Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: wTxlF7gNGtPnmOxomaYorUctoHDWMWL6WROqi1R+QfY=
Subject key identifier: 01:D6:D3:84:03:E0:54:32:36:2C:10:9C:A2:5A:0D:DB:1C:D5:19:C5
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019D37C0AABC8638F45ECBBDD21C7C768D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 15DB
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: 341ViOQdsNCW-En8QgEMghW3CrA.roa (hash: ZDMhvpmhtSILebU2dF818x+O1gwwEqpIPXCs7VmgQH0=)
2: EwqvsuzaZqidzerK9hCEUFqmQ00.roa (hash: GDEyHKgpCdUpHrUWgA6Yr0loRQV7nfKi6qOOjAkX3eQ=)
3: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: Tj4gLPVOj/bwFNm4OPD4uW9Lh+ohR4en4PQovZ9TMuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:aa:bc:86:38:f4:5e:cb:bd:d2:1c:7c:76:8d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=01d6d38403e05432362c109ca25a0ddb1cd519c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:d1:dd:69:6c:49:a6:7b:e8:94:67:91:30:
c0:85:a9:58:24:8c:86:8e:d2:24:53:2d:53:93:b4:
df:ef:4e:d6:79:f7:02:23:ad:f1:87:13:16:c3:a9:
81:39:90:f7:93:af:fd:83:71:45:24:f9:5c:75:cf:
00:04:34:91:5f:00:04:2e:26:27:54:c7:ef:ab:31:
97:7d:87:de:f6:55:0e:11:b9:c4:9d:d9:f4:d1:a2:
dc:02:26:b7:16:fb:41:c4:1d:b7:e9:0f:dc:d4:5c:
9a:c5:73:40:84:55:ff:11:38:5b:c6:9d:1f:a7:a2:
75:70:1c:9a:3f:51:4c:39:f5:b1:e6:fb:60:89:7b:
ee:80:bf:cd:a2:36:a1:5e:ac:20:e2:be:82:68:4d:
74:10:e7:0e:36:4b:1d:70:6d:41:c5:a0:7f:36:7d:
da:a1:18:53:6c:e6:ca:fa:87:ef:bb:c3:d7:ac:f6:
4b:1d:12:ab:64:fc:39:fd:9b:fe:89:a2:4f:9a:64:
ee:6a:a6:46:66:10:b3:f4:17:8c:d7:e3:fc:81:3c:
5f:77:4c:6b:47:dc:69:cf:2b:35:02:64:ea:b5:56:
ea:a1:37:0e:65:c0:31:6f:73:6f:39:9e:c1:71:c5:
5a:f9:38:e7:c4:49:93:61:65:1a:34:6c:b9:2b:ed:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:D3:84:03:E0:54:32:36:2C:10:9C:A2:5A:0D:DB:1C:D5:19:C5
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:75:24:03:0e:68:bd:95:db:a4:08:21:b5:65:3c:2f:81:5c:
9c:dd:ba:25:ff:62:5d:ad:dd:75:b7:15:2c:5a:4c:52:97:23:
36:b4:f9:5e:37:8e:28:62:65:2e:b6:09:dc:08:c5:e2:f1:90:
58:b2:80:25:63:46:42:31:6a:76:a7:b4:f4:a2:9c:da:79:fc:
c8:b8:96:91:55:08:73:59:c8:52:27:91:64:ed:3e:06:b1:ce:
35:7e:7d:59:3e:3c:c2:e1:cd:ef:a1:0a:49:c9:40:73:e3:bb:
be:40:e5:5e:e5:5b:19:dc:3c:68:52:6d:22:7f:63:96:79:f6:
cf:8c:7c:00:fc:ac:8d:94:9f:f0:fc:47:72:36:69:50:73:97:
9f:62:bd:64:f0:57:5c:62:bd:a5:9b:14:8d:85:ad:5b:4b:92:
6d:78:9c:4c:54:d9:0d:94:6f:fd:56:4b:09:79:f5:5f:1e:59:
20:b9:b2:f9:95:85:7c:f1:a3:5f:c7:c7:bd:ad:85:02:29:3c:
f7:6d:55:ab:49:ed:49:9a:76:ef:c4:e8:59:6d:f3:15:02:45:
51:ee:17:f1:ff:21:ae:b9:5a:25:2e:12:9e:a1:14:c8:34:45:
31:71:f1:ff:97:06:6a:57:1f:5a:10:a9:85:b4:18:9e:b0:9f:
eb:bd:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:54 2026 by rpki-client