Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier: KrTnEx4ZL48ldMyjzz3t4Rtrit1KGfZCYjKRf5mLSDk=
Subject key identifier: 8D:A6:44:89:BC:38:23:C1:DB:50:73:1C:4D:7D:F1:9C:8A:FF:74:60
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 019D265FCEFB92EDE9596676F8B8B4917437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number: 0B8A
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: 31fOLSXQX5ej+gm8pU256k0W10nbCLYmy/wANo46JoU=)
2: i6ZPGK_7Bigyr85KXz1VVHT10Q0.roa (hash: joh45/eIjcr7bpYGjukpldugHoxa03PMZKsduB6yEWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ce:fb:92:ed:e9:59:66:76:f8:b8:b4:91:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=8da64489bc3823c1db50731c4d7df19c8aff7460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:32:f1:07:b2:9a:74:b1:68:49:85:d8:66:
fc:77:22:b6:29:bb:83:17:84:18:82:7f:90:5e:d9:
39:ff:00:33:0d:1a:9a:d9:d4:45:d9:b5:6a:05:4a:
df:ca:c9:09:7d:d7:bb:e3:fd:a7:29:d3:4a:a7:69:
66:4a:f5:95:f8:72:08:e4:97:4f:51:6b:a4:fd:74:
49:b5:2b:64:5f:ea:70:1b:53:77:92:2b:ba:4f:ed:
bf:79:76:2d:50:e4:30:a1:32:a4:1e:05:cd:f3:cc:
78:7f:0c:4a:09:e6:6f:6c:db:fc:d1:67:33:f3:3a:
03:3e:23:89:ba:dd:30:0e:99:8c:76:f5:d4:23:cc:
ed:80:a9:9f:f3:44:1d:f4:d2:4d:b7:72:a3:50:46:
f9:8c:3c:26:ba:a6:3a:68:e4:5c:43:00:81:af:96:
d2:fd:3f:94:df:0d:6c:21:b2:36:1c:b6:88:ed:59:
65:9c:21:b8:12:6f:87:a4:5a:63:5c:4c:7f:3e:6e:
3c:52:63:20:05:03:1d:45:58:21:ea:ff:26:14:ee:
c3:b3:33:96:9a:a4:c0:06:9f:cc:14:f2:4b:fd:56:
95:8c:64:76:3c:61:7a:14:ec:f4:df:06:26:f8:0a:
6b:07:df:f0:5d:20:57:6b:d8:e3:e0:18:1b:75:96:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:44:89:BC:38:23:C1:DB:50:73:1C:4D:7D:F1:9C:8A:FF:74:60
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bb:3a:b5:6b:5b:9c:82:74:46:b0:11:20:b1:14:d9:ef:d7:
a8:e2:51:fb:59:68:c6:aa:89:53:6f:05:52:1b:90:99:23:88:
2c:77:b2:2b:88:a7:e8:a3:9d:a5:15:4a:14:12:c2:e3:50:79:
83:0b:a5:57:59:a5:30:78:1c:7c:1c:8e:cc:dd:3e:bd:de:4b:
2b:8c:78:cb:0c:2a:d6:c4:35:d6:eb:2d:c6:08:d6:f3:cc:d7:
9d:68:94:00:9d:ab:99:60:32:2e:86:31:28:64:31:dd:4a:d7:
38:c2:c0:de:50:d6:25:3b:2c:3a:4f:d3:1c:a6:db:d5:7f:83:
6b:b6:24:18:55:6e:06:96:c6:d9:c9:fa:53:a5:20:be:86:99:
b7:81:b6:e7:81:0c:2c:d9:e2:b8:98:5f:e2:ba:69:a7:cb:dc:
06:e7:a8:63:65:ed:68:62:09:87:d7:2a:69:46:73:4b:dc:95:
92:19:a8:5c:39:4c:50:e0:54:d1:d5:0c:b4:d4:ba:fe:1b:f0:
74:12:77:58:c9:98:c3:46:d8:90:7c:c6:cd:b4:e7:59:df:04:
27:7b:af:31:0b:82:0f:32:c1:9e:71:cc:16:03:e6:f1:97:78:
15:79:ee:c9:a2:c8:07:0c:41:d3:3f:3d:3b:bd:d3:31:dc:5d:
78:6c:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:36 2026 by rpki-client