Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json)
Hash identifier: qBprOO/d7r+ZdRbMQwMhvN+UdKItnMJL0Wm3/BpKyL4=
Subject key identifier: 70:C1:E8:F0:59:08:96:BE:AF:BA:9D:30:CD:5C:18:D2:7E:69:49:49
Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Certificate serial: 019D265FF1919E6D7E6AF3F592625F412880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
Manifest number: 0FBE
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: jqCSaExgFFEKDqa/Ht5WuWA6eJV9XOWX2mWxBN+9Jcc=)
2: GTw1p6dp2oTAJwFXKyAJ9e_9LzQ.roa (hash: FDQLcvT4V2CG+9wZjgpFjWusMGtaovIUYoYdZ/3vEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f1:91:9e:6d:7e:6a:f3:f5:92:62:5f:41:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=70c1e8f0590896beafba9d30cd5c18d27e694949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:30:a2:fe:83:62:7e:f2:17:0e:e0:78:e2:
4a:6b:8e:c7:b5:4b:76:9a:dd:20:8f:9e:7f:5e:f2:
39:79:d9:2b:40:4b:35:37:23:ca:ab:da:e4:a8:dd:
56:69:c9:fa:2b:02:4b:0d:24:5a:a0:d9:b2:3f:90:
db:34:40:0c:69:78:1c:52:93:51:1d:a4:00:62:cd:
42:b8:99:fc:aa:73:16:cd:68:23:f2:ce:67:e3:f4:
ba:95:75:7e:29:ac:31:62:b8:32:64:7e:55:9e:55:
74:2b:c2:5e:65:6c:aa:bf:b9:6a:cf:d7:da:77:21:
58:69:eb:d4:3d:91:d7:3d:b4:b5:9f:af:48:95:83:
fe:0c:94:b8:d8:78:aa:b9:82:27:73:ce:04:8f:ff:
66:d8:5b:fb:a7:94:09:d2:13:73:d2:63:78:2b:80:
2d:65:ab:33:83:4e:15:a5:8c:4a:a1:05:af:b1:4e:
03:a6:88:f9:03:b3:7e:69:33:82:aa:07:9a:ce:45:
97:e7:a1:e0:56:67:dd:b7:df:f5:c5:fc:14:73:b9:
9c:9e:51:0a:77:2d:66:a9:89:b9:4a:78:c2:12:56:
38:40:03:15:1e:d9:6d:05:b8:4e:7b:6e:20:a1:14:
cf:14:99:ae:94:0f:c8:e6:29:a7:d1:f4:13:6e:8f:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C1:E8:F0:59:08:96:BE:AF:BA:9D:30:CD:5C:18:D2:7E:69:49:49
X509v3 Authority Key Identifier:
keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:4a:1c:ee:09:1b:36:d1:44:ea:c5:fe:bf:eb:9c:ed:64:
94:38:06:65:33:57:fc:c5:15:ce:27:e1:fe:82:5c:43:36:33:
1e:54:f2:b5:e3:90:42:07:b6:c5:0d:ff:76:ac:f2:78:56:39:
99:8f:3d:2b:ae:0d:ea:9c:ff:18:47:51:61:91:ce:52:22:b2:
9c:b8:e0:d2:67:37:b0:29:a7:26:a3:2e:37:5e:81:19:85:c1:
95:7d:d7:28:a3:ca:a6:df:df:20:e4:4b:ca:bc:6c:05:03:0d:
ba:b2:b9:dd:bb:68:81:4c:e2:1b:f9:a5:2b:6e:9b:a5:cf:91:
33:a8:a8:d3:33:33:27:97:c2:de:09:76:ba:39:50:5d:2c:70:
7b:7a:5a:36:08:05:cf:d5:cc:0f:17:98:b1:9e:f2:82:0f:da:
03:4f:eb:0f:b7:89:35:78:c4:61:bc:b2:f9:2d:b7:55:c1:a0:
4f:10:f2:c8:66:e3:41:46:7e:97:e9:06:8f:1e:6a:e2:f5:e1:
99:cd:19:54:fb:b3:8f:09:98:38:57:1d:42:5a:b8:c7:6c:3f:
a4:25:a1:02:21:9a:31:3e:75:4f:1c:4a:e1:f3:d1:81:a4:b4:
51:ef:68:6c:df:22:7c:d5:2f:8d:27:2b:cd:4b:41:57:5a:c6:
f3:01:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:21 2026 by rpki-client