Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: phoOJ5Wbiy6Fjq513r52wDBbzvb757Nf1eeBmnqZ47c=
Subject key identifier: AE:62:CE:53:BE:A6:C1:82:F4:02:78:EB:EB:F2:A9:D1:2B:BD:A6:01
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019D28BB6A54201E6AC49F0349717D61B5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 15CE
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: XpFIE4RAPh7p0YCAhtRybzUgqbRnfaPHq1POjRyWOq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6a:54:20:1e:6a:c4:9f:03:49:71:7d:61:b5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=ae62ce53bea6c182f40278ebebf2a9d12bbda601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:a1:05:4b:ad:b3:35:4d:04:33:3a:ad:c9:
8a:09:fa:c2:94:f5:82:d4:18:1d:fa:20:e2:90:2c:
cc:e0:f7:db:2f:31:ff:33:fc:28:22:9f:20:91:b7:
40:b3:30:e3:cb:9b:a2:bd:8d:f3:ca:6d:57:0e:ec:
8e:c3:33:e4:bf:a5:3f:c1:7e:63:b1:22:4b:44:0d:
4d:21:6a:3b:a4:53:ae:d1:67:5a:0e:1f:a5:dd:ae:
7f:ad:09:f1:16:48:de:11:44:be:ad:53:23:a5:aa:
c0:da:25:47:f1:ba:ed:67:b1:29:a2:ce:19:9e:1e:
44:ad:ff:ce:89:6e:10:1f:22:d7:b3:e5:61:da:5a:
34:b3:7f:0d:a8:38:9a:83:dd:0f:25:81:5e:d3:2c:
4d:31:e9:a0:da:95:7d:27:50:6f:41:87:25:32:a4:
9e:4c:00:f7:95:4d:6a:ff:84:75:26:81:63:48:fe:
7c:61:f9:bf:92:c8:36:a2:74:73:d9:a6:53:35:ca:
9f:49:a8:db:30:42:f1:07:f8:8b:3f:0d:a6:18:e8:
21:ef:78:b3:30:e9:3a:09:90:2a:47:44:f0:9b:91:
aa:2d:eb:18:24:f5:a4:e1:17:78:63:a6:60:54:88:
bf:8c:2c:ab:0a:0c:c0:d5:c6:7e:e1:ba:4a:72:bf:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:CE:53:BE:A6:C1:82:F4:02:78:EB:EB:F2:A9:D1:2B:BD:A6:01
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:13:0c:93:63:1c:18:46:a8:20:00:8b:92:09:17:48:60:
f7:b0:b1:28:72:e0:d8:47:c1:be:66:e4:43:5f:74:15:c7:c1:
58:38:29:c9:d2:00:b8:56:55:cb:c7:3c:6e:8f:ae:d6:d4:2c:
be:8f:80:e2:3b:60:29:7c:3a:d4:20:ae:3b:fd:a7:19:40:d9:
5c:6a:db:98:5e:cc:02:a3:06:e2:36:de:ae:da:85:0d:3e:e9:
31:7b:c2:2d:fd:e2:56:f9:d7:65:cf:cf:fc:8b:31:15:d3:07:
1a:20:cb:ab:a5:b6:2d:20:f5:ef:34:ea:92:15:c4:0c:89:3c:
6a:39:b3:36:a2:7f:14:8f:db:d4:c2:97:6c:9f:d2:ad:81:57:
3e:a3:86:bc:10:19:2f:b7:dd:a5:d7:d6:01:0f:0f:11:15:40:
fb:b7:d0:f2:ac:e7:bd:70:2d:f4:7c:44:d0:cc:73:20:bc:04:
e5:0a:c3:5d:43:4d:c9:f8:5e:f9:67:14:f1:c1:6f:5d:28:7e:
44:4c:ee:b8:ef:48:e2:72:ae:b5:c0:44:3a:d1:01:13:8e:55:
1a:d3:1b:b4:1b:01:e5:27:3a:47:61:aa:e1:77:f7:9b:2e:27:
2d:f8:24:2a:a9:ac:2f:0d:60:0b:f9:29:e2:7f:57:f4:20:ce:
b1:3b:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:21 2026 by rpki-client