Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: Hpfm3xvPrLoi3L4g+ZbeKK/LCowl5HzxGULztE9sni4=
Subject key identifier: 6F:A9:1C:0E:A7:39:03:42:26:8B:11:2D:D4:DE:0B:18:63:27:89:D0
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 019D27E040DE0CA4D1B8390F2D69D64262D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0DDF
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: t1JXKPULVgSgvQ0I80otAQ7Epzg.roa (hash: sx0p3fASYGJ0JSBWFt0pc+jsNHZgbTF+OTJo6DFYN9A=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: JbKIHJQc19f7p/wMoNRP3fE+yZF9cwezrzCM5QqayPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:40:de:0c:a4:d1:b8:39:0f:2d:69:d6:42:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=6fa91c0ea7390342268b112dd4de0b18632789d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:a6:86:37:f9:f5:40:98:6f:5d:b0:e8:c1:
73:04:ef:4a:dd:94:98:e4:8d:41:3d:98:6a:a0:9c:
c8:fb:f4:e8:1d:a1:a1:44:b4:f9:cc:7c:48:07:3b:
c6:f2:25:12:5f:5c:46:c0:eb:3c:db:bb:1b:6a:fa:
ce:64:60:25:9a:12:db:5e:50:8a:2e:03:12:2d:7f:
03:b0:a2:5f:ee:f5:bf:a6:2c:20:c8:11:9b:ec:f1:
ca:12:d7:8d:27:dc:c5:ff:e3:31:ec:75:92:9d:72:
eb:20:8e:8c:6c:e7:e6:f6:00:98:cb:db:71:6e:b7:
c2:5b:5c:5d:c9:28:19:e7:08:ad:b7:c8:ba:55:48:
51:d8:03:22:7a:63:b0:94:fd:5f:87:07:12:5d:7c:
e4:e9:4d:ba:6e:5f:5a:f6:0e:a6:16:7b:71:80:d7:
5a:89:a2:2c:78:ae:b5:f2:1f:00:a7:48:28:41:e8:
0c:f6:2b:33:79:27:37:02:32:61:75:61:27:69:a5:
2f:5b:c1:b4:d5:9f:85:a1:bd:f3:62:c2:da:06:ce:
b4:cd:b6:6a:0f:97:58:28:95:48:e0:57:9b:54:f5:
09:05:29:eb:c0:7a:01:b5:5e:d4:88:3d:0a:4b:63:
3a:1c:56:30:27:67:0e:d0:c0:40:6b:27:e6:bd:97:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A9:1C:0E:A7:39:03:42:26:8B:11:2D:D4:DE:0B:18:63:27:89:D0
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c9:9d:67:1d:88:fa:61:5b:e7:cf:e6:cd:59:ef:6f:6c:19:
2a:dd:3b:c0:61:d1:95:9a:79:41:ca:13:03:a2:66:34:ea:8b:
81:cd:35:d7:1b:bc:48:8d:72:85:2c:62:69:d5:ee:49:a6:36:
4b:c8:be:2c:c7:35:08:fb:9e:e1:cd:a7:38:0a:e6:26:dc:e9:
82:cc:f8:16:fd:bb:45:2d:05:56:1a:ee:2c:d7:fb:0b:62:a1:
bd:3b:68:00:bc:59:3c:27:6f:f0:67:33:c3:fa:3f:03:c4:8a:
e2:64:2c:9d:84:05:e0:56:10:1b:2a:1f:f9:6b:53:ff:8c:15:
1f:50:64:0f:b6:48:d0:fd:b1:c2:52:1c:8a:66:bb:97:22:e0:
62:5c:da:bc:25:a5:da:1c:5d:ff:f6:75:2e:db:41:76:da:68:
19:29:cf:a4:2b:1d:96:1e:94:c6:69:ea:b1:55:a4:d2:db:9a:
23:a6:2a:3a:ac:a1:a6:86:4b:4e:c0:30:ab:ce:86:21:1c:df:
70:3e:f6:62:43:f2:d3:2b:78:93:8c:6c:a4:d8:9b:ac:6d:f0:
aa:b0:ab:7e:e6:a9:e5:2f:c9:e4:c0:b2:0b:d3:6f:8b:59:b9:
bd:c3:ee:f2:1f:53:07:e1:bd:08:39:55:d6:52:bc:2c:bd:58:
ce:f3:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:24 2026 by rpki-client