Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
File: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft (raw, json)
Hash identifier: uhReAnxCjIAzjlA8HJ4bHq9t2ZNMkjDNaNzRk4P9S3k=
Subject key identifier: 4E:07:8B:5E:99:39:C6:B4:05:16:59:18:F4:2B:E5:F3:34:16:7B:3F
Authority key identifier: FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
Certificate issuer: /CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Certificate serial: 019D04E580B5CE64B25D92E6A91DA12B65DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
Manifest number: 25
Signing time: Thu 19 Mar 2026 07:00:42 +0000
Manifest this update: Thu 19 Mar 2026 07:00:42 +0000
Manifest next update: Fri 20 Mar 2026 07:00:42 +0000
Files and hashes: 1: _fyeIxDaafsDWMkS2A3N58AtJkU.roa (hash: H0SeTPFO1ojjf24io8wfPyjJHZQNS+KrdvYRVXD+DL4=)
2: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl (hash: lcI7jaqY4dRVBd+mLWxFVuLGaPDh1/B0kEvrS4P/j04=)
3: lmvQRZHoT7SrToyMEi92PYv4lr8.roa (hash: 54xRyjzzMSSYWcjiwt5uthywu9zHlEe922Syj7kTVbI=)
4: uCsQuS-4rVdPYPXfgacBtl1GxKU.roa (hash: mSrfH4b/LZzb55AU3CME/vQpiQIKZvFXbFgXnOdMHJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e5:80:b5:ce:64:b2:5d:92:e6:a9:1d:a1:2b:65:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Validity
Not Before: Mar 19 07:00:42 2026 GMT
Not After : Mar 20 07:00:42 2026 GMT
Subject: CN=4e078b5e9939c6b405165918f42be5f334167b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:b7:26:ed:63:cb:66:1b:9d:0c:67:73:af:
46:26:21:94:b5:ee:4f:12:9b:e7:f3:f4:8e:94:49:
d2:f3:f9:7f:60:47:95:31:98:15:61:c8:e7:79:90:
02:ac:d4:b7:e7:75:79:d4:81:f0:55:26:68:81:ac:
42:34:48:31:ae:58:3f:24:d7:89:99:0b:00:3b:31:
04:4e:8d:44:ac:35:83:12:dd:68:3e:bf:3b:17:ab:
17:64:c0:41:5c:80:e0:bf:e8:71:7c:30:f8:2f:d1:
0a:82:a6:71:52:d6:ca:fc:2a:7f:fb:9d:2d:f9:a1:
f6:c5:7e:35:c2:1a:c6:0b:5a:c4:9a:5e:09:92:6f:
7e:e9:76:88:08:5e:4a:ca:30:81:86:d8:89:84:ef:
bf:ec:2c:f7:48:70:71:43:15:bc:8c:da:71:ac:a2:
85:18:36:21:74:34:f6:3d:1e:37:55:29:ef:21:67:
7d:e5:d3:25:ed:3f:fe:0a:46:90:c4:7d:7e:73:b5:
cb:fb:30:1c:07:1d:f5:2a:d2:1c:ef:a9:53:ed:01:
58:c4:23:85:bd:5f:33:cf:0c:87:96:88:e8:b8:70:
02:83:8f:03:88:c0:bc:f3:a5:e9:f7:d2:c9:c6:d7:
98:e7:74:05:37:01:c7:a8:f2:e0:a9:c0:a1:df:62:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:8B:5E:99:39:C6:B4:05:16:59:18:F4:2B:E5:F3:34:16:7B:3F
X509v3 Authority Key Identifier:
keyid:FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:11:2d:5a:eb:b9:2e:20:da:b7:2d:c6:d0:fa:41:da:03:
03:ec:5c:8b:42:62:70:66:5c:f9:a5:b5:02:43:06:11:4a:49:
23:cd:32:d9:41:2d:ae:76:00:9b:94:33:e2:bc:24:b3:24:d0:
04:5e:2f:8e:d0:47:e7:3b:b8:78:38:55:3c:1f:b9:35:2a:3c:
b5:60:de:96:c7:40:9d:17:3f:b2:cd:86:fe:5c:30:43:a4:7d:
6e:b4:88:aa:df:48:0e:eb:fb:36:98:cf:0f:4e:20:37:5a:d1:
8f:82:46:08:4b:c7:26:fc:90:c9:90:d7:33:ca:e3:83:52:87:
8d:41:f6:02:03:81:b9:e0:ef:91:4b:ef:e1:4a:23:59:c0:d4:
7f:f3:c8:b6:06:e5:25:31:62:8a:d6:4a:f9:e3:fd:50:ad:10:
e9:8a:63:2f:e2:f7:48:fa:29:0c:a3:46:aa:db:a6:cf:06:1a:
d3:2e:b6:e5:a2:bc:36:ef:17:89:07:b9:53:a6:7c:07:8c:59:
e9:12:ea:a8:35:c6:5b:c9:3d:ae:6b:b4:2e:0b:20:09:a6:40:
d6:d2:c2:42:d3:75:6b:c7:89:bf:17:17:2d:d9:13:8d:38:15:
80:b3:73:d5:00:21:45:39:21:ac:ed:9d:2d:4c:f9:52:24:4c:
24:b8:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:58:20 2026 by rpki-client