Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier: AVdrRMYENQZnmd9gjvGXe7n3Sse6flzFWSaYJXZcXhc=
Subject key identifier: 2D:0A:04:D0:5D:8A:6F:B3:AD:CA:AE:A7:FB:66:7E:AE:62:64:60:9F
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial: 019D254CE860170F24018DBAFC2A9F5EE410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number: 0373
Signing time: Wed 25 Mar 2026 14:01:30 +0000
Manifest this update: Wed 25 Mar 2026 14:01:30 +0000
Manifest next update: Thu 26 Mar 2026 14:01:30 +0000
Files and hashes: 1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: RMVLYCj3iSTGd6Lo+ve+vSycSJaF7M28IsB6zQXCDhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:e8:60:17:0f:24:01:8d:ba:fc:2a:9f:5e:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Validity
Not Before: Mar 25 14:01:30 2026 GMT
Not After : Mar 26 14:01:30 2026 GMT
Subject: CN=2d0a04d05d8a6fb3adcaaea7fb667eae6264609f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:30:bd:e3:81:c9:b4:c1:1b:27:10:f0:82:
8b:07:81:ec:58:a5:15:3f:7f:d1:bd:4d:95:e1:85:
ca:e1:32:22:28:97:64:0a:a6:35:b9:9a:b2:bd:d2:
8e:ba:81:15:fc:90:f6:a9:ed:44:c2:f7:0a:15:b3:
0d:01:0b:28:40:6c:c8:fd:c9:17:c9:a5:a4:ca:d5:
2b:48:0e:5b:e8:d6:0c:74:09:4c:13:54:c8:8a:75:
ca:9d:23:67:0c:ee:e7:87:24:98:ad:a9:9c:0d:0d:
48:f2:3c:24:49:1c:44:1c:95:32:2e:b2:3f:f1:a3:
6c:01:52:f3:e5:4c:39:7a:c0:64:23:b1:13:7e:8e:
a4:ff:30:42:97:07:65:9f:d7:7a:75:fd:15:50:89:
4b:b0:ae:7f:b9:a4:23:c3:2f:fe:7a:0a:a3:bc:6f:
42:a0:cf:1a:6d:ea:c6:08:63:68:e8:3d:f6:47:20:
79:05:59:25:24:89:e5:48:6e:67:c5:6d:31:f4:4d:
5c:7f:7e:13:e8:9a:0f:5d:f3:1c:6d:8e:07:4f:7f:
e3:93:83:6a:ab:28:d5:d7:81:14:93:41:3d:84:9e:
d5:d4:82:ef:00:70:be:d5:d7:17:dd:91:50:01:5a:
1c:fa:c9:aa:f3:15:06:f8:17:e3:0d:bd:5e:62:a0:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0A:04:D0:5D:8A:6F:B3:AD:CA:AE:A7:FB:66:7E:AE:62:64:60:9F
X509v3 Authority Key Identifier:
keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b8:de:27:04:b8:d7:9a:49:cc:3d:6d:12:05:76:1f:2c:00:
4e:1a:48:0c:9c:44:46:7b:0c:c0:9b:59:64:f1:4d:82:84:51:
c9:ec:1b:97:c3:30:24:3e:d9:fa:9a:8b:f9:f4:6c:3d:50:05:
fd:d5:9c:30:6e:2b:34:df:e3:bc:4a:d9:a5:9f:48:43:9e:0c:
02:a8:e6:e0:68:4e:af:6b:18:38:24:05:5d:53:c2:80:0e:23:
d2:7a:4d:2c:bd:90:68:49:02:60:31:35:f2:6a:5a:24:51:7e:
96:6c:a9:ed:10:e8:16:02:e3:72:69:17:8d:73:84:39:82:b8:
02:e8:d6:00:68:42:75:f5:d8:fb:3f:61:09:a7:4b:b6:32:fa:
c7:c1:04:ea:5a:61:3f:ed:ad:63:90:14:61:a5:50:cc:3d:e1:
df:5a:3c:1c:2b:65:8d:86:23:05:87:30:94:78:f4:06:11:39:
5d:6c:d5:ce:93:ad:10:6e:36:dd:d2:bb:39:59:ea:ad:3f:b0:
1b:ed:b4:c7:36:a1:cc:a3:cf:56:85:54:4c:de:ea:2d:8c:7e:
21:13:fd:73:48:c3:92:fb:2a:a9:91:07:93:73:14:64:f7:08:
12:e0:a7:06:eb:cf:76:96:3e:9c:7a:a4:d9:0f:1a:6e:04:d9:
49:d9:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:23 2026 by rpki-client