Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: 67IQ3cVAGza+yyXp4DC57jNq9GM1AFeA3hJe1Vssyms=
Subject key identifier: 5C:9A:F2:62:77:BB:81:23:31:E7:2D:20:C2:36:8B:61:36:94:61:48
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019D254C56196F4EEB0E8D37E3B54459B770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0541
Signing time: Wed 25 Mar 2026 14:00:52 +0000
Manifest this update: Wed 25 Mar 2026 14:00:52 +0000
Manifest next update: Thu 26 Mar 2026 14:00:52 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: G/BVR4Uv6HGgkLDiKhXX+sslSEz38DPpfK7vdV52rNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:56:19:6f:4e:eb:0e:8d:37:e3:b5:44:59:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Mar 25 14:00:52 2026 GMT
Not After : Mar 26 14:00:52 2026 GMT
Subject: CN=5c9af26277bb812331e72d20c2368b6136946148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:99:b5:45:f6:bd:7f:81:68:6a:f3:b0:51:
3f:74:aa:f7:4b:8b:1d:7d:0c:b2:1d:2e:d3:ec:c4:
0f:56:a7:f3:2a:82:cb:3a:9b:02:bc:22:50:22:c6:
77:75:22:ad:1f:54:b3:d0:ae:87:19:0d:85:73:8a:
51:e3:72:48:96:e7:3b:f6:da:62:b6:17:22:a6:4d:
f2:41:b3:b2:7d:44:f2:ac:0f:d1:7a:4c:82:5e:21:
be:99:91:34:eb:d4:70:e4:e6:27:ff:d9:6b:51:4e:
88:0e:80:1f:bc:d4:f0:90:80:fb:86:8f:1c:36:3d:
0f:c3:a3:d0:62:c9:9e:14:07:74:ca:85:7f:c2:dc:
87:81:dd:9f:71:a5:51:8f:db:e9:d9:81:47:2e:a2:
68:eb:50:a6:c5:f1:fb:64:af:0b:3f:72:e6:af:ff:
c9:0a:cb:0e:f7:06:f9:8c:5b:3c:c2:ad:0d:b0:fd:
4e:c1:6e:c8:83:61:99:bc:35:86:8b:5f:f2:9d:45:
99:c0:77:2c:93:09:79:0d:55:2d:47:14:82:bd:ea:
1d:b4:65:8f:96:75:e5:89:6a:fd:3d:17:bc:ae:a8:
6a:36:9c:e7:f6:3f:21:4f:da:9a:82:4d:32:5c:ef:
21:11:9b:b9:01:89:84:33:aa:bd:fb:1d:8c:90:69:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9A:F2:62:77:BB:81:23:31:E7:2D:20:C2:36:8B:61:36:94:61:48
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:16:9d:30:ae:ba:c1:3e:c1:82:e9:2c:59:25:45:b1:3a:49:
0c:b3:d1:3d:cb:1b:25:60:41:68:41:cc:11:99:01:85:e0:b8:
de:87:41:3b:78:62:6b:1a:7a:52:fb:d6:32:53:8f:6e:b1:31:
3e:4f:05:b4:0a:a8:57:b1:45:d9:0a:9a:83:43:61:00:11:af:
51:30:6e:d2:ee:ec:32:91:ef:4b:c1:e9:7c:55:72:2c:cd:61:
c8:28:05:46:c1:3e:e1:3b:0d:69:71:4a:66:36:2f:9e:dd:a3:
d6:77:df:83:c6:3b:a8:f8:b2:e1:fa:6b:97:e5:2e:9a:f3:32:
cb:80:c7:94:8c:84:0c:c8:9a:e3:92:2b:7b:df:89:2b:ea:62:
64:6e:e0:1d:ba:2f:ea:ed:96:f8:6b:6e:3f:71:d8:3c:a6:03:
c0:cb:77:32:8f:eb:f9:b6:e4:62:dd:bd:bb:4b:78:ca:59:f3:
e6:ed:0c:f1:1c:69:b4:12:98:ee:25:1d:31:23:6b:e4:8c:8b:
ac:b2:44:2d:a8:50:18:c5:73:22:73:7d:20:0b:bd:b5:e1:69:
19:8a:2e:08:a2:51:94:73:23:b5:a5:3c:b3:45:39:a2:66:f7:
0a:30:77:2b:c4:04:4b:48:f9:2a:0a:0c:c1:86:5b:33:c6:ef:
a2:6b:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:08 2026 by rpki-client