Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: 3q4txWweo3mnzoO2/ECuE9exRQ+Ndp8IiJRusMCY3ws=
Subject key identifier: 2D:E3:0E:DC:38:4A:6B:62:90:AF:16:B4:4C:18:24:94:BD:2E:07:49
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 019D284E03EB76CCCDA26F7AE8D35798E3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 0BE0
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: 3nmA8gtv+pgamZOUeiMH1MzuI8DylnL62vgMSLReCWY=)
2: m-qku06qLY3rNaPKQ1zTMaIhHCk.roa (hash: P9Yy6mUhYd/ctFDm/ApbuzO2/tM/hkjnZVv/yiJ9K9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:03:eb:76:cc:cd:a2:6f:7a:e8:d3:57:98:e3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=2de30edc384a6b6290af16b44c182494bd2e0749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:e9:17:8b:30:4d:b2:83:0d:f3:c3:0d:62:
b5:22:87:d3:09:0f:c0:23:0e:c1:b4:b4:b8:fe:75:
90:1e:00:f1:5f:ca:4e:83:ee:83:c6:3e:e1:b7:c3:
f5:df:8c:0c:2f:6c:d3:4f:59:ab:03:ff:75:73:96:
4a:c5:da:5f:e2:b8:7c:01:ea:7d:6b:17:2b:53:7c:
eb:79:60:b0:15:ce:46:33:9d:cb:10:93:85:7e:c0:
16:36:81:c2:2a:6f:da:be:a6:20:20:0f:4c:cc:76:
9e:1d:14:ea:75:86:2d:ee:72:9f:46:4a:57:d2:bf:
a9:98:b3:48:8d:82:d1:ea:9b:cc:2f:78:34:18:fc:
b2:d4:cb:59:1c:7d:af:56:dc:3d:e0:c8:e9:21:48:
34:80:65:cc:6e:11:85:8a:e9:c4:3c:59:a4:7e:31:
a9:bf:84:f4:9b:23:43:65:73:aa:98:71:a8:2d:41:
80:66:72:ac:f2:94:d6:e9:16:84:fb:01:86:44:d4:
cd:f0:54:b7:03:b7:3a:0f:80:9d:0b:3d:9b:58:51:
6a:05:3c:c4:91:54:0b:32:95:21:7a:cb:e5:e3:7a:
18:80:e2:ef:49:e4:4c:20:0f:c8:b0:1c:35:80:21:
c9:c2:16:18:90:cf:50:96:0a:76:1f:75:b1:3f:52:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:0E:DC:38:4A:6B:62:90:AF:16:B4:4C:18:24:94:BD:2E:07:49
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:86:e8:38:a4:b8:76:89:5d:84:e2:2b:69:c7:24:c3:43:ff:
d6:02:9c:58:fd:22:f9:4b:c5:4a:68:90:35:14:0c:dc:e7:7f:
8c:56:f9:1e:f4:09:1e:79:89:c2:4d:70:cc:38:41:11:e7:d3:
06:c9:0f:58:17:cb:cc:02:2c:cf:25:e8:33:21:d9:f8:34:d0:
bc:02:0a:aa:75:30:a2:ed:60:d6:41:24:d6:5b:29:55:c3:27:
f0:a6:04:4d:64:3c:36:95:8d:b9:52:17:b9:14:ce:c3:34:dc:
27:3f:be:59:26:87:c5:9b:3e:2e:3c:30:48:ff:27:85:9f:34:
9e:1e:d2:67:1e:94:3f:eb:34:a6:73:b7:75:39:ae:e5:9e:41:
b5:2d:15:3a:3d:24:c3:9c:93:1e:0d:19:8b:63:9a:45:22:be:
2f:6b:ac:3a:1e:ec:c3:70:09:b0:b7:b3:ff:c6:6d:0d:48:fc:
02:a8:6f:87:01:32:ed:e9:10:9b:8d:15:c9:56:fb:d1:9e:5c:
2b:ce:2c:fe:1f:8e:00:d6:10:c1:37:90:ea:9b:a8:7a:a1:e9:
55:2d:4f:17:51:09:db:62:08:37:df:8b:49:9e:1d:ca:75:d7:
8d:85:00:a4:16:e7:88:de:9a:b0:bf:e7:79:49:be:e5:98:da:
1a:d6:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:06 2026 by rpki-client