Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
File: vrs3Cx2yDf2QiVQkesseCgUkCsE.mft (raw, json)
Hash identifier: LAGpIyyXrCmzVwk9fUECFtG2GSiYyo7mI8GcKdIiBF0=
Subject key identifier: 18:A6:F0:EA:33:22:2D:16:BB:4C:17:1A:8B:85:54:57:50:B8:13:35
Authority key identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1
Certificate issuer: /CN=bebb370b1db20dfd908954247acb1e0a05240ac1
Certificate serial: 019D29CDD88C8D67006A913581F820782497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
Manifest number: 0169
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: 4n5Ua4aTaAunDOOW01P0fMrY7k0.roa (hash: WNNgqxjBcUK1ZKvwmBjdbFYyCDwsWtboY/v6WqR+zss=)
2: vrs3Cx2yDf2QiVQkesseCgUkCsE.crl (hash: FaEWhea7sVQ5oKbxUnEDgNWTCJegCZZW7dh0K/P8+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d8:8c:8d:67:00:6a:91:35:81:f8:20:78:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebb370b1db20dfd908954247acb1e0a05240ac1
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=18a6f0ea33222d16bb4c171a8b85545750b81335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:db:cb:0f:01:40:47:7f:52:2a:68:15:19:
0f:81:bb:7d:30:70:96:73:a6:09:f6:18:53:55:5a:
46:10:0f:df:e1:3d:f7:fd:ec:01:bb:f8:e4:45:cf:
b5:a2:a5:d3:c6:ec:b1:9a:e5:bc:c1:49:4e:a2:c4:
c2:0c:8d:5d:fd:80:44:34:f9:9d:77:a9:7b:4d:b8:
0a:0c:c0:15:5c:89:59:78:55:7d:07:1f:ce:12:64:
d1:a9:de:b8:84:89:2c:d9:0a:ad:bc:95:72:e8:96:
04:84:84:ff:2b:cd:e2:09:ec:4d:9d:ef:41:5b:a6:
5f:8e:a8:46:35:9b:0b:88:1f:4a:ff:9e:63:ad:ef:
04:c3:35:83:28:06:59:35:e6:3c:e0:02:1e:c2:81:
5d:70:cc:37:d1:a0:d9:4d:28:a9:02:1b:77:1c:fc:
dc:f6:d8:c5:7f:e4:8d:6d:a8:4e:b9:d0:2e:4c:cb:
27:00:74:1f:f4:a7:15:ef:8a:8b:e1:ce:ea:dc:2c:
e5:b4:a8:e4:1b:28:25:63:85:e5:ef:5b:f4:72:1b:
78:51:c0:7c:18:d8:1c:a6:9c:e4:f0:2b:90:91:93:
74:9c:bc:de:5c:50:55:dc:34:b7:6b:e6:0d:fe:4c:
98:45:b6:b4:56:65:16:27:cb:7f:11:5d:10:8a:89:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:F0:EA:33:22:2D:16:BB:4C:17:1A:8B:85:54:57:50:B8:13:35
X509v3 Authority Key Identifier:
keyid:BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fd:28:4e:3e:38:8b:f8:95:67:c0:e9:09:bb:2e:9e:b5:58:
f5:6d:bd:c3:2a:73:6f:88:9d:ed:66:37:ee:04:92:a5:e8:10:
58:8c:14:d2:0e:33:91:1f:aa:02:83:05:0d:08:ee:bc:ad:2d:
76:b8:47:66:26:11:ed:b9:da:82:91:ee:77:49:f9:d6:8e:d6:
40:d1:46:b8:9b:c0:68:ec:76:b1:9f:76:5e:5e:8c:37:ea:00:
01:69:32:57:94:39:d2:6d:b1:7c:63:47:31:1e:68:45:98:2d:
59:97:2f:69:c2:c8:9f:34:22:2d:a4:f2:61:58:be:11:3f:65:
80:2d:63:22:39:66:6c:96:6f:11:a6:9e:96:1c:e9:63:18:14:
a7:ec:ac:e9:1b:a1:4b:13:19:7f:84:87:d5:82:bc:26:f4:8b:
40:14:83:c4:1b:3f:7f:b2:fd:29:8b:8d:f4:bb:33:a1:05:7d:
a8:df:d8:6f:f6:fa:db:f6:20:0a:d0:c4:9b:95:0a:1b:ef:84:
6e:e1:2a:b5:57:ff:33:b8:72:89:1c:71:20:bd:31:c1:56:b1:
f9:1a:ae:b7:10:de:58:93:ab:4e:ae:70:c7:6b:13:c5:7e:53:
75:e7:a6:ec:4d:f6:89:83:f4:a0:c4:d2:38:94:be:d4:c9:25:
c5:df:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:50 2026 by rpki-client