Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: qtvPOWGAoOEFWmRzRj9zULgaqTBqfi/iPmxWrwsNWlA=
Subject key identifier: 87:31:51:32:BE:79:50:86:5C:22:76:31:40:D5:93:5E:65:47:7D:54
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 019D39AEADC60677220EE66358A5E1C6F999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0D8C
Signing time: Sun 29 Mar 2026 13:00:42 +0000
Manifest this update: Sun 29 Mar 2026 13:00:42 +0000
Manifest next update: Mon 30 Mar 2026 13:00:42 +0000
Files and hashes: 1: CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa (hash: kcWbbVv8ASdYvi8EuyOv3tMh0xXxdFL5jH6YworqpiU=)
2: OCwZn3M2fA5Hq8kNmQdHXm6169A.roa (hash: hYYgtO03EJt7YSnRsoX8WPt38DBVQ4OQ4v1UuaWwBlg=)
3: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: PBB6f+rzy5r3jCvG/vKILS7193H0l9HfDQ6friLCgRA=)
4: qK3CTioRHIZv8tRs19l4YH3NK7Q.roa (hash: mYr/W0vsn5NqGep9nH2w5E2ZZ+X10OK8JIo9QGjsoSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ad:c6:06:77:22:0e:e6:63:58:a5:e1:c6:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Mar 29 13:00:42 2026 GMT
Not After : Mar 30 13:00:42 2026 GMT
Subject: CN=87315132be7950865c22763140d5935e65477d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:7a:ac:f5:f8:5d:52:56:59:d5:6f:f3:d8:
c8:1c:21:18:e9:62:6f:be:20:3f:f0:9d:3c:c9:01:
13:2a:ef:69:a9:18:2b:ba:93:bc:3b:cb:12:45:24:
fe:eb:db:5e:7b:ca:71:56:9e:9f:77:00:7c:b5:9f:
1d:26:1b:dd:1c:a2:48:47:f8:22:1f:08:91:9b:c9:
95:4c:26:ff:fc:13:59:d4:23:ca:b4:72:26:8d:da:
69:d5:26:32:d9:88:71:b9:d4:7f:aa:a7:63:c4:1a:
38:d6:cc:64:c3:68:17:43:0e:90:ae:62:a7:b6:84:
83:3e:fb:54:d0:85:41:50:3d:df:29:ec:8a:c7:64:
ab:a6:dd:cb:b9:7b:58:33:24:2d:22:15:6f:31:4e:
bd:7e:f7:77:ff:05:be:c5:36:16:4a:a9:5e:e4:d0:
05:f3:43:e2:df:b7:5a:8e:3c:9b:92:52:e6:ba:1d:
af:b6:3b:35:d5:c5:52:a2:89:36:c9:fc:9e:20:69:
32:be:81:fe:c6:45:e7:e6:6c:4b:63:35:22:71:0e:
87:a2:01:e4:82:7c:73:95:d0:d8:b5:8f:16:7b:e2:
66:b3:03:67:ca:c2:f4:6d:95:03:7b:7b:eb:fc:91:
0d:11:de:0f:db:43:f9:2c:c8:bb:df:8c:3e:12:8c:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:51:32:BE:79:50:86:5C:22:76:31:40:D5:93:5E:65:47:7D:54
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:11:e2:01:d0:da:15:d0:f1:62:6c:8b:e5:bb:06:05:8a:
bb:85:3a:d7:62:79:11:5b:34:64:dc:f1:a2:95:48:c2:9a:fe:
ba:d2:f8:fd:1d:98:03:8b:ab:a9:97:3a:fb:f0:1b:f9:96:f6:
46:b6:0a:2e:ea:0b:9a:5a:0c:b5:f0:c4:44:fa:f1:e8:a6:48:
32:b1:2c:75:23:aa:27:17:63:4d:0b:c7:20:5f:52:2f:dc:d8:
be:5b:9f:b5:1a:43:f6:c2:72:0c:25:3e:a8:89:ea:83:1f:05:
32:bc:9f:37:91:55:74:7b:ab:82:a1:56:82:0f:72:9f:2f:3e:
29:f4:08:16:81:81:01:60:58:1b:c0:40:ee:b1:60:7d:aa:a5:
78:05:01:cb:98:d8:e6:76:06:e8:7c:5f:f8:79:07:aa:74:4b:
29:1f:9e:81:6d:a9:34:84:d5:f2:bd:fa:40:60:c4:f2:3a:02:
92:e6:d8:83:f2:67:bb:1c:51:43:38:3f:a5:a2:28:f3:d9:82:
86:ab:2c:29:01:6e:8b:64:77:3a:2c:a0:9a:cf:3a:c0:49:2f:
c9:75:0a:29:49:a0:f5:79:a0:b3:a2:94:c9:34:18:b3:76:64:
84:4f:28:0d:ff:c5:c9:54:b4:94:52:99:38:08:c4:b2:84:28:
29:23:36:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:39:21 2026 by rpki-client