Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: 6PySIAavanCtGmxFeYsIK5kzzF2I9YH54EBmbZ4EhfQ=
Subject key identifier: 09:1A:8E:B9:FD:A1:58:94:31:69:0F:B5:18:8F:04:38:DB:3B:C0:41
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019D37C0FB01131644372C58F8DB6E9B420A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 165D
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: 0RRbgUYbY47EzL3vocqK6zrfYdk.roa (hash: IF6XV0R5dhbBLV5xLicL36fWPzjrJS+64OX5boNdTPo=)
2: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
3: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
4: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: QoBCdWjJ+P9Ly2/u814qrL0u3D6aVWOW+1xytvruO6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fb:01:13:16:44:37:2c:58:f8:db:6e:9b:42:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=091a8eb9fda1589431690fb5188f0438db3bc041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:9c:53:2c:b0:4d:5f:08:50:ab:f0:56:42:
f9:31:dd:a2:a8:91:ec:68:a4:df:b6:b7:20:cd:ed:
43:8d:4c:26:e8:13:ae:94:b1:55:e2:dd:52:39:dd:
bc:ab:a8:7a:f2:e2:4e:da:51:0f:b1:e0:c7:71:c2:
3d:7d:a6:1e:4e:89:1f:56:e9:02:9c:a4:72:d4:db:
05:1b:bc:3f:aa:74:c5:82:87:60:3d:5d:bf:d6:6e:
36:2a:d9:e1:8b:10:8d:cc:ac:bf:42:63:80:ff:60:
3e:d1:9a:61:77:95:be:b9:ce:48:0a:74:bc:b3:8a:
8d:4e:a2:63:2f:31:1b:8a:01:e2:de:69:28:4c:b3:
4f:e6:a0:36:c6:9c:d3:99:43:17:56:90:b6:26:31:
52:b8:20:95:1f:83:6c:a7:46:54:3a:a1:1c:50:51:
91:9a:58:63:e5:f2:c6:bb:d9:4d:8c:54:b6:9d:8f:
94:d4:35:8c:91:16:10:ee:e3:84:09:fb:d0:dc:dc:
3b:4e:18:ee:90:41:33:3e:ef:cb:ea:da:99:5e:2b:
63:e7:84:2e:60:d6:c8:a9:72:67:b6:9d:b7:52:b5:
10:c2:9a:89:a2:96:fe:38:1c:e4:c5:d0:2b:fc:e4:
af:22:c1:bb:68:f6:4f:8f:5f:cd:9c:34:0e:0a:52:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1A:8E:B9:FD:A1:58:94:31:69:0F:B5:18:8F:04:38:DB:3B:C0:41
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2c:b4:24:9f:52:70:03:68:61:3a:ee:33:91:66:c4:c8:7a:
fe:c2:27:5d:5b:a1:80:c4:31:8c:29:e2:65:5f:89:e8:48:d8:
9c:3d:38:cd:6e:d2:d1:b4:fc:14:8f:7b:fc:4c:dd:ce:40:0b:
8a:58:ef:36:c1:b2:f6:ca:ca:b6:bc:c8:15:cd:2a:b0:e7:e8:
31:45:a5:08:ae:3b:cd:cc:a5:05:09:bb:0a:eb:3d:d0:73:8c:
12:57:c7:82:76:e1:a9:9d:45:b8:e3:1d:01:3e:7c:0e:38:59:
4a:3e:34:1b:e4:81:be:da:02:db:22:e4:a2:24:ce:59:10:c3:
e7:cb:11:e3:9c:c8:a0:88:74:b1:00:cf:05:ae:26:86:b1:f9:
fd:52:62:2f:34:fc:26:21:66:44:73:7f:3d:ff:e1:bb:e7:30:
3c:e6:dc:a2:7b:64:69:43:9c:37:c8:ab:57:eb:54:15:57:7b:
45:2d:ff:22:7f:67:5e:11:37:82:4e:d9:d8:15:11:19:07:98:
14:38:cc:3e:19:92:00:e1:48:0c:57:ca:19:43:93:f2:4e:8f:
c6:89:cb:c7:27:2e:bb:36:14:af:76:8b:7b:cd:f4:2f:12:49:
e5:49:a0:0f:c2:98:e5:7d:12:4e:54:f6:18:16:bf:d7:62:8e:
08:d4:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:40 2026 by rpki-client