Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: Zh1arvTuwAzl6p23rKnLW9+bsdxFHwrSDR5GmPb7HRA=
Subject key identifier: 9B:77:DC:3E:61:E4:2E:93:95:A8:36:06:4D:50:3A:0A:90:B3:16:3C
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 019D1C807E8DAD6B49E9931973EF7C646E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 1882
Signing time: Mon 23 Mar 2026 21:01:16 +0000
Manifest this update: Mon 23 Mar 2026 21:01:16 +0000
Manifest next update: Tue 24 Mar 2026 21:01:16 +0000
Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: vHbGQcKUSneCpgrOdSIsdW9X3+eO1WnxryI06kMC1lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:80:7e:8d:ad:6b:49:e9:93:19:73:ef:7c:64:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Mar 23 21:01:16 2026 GMT
Not After : Mar 24 21:01:16 2026 GMT
Subject: CN=9b77dc3e61e42e9395a836064d503a0a90b3163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:d4:9a:6e:35:31:64:1d:9a:6d:68:48:fe:
a6:1c:8d:72:81:49:1a:7f:a3:e6:3c:ed:1e:14:80:
11:4a:4b:d5:99:3e:86:ee:fd:8e:86:05:f4:df:75:
74:51:ea:56:b2:ba:9d:64:f2:15:04:ca:c4:46:d0:
cd:f1:a1:4d:eb:26:08:17:a3:7e:53:66:30:9f:5f:
0c:9e:7c:30:0d:e4:ed:00:23:51:c5:9e:9d:be:75:
d1:cc:d0:5f:f9:75:24:b2:d6:b2:2c:cd:c0:8e:2d:
7f:93:2e:66:a7:33:8c:28:1a:cf:b2:3f:8b:77:51:
b9:d8:f6:09:cb:d6:fc:a8:6f:41:c5:bb:1b:f6:eb:
7e:1e:ac:39:80:d1:07:b4:9c:ec:06:9a:cf:3d:2d:
3a:f8:ce:46:29:f9:d8:a5:73:f8:5a:0a:ab:81:be:
0f:b3:64:7a:7e:3a:3d:eb:25:39:9a:fe:b7:64:4f:
e1:9b:b3:c4:e6:66:0b:3d:d2:95:cc:c2:7a:31:27:
d1:9f:05:96:fd:39:10:ed:ec:c6:d3:9b:77:a7:84:
74:95:1f:17:a8:6d:cf:7d:69:74:ed:ab:ef:69:16:
a2:8a:92:17:e2:54:72:59:21:84:5d:b9:05:3e:77:
a4:7d:d8:af:df:7e:09:6b:2d:01:31:cd:d1:0e:ee:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:77:DC:3E:61:E4:2E:93:95:A8:36:06:4D:50:3A:0A:90:B3:16:3C
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:52:5c:70:ba:b2:90:4d:7c:a3:d0:38:63:51:6c:08:00:
cf:3e:59:04:e5:45:c3:c8:f5:24:a7:e8:39:d9:f5:a2:e6:f5:
b2:7f:23:73:b4:4c:67:b5:53:04:2c:98:b2:65:be:7e:03:89:
3a:68:51:17:83:b3:dc:dc:57:e2:90:9d:64:d8:8a:52:fb:17:
58:17:f7:4d:81:63:64:51:83:30:22:60:99:3e:37:06:cc:0e:
aa:f6:5c:4a:5f:dd:86:4c:c0:f9:f3:28:47:ac:71:65:2e:f2:
11:67:5d:bd:58:9e:72:36:35:ae:d9:9f:7f:ef:ed:d2:2e:df:
f9:c7:48:56:fd:b0:b2:f5:9f:cf:6e:ad:99:28:92:12:33:30:
39:94:79:6b:ad:17:4e:1c:7e:71:12:a9:b1:b7:f6:57:8b:4f:
11:64:c7:91:a3:98:93:b4:4f:58:c2:bc:a9:1d:d0:7d:c8:85:
e8:c5:e5:65:a7:fb:5d:52:8e:05:18:26:58:80:d0:8a:5c:97:
0f:89:ac:39:d3:48:46:62:a0:18:90:27:d6:28:33:d2:99:ff:
ac:8b:07:c1:ea:80:a5:60:5a:57:cf:76:3d:cf:75:04:e5:95:
99:ae:c5:bb:6e:5a:74:37:88:af:07:75:ca:96:ad:5f:75:01:
a8:18:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 03:59:27 2026 by rpki-client