Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: ckaOX7ainoULMwTrOMJQHp5alfVYr6kLxTRJO4nAtHk=
Subject key identifier: 23:67:03:F2:33:D6:C1:D3:EB:F2:E1:9B:9E:D3:C9:04:CE:3F:1C:01
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 019D3909D27004685EB4178416F7FB358050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa (hash: CMCFJ522ifdqt0xcDWNSZop/WrNivf5oelP7FfWl5vI=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: oVX/zN3jTxSYbfLE621D7BajR0ROKo1ekxJksSro8nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d2:70:04:68:5e:b4:17:84:16:f7:fb:35:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=236703f233d6c1d3ebf2e19b9ed3c904ce3f1c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:d0:eb:96:96:75:4f:f9:7c:7b:d0:0a:6b:
6f:29:a5:34:12:c1:d4:9e:2d:94:ae:26:44:2d:52:
f7:8b:0f:1c:c7:0a:61:9d:fd:d0:fe:34:64:ca:11:
b6:5a:07:1e:3b:11:57:12:a1:be:21:53:7e:35:8f:
5e:5d:1e:3f:92:70:d7:c5:69:2b:e4:e6:c6:fe:c7:
d3:fa:1e:09:be:90:65:e7:8e:39:c4:f4:2b:fb:15:
a5:f9:79:73:f2:94:34:f9:25:90:a2:e7:c4:e2:bd:
16:e2:cd:d0:d9:dc:64:2a:ec:fb:52:72:ce:cb:38:
43:5e:73:c4:38:aa:95:27:06:bd:12:10:4a:18:f1:
d5:81:ce:7c:04:be:ee:7b:89:b9:8d:3c:21:5c:fe:
57:f9:3e:41:dc:6b:5e:9c:88:a4:45:ac:0d:83:60:
c5:36:4a:8e:e5:bc:d2:ed:1e:e0:19:95:13:5e:4b:
ed:fb:4f:ae:80:b9:62:8f:74:4b:ca:37:a6:b7:56:
d6:85:e4:46:b2:d8:fc:b4:de:e1:2f:15:16:a5:8e:
ae:7d:16:62:28:04:32:88:51:27:ad:46:a4:f5:ff:
5b:5e:c5:d3:0a:a4:8c:69:92:d9:10:92:ce:28:f8:
0d:7d:00:fd:67:0a:4e:bc:7f:54:2b:40:2d:12:a7:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:67:03:F2:33:D6:C1:D3:EB:F2:E1:9B:9E:D3:C9:04:CE:3F:1C:01
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:e2:a5:2b:05:32:dd:45:9a:f6:a9:c9:93:d5:ec:5d:74:
51:ef:0a:5e:83:d3:32:c2:35:64:8a:19:ea:8c:b0:99:1e:a5:
58:5b:85:78:e2:ef:93:c9:38:7f:51:b2:aa:2e:3b:d3:8f:d9:
b0:9b:6a:fe:9f:3b:b4:ed:b3:9f:84:9d:b3:93:2e:3f:73:9d:
a8:21:e4:2c:fe:30:aa:43:9e:03:cd:36:76:b3:17:fa:ae:0b:
04:4f:ef:6e:37:d6:c9:1d:99:82:ee:53:f5:12:99:be:e8:0c:
14:19:67:5c:cd:16:cd:11:0b:e2:04:34:e6:a0:2b:bb:42:d6:
3f:35:20:9d:21:1a:42:55:3e:4a:70:dc:cc:3b:cf:05:ea:54:
54:9b:5b:20:df:0f:7e:1f:18:0a:37:ea:a9:26:a7:55:65:ed:
c5:95:2d:fa:7a:aa:b6:36:2b:18:61:51:48:b3:8c:fb:d3:cd:
49:75:db:b4:29:de:2b:f5:1d:a3:37:4e:57:13:15:74:f9:39:
81:73:43:ee:8c:ef:4a:35:d2:d2:0b:82:38:76:17:69:23:65:
88:74:d0:27:77:96:bb:8a:f6:a6:6f:e7:ea:66:42:a6:92:38:
d6:13:08:f0:59:07:88:0e:4a:53:3a:20:1c:4d:82:9d:62:b5:
1c:4c:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:16 2026 by rpki-client