Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: LhDW67GRjm2MwrRlSWN9MgPaezuCz8do0xin86dXcjg=
Subject key identifier: F7:F8:DB:E2:54:F3:03:75:81:CD:37:AB:2C:26:D0:BD:A9:73:31:26
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019D284D3A8F117595D1BC8C4AAF84A2740A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:00:42 +0000
Manifest this update: Thu 26 Mar 2026 04:00:42 +0000
Manifest next update: Fri 27 Mar 2026 04:00:42 +0000
Files and hashes: 1: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (hash: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8=)
2: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (hash: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY=)
3: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: tLGCVzg+lGhU+L7w1+gJLuRvijxArZkCmWXH6+UV5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3a:8f:11:75:95:d1:bc:8c:4a:af:84:a2:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Mar 26 04:00:42 2026 GMT
Not After : Mar 27 04:00:42 2026 GMT
Subject: CN=f7f8dbe254f3037581cd37ab2c26d0bda9733126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:ee:fb:6f:7f:a1:fd:e0:2e:a9:35:10:75:
16:e1:13:b2:f2:07:ec:8c:8f:88:b3:c5:46:59:88:
98:42:d3:5b:27:b7:ab:b7:52:fc:90:d9:b2:d9:16:
85:22:cb:02:bf:ae:0c:5c:20:c5:cd:46:6a:ce:3c:
fe:42:7d:72:55:cb:b3:2c:96:d4:45:ee:ce:5e:4e:
aa:a0:9a:7c:33:15:ca:7f:d4:a4:b9:c4:59:03:04:
7f:f1:de:38:ae:5a:b7:6b:ed:7c:16:7c:17:32:2b:
80:69:00:34:21:d4:4e:a7:42:53:75:34:30:e8:83:
28:2c:d7:a0:3a:e6:4e:5f:ad:ac:39:f1:e1:36:51:
7e:9f:4e:bc:17:5f:1e:16:31:aa:26:f3:0a:e8:da:
e9:c1:50:08:7a:32:eb:9b:2a:77:b7:f5:29:85:a4:
8f:d9:ea:ea:e5:f4:30:d0:e5:5e:b6:58:43:5d:ba:
b8:42:34:13:15:bb:d8:7e:2d:64:3d:d8:b3:2c:7b:
dc:f0:af:2f:39:36:04:97:6b:8d:65:47:21:e9:b5:
f0:12:aa:55:fb:54:b6:19:58:5b:59:af:25:92:e6:
c9:2c:d9:29:dd:41:7c:0c:bd:29:59:ba:9c:2e:94:
be:d0:0e:84:3a:f3:c6:ba:9b:0c:03:d4:0b:03:dc:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:DB:E2:54:F3:03:75:81:CD:37:AB:2C:26:D0:BD:A9:73:31:26
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0b:d1:9c:14:4d:ac:80:c3:47:62:dc:13:c8:67:c3:97:44:
75:0a:dc:ac:d2:12:a9:fd:52:36:9a:e4:ce:cb:e7:de:19:9d:
d0:80:ed:65:84:ae:6a:72:74:6e:dd:f2:8b:54:97:36:a8:ce:
64:d9:a8:ea:e8:5a:ce:4d:89:8a:0c:56:f2:72:06:f1:19:22:
26:11:47:70:c6:41:08:fa:5d:17:db:a6:62:f0:4a:4c:2e:16:
59:cc:24:f4:70:32:f5:cd:40:3f:a4:55:42:b9:ff:1d:a4:77:
37:1e:1f:89:7b:83:3a:27:1a:9a:ae:4d:c6:31:93:fc:33:f3:
ad:00:44:fe:59:fe:b1:59:95:e7:06:92:42:ec:fa:c6:93:a1:
d7:cd:44:9f:84:7b:86:da:4b:57:78:8a:31:49:53:1f:50:ce:
00:6e:99:04:50:1a:9e:3e:e0:b2:e4:b9:fd:15:37:c4:4f:e2:
be:f4:8e:4c:bc:8e:45:03:5c:7f:67:5c:87:c5:0a:eb:70:e5:
8e:c0:14:02:5c:cc:c2:41:b1:5c:5e:d8:2e:fc:2b:fa:ae:1d:
49:83:4b:29:86:f1:01:55:be:34:78:ea:bd:39:6f:c0:67:16:
b8:84:1d:43:57:f3:b6:a7:2d:1d:32:7e:56:96:cd:5d:f9:cf:
fd:1d:eb:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTTqPEXWV0byMSq+EonQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjUyNTJjY2FjM2Y2ZGMxNDI2YjU1M2YyYzFjNzIzM2Fj
Yzg5NGIwHhcNMjYwMzI2MDQwMDQyWhcNMjYwMzI3MDQwMDQyWjAzMTEwLwYDVQQD
EyhmN2Y4ZGJlMjU0ZjMwMzc1ODFjZDM3YWIyYzI2ZDBiZGE5NzMzMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozju+29/of3gLqk1EHUW4ROy8gfs
jI+Is8VGWYiYQtNbJ7ert1L8kNmy2RaFIssCv64MXCDFzUZqzjz+Qn1yVcuzLJbU
Re7OXk6qoJp8MxXKf9SkucRZAwR/8d44rlq3a+18FnwXMiuAaQA0IdROp0JTdTQw
6IMoLNegOuZOX62sOfHhNlF+n068F18eFjGqJvMK6NrpwVAIejLrmyp3t/UphaSP
2erq5fQw0OVetlhDXbq4QjQTFbvYfi1kPdizLHvc8K8vOTYEl2uNZUch6bXwEqpV
+1S2GVhbWa8lkubJLNkp3UF8DL0pWbqcLpS+0A6EOvPGupsMA9QLA9w74wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPf42+JU8wN1gc03qywm0L2pczEmMB8GA1UdIwQY
MBaAFL71JSzKw/bcFCa1U/LBxyM6zIlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt
MTFlNWY2ZDEyZWYxLzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx
LzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2AvRnBRN
rIDDR2LcE8hnw5dEdQrcrNISqf1SNprkzsvn3hmd0IDtZYSuanJ0bt3yi1SXNqjO
ZNmo6uhazk2JigxW8nIG8RkiJhFHcMZBCPpdF9umYvBKTC4WWcwk9HAy9c1AP6RV
Qrn/HaR3Nx4fiXuDOicamq5NxjGT/DPzrQBE/ln+sVmV5waSQuz6xpOh181En4R7
htpLV3iKMUlTH1DOAG6ZBFAanj7gsuS5/RU3xE/ivvSOTLyORQNcf2dch8UK63Dl
jsAUAlzMwkGxXF7YLvwr+q4dSYNLKYbxAVW+NHjqvTlvwGcWuIQdQ1fztqctHTJ+
VpbNXfnP/R3rVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:46 2026 by rpki-client