Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File: vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier: pyuX2Sgo+bXXvXoRvsjkgdZ4DWlMIfJjdJV/70nbZIM=
Subject key identifier: F4:A2:20:61:71:19:D9:6B:22:6D:1F:1E:C5:AD:B2:5A:D5:53:6D:76
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 019D29CE50D370EB5203FB1FF0636F2E5448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number: 0E97
Signing time: Thu 26 Mar 2026 11:01:19 +0000
Manifest this update: Thu 26 Mar 2026 11:01:19 +0000
Manifest next update: Fri 27 Mar 2026 11:01:19 +0000
Files and hashes: 1: 0QR437_yNuwd46JSd_IiWmhwYow.roa (hash: 6GDXre6adrsJyqw14UC9mtlOqvJoPEYUbHv7Lqn+43k=)
2: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (hash: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk=)
3: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: qhOCUdxC27W6GIfCs1P8Pm+uMlxO34DkAzloZfkIgHY=)
4: wwh70_fWojYStsjUuAC2NCdOguo.roa (hash: FHvLtN1EizK8sBcMqm1u4JO0yb8K5X+r6eZldZxIZo8=)
5: ydQtvb3bvjFb-2ukCgShBr4iJ7o.roa (hash: D1atPq/SoJlgXADbklDBQIhta1tm984jYa7MmKBjm1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:50:d3:70:eb:52:03:fb:1f:f0:63:6f:2e:54:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Mar 26 11:01:19 2026 GMT
Not After : Mar 27 11:01:19 2026 GMT
Subject: CN=f4a220617119d96b226d1f1ec5adb25ad5536d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:24:5c:89:5a:80:b5:68:9b:07:b8:8f:f4:
88:e9:36:df:86:77:5d:63:c2:1b:26:6d:d7:09:fd:
37:a8:d7:cd:b2:2e:fa:6a:43:99:7d:f2:f9:08:e9:
dc:d8:a7:44:2b:51:69:8d:de:e4:20:cc:c0:53:08:
31:46:b2:8f:56:92:0b:48:60:1a:7a:44:41:64:a7:
0e:8f:a6:e1:e7:19:17:1e:cf:05:58:be:3b:f1:7a:
8e:59:ae:cb:97:fa:46:76:99:63:e3:ec:3b:bb:de:
ff:e4:99:73:b2:9b:41:4b:be:bd:f8:b5:3f:20:ab:
3e:a1:d3:e6:e6:02:07:29:20:0c:21:74:6b:1b:b6:
09:3e:93:9c:32:47:c3:31:d9:72:aa:e7:d6:c6:63:
51:8d:59:91:17:d5:b7:ed:84:37:ee:b5:d1:a4:69:
5e:4e:51:78:06:63:bb:79:59:e1:b4:56:10:3f:ae:
6a:83:88:7c:a3:09:e2:f7:47:dd:17:a5:6a:a9:5d:
c7:44:89:ba:57:fb:92:de:27:f9:53:d0:1a:b0:b9:
16:9a:c3:66:2c:07:82:cb:33:c9:c3:3b:17:4a:59:
30:c6:f9:63:28:c4:ab:34:81:57:77:55:1d:64:aa:
3a:04:f0:8e:4b:ce:92:5f:9c:b0:00:65:0b:5e:6d:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:20:61:71:19:D9:6B:22:6D:1F:1E:C5:AD:B2:5A:D5:53:6D:76
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ba:f1:6e:dd:25:d6:d3:fe:7c:e2:91:52:2a:a2:3b:d9:99:
82:e9:31:b5:e6:63:20:60:d1:12:ba:e3:e9:78:8e:7f:a7:0a:
1b:10:e3:aa:22:b4:a6:3e:af:4c:ed:49:6d:04:57:aa:61:df:
1b:f3:51:47:6a:5e:3a:92:cb:39:5f:3a:9d:78:ed:36:93:71:
a7:f8:6e:5c:f8:aa:e0:a8:0c:0f:cf:39:22:73:85:b6:1e:cb:
a1:c7:3b:5b:2c:ab:77:32:e4:6a:b1:6a:9b:f4:7f:0b:83:c6:
3b:21:b6:46:9d:2e:c4:90:a7:51:c3:98:32:ab:d0:b1:02:e8:
16:0d:fb:2f:c9:f1:9c:0c:18:32:63:06:ea:13:23:45:d7:a1:
c7:4e:ad:f8:43:52:0c:da:df:97:b1:fc:a8:68:34:a5:2a:11:
09:d8:a1:52:ca:c3:9f:47:a6:c4:21:be:b7:83:16:5f:04:95:
f9:0a:a1:c5:95:24:01:ec:11:c4:ae:ab:2e:a7:8e:6a:1d:f2:
05:c7:52:08:f0:07:cf:49:5b:21:32:57:02:18:0d:87:bc:ff:
2a:c8:05:9c:71:f8:b2:5f:e2:b9:80:f4:d0:46:5d:e5:fb:bf:
8b:4e:4e:44:d1:2e:e6:b1:0b:9e:4b:ac:91:62:93:b8:64:27:
a2:5a:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:49:23 2026 by rpki-client