
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier: z17HEMTMz8eMyNQt2K8f0PvgR3tyHl9S+RA8Mb+MYxI=
Subject key identifier: 52:07:44:F0:15:1D:E0:5D:7B:25:C3:C4:06:0E:39:E6:8E:3F:22:86
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 019D281677A5CF1A5EC4C36193AD2016220A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number: 0E9A
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: 12tltfCljlEYMIbTWGrshb-SAeM.roa (hash: gcDZCYE+ZRPEnVs814Hmugxl9mDk2tU0oopZwD2L8YE=)
2: DSezdrP9gy21X_YsA_sM_mUG7ZY.roa (hash: qoW6fyKLZn8Z7/AgsCgpfsigtdkhI6Ya3YqI5YnpmiM=)
3: UdOK24rX42pM0mffUIAyGxdh1jE.roa (hash: ge3c0pE7ZRxzrWSr8Lljan5nhFZFuIJr7TBmymDbjSA=)
4: YXyKSQA62yKkb7oIprfQWpNYq5k.roa (hash: 2S/w+1qpceETf27eC9DVFe1O3Yuo2aVT1QqWaFNm3nw=)
5: Yz0tW7_OCO7g3t7Tl4hf-jwP-84.roa (hash: BjEOeKCf9w15Azewi7EmVzU1JhpabQlQfkyNDs8UbSQ=)
6: fR8Sj7qPvSsegrc5cvXE_3c58VA.roa (hash: valE9KfmP8wJDIQ+h1QKYZFv8JH48MGyAU5h4M83KlM=)
7: hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa (hash: 86deeND43J6o/LVaKUcKau2VOr6OHvLSqsJsfXpJwdk=)
8: leGB8m29RWjK_iumLxdAPO-LbVQ.roa (hash: re/2P2K5TSI3Dvi9H7hljx/2KFrMsGS/uaXIMLDOibU=)
9: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: 1yomBnmq1zyKeMAlzRrU1Q2cff2TTM3ln2Lc4xbPWVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:77:a5:cf:1a:5e:c4:c3:61:93:ad:20:16:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=520744f0151de05d7b25c3c4060e39e68e3f2286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:a6:09:f5:58:84:23:3f:c6:3a:53:37:04:
14:eb:1e:ff:44:ab:2f:f9:c9:1a:04:b8:4e:ee:c3:
2a:00:89:ca:9f:db:de:83:35:43:46:d8:d1:86:2e:
d6:fb:7b:a5:a6:0d:5d:80:2e:40:76:ed:19:2e:6c:
4c:e3:ed:3c:0a:3b:65:a9:f6:bd:bd:7d:f2:b5:a9:
7e:f7:1a:81:3e:31:37:90:8f:e8:7b:88:79:c8:00:
f3:bf:4e:b5:21:4f:b6:e6:a5:f2:76:d2:2c:30:af:
99:bf:87:46:d7:ea:85:9e:cf:68:fc:43:67:7b:44:
9e:be:ff:2a:b0:13:9b:77:21:fd:07:97:7c:82:85:
d4:da:52:58:b9:b0:2e:ca:a0:76:3b:ac:7d:57:6e:
65:20:b6:e0:b6:7f:92:38:b7:29:1e:9d:88:8f:24:
b5:dc:e8:b2:50:68:e5:b1:02:00:c7:0d:d7:6d:43:
43:ce:e7:ff:54:89:fd:0c:3d:ea:71:43:7c:90:5c:
49:2d:cc:d8:e8:24:de:8b:34:f7:89:88:df:53:8a:
c2:1b:92:47:37:cf:07:91:3f:b0:63:cd:4c:bb:91:
b2:44:fa:57:b6:12:d1:22:50:8d:78:9c:c2:3f:94:
f0:07:f2:66:34:8c:98:4d:a0:7f:f7:09:ea:78:98:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:44:F0:15:1D:E0:5D:7B:25:C3:C4:06:0E:39:E6:8E:3F:22:86
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:28:35:9c:bb:6d:1e:c5:05:12:c8:04:ee:ab:19:98:59:8d:
76:5b:a1:5f:72:65:22:bd:7c:a7:b4:65:d3:f2:c1:8a:87:ca:
03:d0:05:9c:b8:8a:74:f6:2a:9f:51:b1:57:0e:ae:89:00:fd:
08:28:70:4a:66:24:24:c4:7b:ae:fc:95:58:39:43:31:6e:56:
88:cc:de:96:34:72:ae:b7:95:00:9d:4a:c5:79:be:35:e1:af:
7d:9f:96:54:9d:b5:30:78:cb:d5:b8:18:3e:81:f0:f3:0d:0e:
3c:84:5e:c8:38:76:c0:21:14:e3:47:39:37:49:cb:4d:30:c5:
bc:6c:1e:44:de:d1:4d:b3:64:67:89:ca:d7:33:c2:42:85:f7:
ad:6c:00:4f:35:52:a7:4c:75:62:87:96:51:bb:97:17:93:58:
98:58:ba:14:5c:ec:fa:e2:cf:97:c1:37:3a:d9:88:2d:ca:86:
13:f5:37:0d:bd:22:a6:39:e8:26:a8:de:90:c1:e3:a2:e6:17:
14:bf:92:6f:55:c4:8b:a0:fd:32:ee:aa:ee:af:b3:af:3a:41:
34:48:0f:57:3f:8a:f0:9f:0a:07:ad:49:bd:39:6a:c7:71:e6:
7a:ea:20:f8:29:f1:8c:dc:d9:03:a2:0b:45:a4:72:8a:51:ad:
d3:f6:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:17 2026 by rpki-client