Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File: Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier: 1fYFOP9o+NBRKEvG2cBTLrdaovYWSroHLgc1DZt0WL4=
Subject key identifier: 52:BB:95:7C:FE:EF:D8:1B:7E:48:9B:FC:70:4F:BB:A4:89:BA:76:7B
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 019D29CED59573F5E10481A70E4E723F4281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number: 05D9
Signing time: Thu 26 Mar 2026 11:01:54 +0000
Manifest this update: Thu 26 Mar 2026 11:01:54 +0000
Manifest next update: Fri 27 Mar 2026 11:01:54 +0000
Files and hashes: 1: PTGFtop819nPl01gzng3ViiDuyQ.roa (hash: MsdxqZiMITKpL1yel8PLmuFTlbpZRDQiLbP60VZOUKg=)
2: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: qm2xuILKpUtrRMdbzlmyXCYNXMDpoW5OirHMbLCEQJ0=)
3: uOBfT9dJzAeP5L062tP2bPLjN00.roa (hash: YXcsdR0InWSwo1kicGcvoiEoVtpo1uOcvHTUXcUr4mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d5:95:73:f5:e1:04:81:a7:0e:4e:72:3f:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Mar 26 11:01:54 2026 GMT
Not After : Mar 27 11:01:54 2026 GMT
Subject: CN=52bb957cfeefd81b7e489bfc704fbba489ba767b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:e9:27:87:4c:e5:c5:47:fe:ed:18:ee:73:
8e:f3:41:94:e1:3b:d7:69:0f:34:2f:3b:bd:a4:b9:
8d:23:61:d2:1a:f1:0b:24:e4:ec:8f:2e:c2:66:80:
71:c1:4a:6e:0b:e8:af:45:6e:01:39:80:16:7b:ef:
d4:ed:fd:8c:f2:2f:63:ad:43:dc:bb:8b:84:0e:2b:
6d:03:af:f2:fa:c0:d9:a5:7f:b8:12:e0:f4:5e:5a:
a0:1c:1c:ec:4f:d4:04:c4:20:af:1a:7a:7a:e2:9b:
50:33:6d:4e:53:b9:48:80:01:0e:77:0f:16:72:7e:
2c:36:92:d7:97:4c:cf:46:80:16:f0:43:ba:e9:c4:
15:93:38:c4:95:e7:10:63:99:47:35:e9:89:8d:1e:
37:48:7d:b1:1b:36:78:88:d6:2e:3a:71:27:4e:f0:
4c:91:b8:93:f2:cb:3e:52:1a:13:3a:69:b6:1b:22:
bc:45:45:f4:88:6f:d1:f7:04:78:e3:f1:84:43:21:
20:95:f8:a7:7b:a2:59:f3:19:c6:c9:7a:50:a2:29:
e1:fa:23:0e:dc:da:67:da:89:7d:fb:ed:a1:2f:69:
21:66:ce:45:30:85:63:84:bd:e2:11:a9:00:c0:cf:
e3:3b:b1:06:84:38:51:58:13:e7:13:06:68:84:9f:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:95:7C:FE:EF:D8:1B:7E:48:9B:FC:70:4F:BB:A4:89:BA:76:7B
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:33:17:a1:fb:99:e1:75:f5:59:69:8a:df:7b:42:be:c3:8d:
e6:d8:90:9e:51:09:73:d7:cc:aa:8f:6b:78:ed:bc:91:7b:c0:
24:f3:df:94:3a:93:cc:48:4f:e5:67:26:46:8c:f9:49:ec:4e:
d6:1c:6f:95:4d:5f:3d:3d:d9:33:6c:ec:63:d3:3e:ba:27:0b:
95:f2:89:ec:1d:25:ca:29:07:71:ad:2d:5f:14:42:43:f7:c8:
36:9b:bd:e6:f6:98:ba:c1:a2:28:a9:af:39:1e:ce:38:9f:61:
18:c5:63:27:c5:3d:ad:97:da:d4:fa:7a:72:a2:3e:97:3d:43:
f1:9c:02:e0:86:41:8d:64:f0:30:c7:94:fd:4f:bb:2c:4b:f2:
dc:6a:ba:5b:ae:fb:9d:2e:c5:9b:f1:60:75:a0:fe:95:7e:6b:
4d:87:f7:38:c8:c6:97:d3:70:aa:77:d4:f7:04:7f:40:a7:a5:
d6:9f:d0:0d:d6:17:f4:7e:5e:63:77:ac:33:bb:b9:54:60:79:
fe:bb:7b:bb:06:e7:c3:54:d0:94:f8:73:7a:1e:3e:bc:ef:dd:
38:a4:e7:35:b5:66:18:c2:fe:06:76:91:c0:59:95:94:bd:ca:
89:da:3f:c7:6a:f5:94:b0:86:94:d6:5b:d7:bb:f2:2c:d8:97:
d4:65:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:11 2026 by rpki-client