37:c2:3d:4d:c1:fa:ef:21:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=a408b6b684d21d6c8043af03e3920ed94a45d64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:d8:19:6a:de:3e:df:e5:29:81:41:5e:3f:
57:b3:70:ea:59:5d:8a:be:c0:5a:be:22:05:e7:9e:
d4:d5:c8:24:c7:70:7e:0f:8b:b6:ec:9a:13:f1:10:
18:c8:59:40:c7:cc:a9:25:eb:59:42:fe:0e:4c:dd:
ec:d8:2e:81:29:a9:24:c7:47:69:f6:04:e4:93:59:
0f:67:33:1b:c0:69:65:dc:ff:a3:33:db:0b:37:7e:
ac:50:3c:e7:12:5d:6c:6b:a4:b5:ac:a0:16:e8:79:
77:83:00:03:17:27:c2:52:a0:f5:81:e2:18:92:24:
c8:64:b3:fa:eb:97:73:ac:e6:be:08:e1:fd:05:8d:
75:cb:56:21:8c:7e:1f:06:48:24:68:d3:58:61:58:
fa:41:d6:7c:42:79:d1:ea:d7:28:44:f5:69:f8:a6:
08:47:c9:2b:70:ce:19:76:b2:47:f3:2e:77:07:27:
a3:ed:93:71:1d:1c:3d:7e:cc:aa:01:e7:4f:78:33:
4f:bc:40:fd:98:77:79:ee:b8:5b:b3:50:24:65:dc:
18:1a:e6:fa:ad:b4:2c:b3:c0:27:37:d6:62:cc:a5:
4c:c5:24:77:c8:21:02:80:a2:80:5e:7f:9d:0a:85:
f0:fc:dd:0a:5d:2c:67:e3:bd:40:fa:92:69:52:99:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:B6:B6:84:D2:1D:6C:80:43:AF:03:E3:92:0E:D9:4A:45:D6:4F
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:57:81:af:59:fd:45:83:35:85:5d:28:8e:ee:82:08:3a:
7c:30:5c:ac:3d:6c:4d:40:f6:a7:39:fa:59:cf:4d:61:41:1a:
aa:55:62:62:66:91:f7:2e:d9:24:02:72:8a:42:11:29:88:02:
56:43:60:93:17:8d:5f:c2:89:1e:cc:35:2d:7c:e1:3e:61:87:
08:43:30:1d:fb:6d:09:1f:d4:f4:91:fc:a7:13:eb:43:30:2a:
85:c3:79:59:60:80:44:12:cf:11:b3:d6:f2:f0:67:29:1b:da:
06:69:b3:7f:93:1d:aa:43:50:25:68:20:ec:e4:95:6c:7b:8e:
46:7c:43:de:e0:d9:60:e5:7f:60:13:c4:b3:87:98:38:22:4d:
87:62:74:47:0b:a3:58:fa:5f:0b:75:7a:f8:12:c6:39:ac:91:
c2:93:69:9a:d0:3d:ed:d9:66:3f:3e:11:c2:d1:43:78:2e:e7:
98:93:48:12:d2:ae:9e:0a:f4:86:89:13:46:d7:01:2b:f2:65:
b1:56:f3:54:cf:35:90:a5:d2:04:2b:c2:55:76:04:1c:69:61:
9d:21:e4:a8:3d:8a:92:e5:70:1f:6d:e1:7f:88:19:23:8b:93:
05:1b:53:0b:19:80:31:ad:b9:62:75:75:b7:d2:fd:25:89:34:
3f:b0:be:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWHi7388N8I9TcH67yHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4
MmJjMTgwHhcNMjYwMzI5MDMwMDQzWhcNMjYwMzMwMDMwMDQzWjAzMTEwLwYDVQQD
EyhhNDA4YjZiNjg0ZDIxZDZjODA0M2FmMDNlMzkyMGVkOTRhNDVkNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrjYGWrePt/lKYFBXj9Xs3DqWV2K
vsBaviIF557U1cgkx3B+D4u27JoT8RAYyFlAx8ypJetZQv4OTN3s2C6BKakkx0dp
9gTkk1kPZzMbwGll3P+jM9sLN36sUDznEl1sa6S1rKAW6Hl3gwADFyfCUqD1geIY
kiTIZLP665dzrOa+COH9BY11y1YhjH4fBkgkaNNYYVj6QdZ8QnnR6tcoRPVp+KYI
R8krcM4ZdrJH8y53Byej7ZNxHRw9fsyqAedPeDNPvED9mHd57rhbs1AkZdwYGub6
rbQss8AnN9ZizKVMxSR3yCECgKKAXn+dCoXw/N0KXSxn471A+pJpUpkuIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQItraE0h1sgEOvA+OSDtlKRdZPMB8GA1UdIwQY
MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt
MDFiN2UyNjJlZmYxLzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx
LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATelXga9Z
/UWDNYVdKI7uggg6fDBcrD1sTUD2pzn6Wc9NYUEaqlViYmaR9y7ZJAJyikIRKYgC
VkNgkxeNX8KJHsw1LXzhPmGHCEMwHfttCR/U9JH8pxPrQzAqhcN5WWCARBLPEbPW
8vBnKRvaBmmzf5MdqkNQJWgg7OSVbHuORnxD3uDZYOV/YBPEs4eYOCJNh2J0Rwuj
WPpfC3V6+BLGOayRwpNpmtA97dlmPz4RwtFDeC7nmJNIEtKungr0hokTRtcBK/Jl
sVbzVM81kKXSBCvCVXYEHGlhnSHkqD2KkuVwH23hf4gZI4uTBRtTCxmAMa25YnV1
t9L9JYk0P7C+0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:16 2026 by rpki-client