Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: 0t6zCGw5bOkj/DG/bw8U0oePmkH2EUjtauyF+RZSBCI=
Subject key identifier: 1E:42:0E:14:01:96:4E:C4:F5:F2:40:C2:94:5E:D9:AC:3D:F8:82:51
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 019D2929A883CBFFE76B9354BEFDD6E5E4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0E79
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: hGGn56Yo_VSmgrsGFDnJfZjli00.roa (hash: IdVlpuGxDlB7X5s4S8Mv8+g/EUJ+VGMrKs3BCA2moLY=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: wOI4KsZofFpnfnmJWleI7C+EqCx8ImMe6ylFJYUCabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a8:83:cb:ff:e7:6b:93:54:be:fd:d6:e5:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=1e420e1401964ec4f5f240c2945ed9ac3df88251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:88:57:ce:99:4d:5a:f2:98:c9:67:af:9c:
f1:a8:31:ca:53:54:95:bb:39:6c:ae:e8:32:b2:69:
81:29:8b:64:7e:cd:7b:36:ff:2d:35:e5:b3:f6:51:
e2:23:82:bc:d5:cf:23:ce:c4:ad:90:bd:57:33:f9:
77:5a:65:32:03:6a:54:bc:47:04:23:7f:aa:c2:b8:
1b:2d:8b:a7:92:1c:4e:08:f4:b1:a5:a5:a6:ef:2b:
bd:28:88:da:92:e2:86:08:f9:05:cd:8c:b6:cc:a8:
2a:df:9b:9a:80:25:a5:fa:20:d4:12:2f:18:78:9a:
5a:02:07:8b:cf:8f:b5:93:b1:1c:4e:18:d2:bd:0d:
2e:9d:c9:93:38:3f:ac:3f:da:67:d5:48:9c:da:32:
d4:db:e1:12:fa:ed:f6:82:f4:8a:be:ea:82:8b:9f:
c2:13:95:ea:9d:66:18:39:a3:fb:39:09:2b:3a:b8:
81:d1:63:e1:ef:a5:b3:eb:c9:e4:ed:10:55:f0:d6:
36:89:26:9a:82:9f:bb:81:9b:50:c2:2f:8a:46:96:
8b:e5:fd:1b:bc:41:19:bd:56:f9:72:64:2d:9e:ea:
04:f4:92:c8:a6:ee:d7:72:d6:2d:53:3d:2a:a5:2e:
2b:cd:44:eb:68:c7:42:82:93:e8:1a:54:d6:4e:04:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:0E:14:01:96:4E:C4:F5:F2:40:C2:94:5E:D9:AC:3D:F8:82:51
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:19:e4:0a:3f:62:51:fd:69:e8:6c:91:68:f3:7e:fa:db:5a:
05:2c:d3:f3:b7:ce:18:36:2d:bb:c5:51:b6:67:be:25:54:df:
60:e8:6d:86:ff:86:88:c2:08:28:a9:fa:72:77:fb:2c:4b:0b:
bd:84:0f:45:d8:a7:39:5f:50:3a:0a:cf:fe:28:a0:65:ae:cc:
12:97:45:2a:69:16:65:a2:be:e9:08:d7:cd:ae:0c:94:01:26:
d9:de:b2:55:30:f0:7d:80:e9:8a:73:7f:f1:6f:56:9d:79:a3:
84:46:7c:4f:b9:4d:3e:ee:2d:41:6b:87:1d:ed:4f:57:26:dc:
28:31:3f:bc:f4:93:c7:a3:49:45:e5:a0:70:52:6c:ad:69:22:
95:55:8c:da:dd:91:e3:99:33:05:a9:af:30:78:14:3f:3d:29:
91:01:d0:fe:49:e0:dc:83:a4:00:06:6a:9b:b6:0e:2b:e6:97:
3d:78:1a:80:65:2b:ff:4e:da:f3:60:63:45:42:1a:a6:aa:c1:
b2:98:18:88:73:47:90:a0:5e:0c:d0:7e:cb:1e:57:c1:c2:03:
51:00:9d:3f:9a:05:49:bd:29:39:ec:92:49:00:26:ca:b2:5c:
8a:9b:ed:d1:65:69:3b:d7:a3:30:83:f5:54:7e:c6:37:d2:fb:
a8:4c:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:08 2026 by rpki-client