Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
File: vdAX3W18v-gmYVTBrkNMTPi2ilc.mft (raw, json)
Hash identifier: mZWDM10qXheGsWzJg1aONhP/LxPBJkrO+xXv/IbG37g=
Subject key identifier: 74:C3:67:CB:2E:E5:21:40:77:85:4F:09:5A:46:1D:47:11:56:AF:DC
Authority key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
Certificate issuer: /CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Certificate serial: 019D27DF51588B514C80E7D0F1EFEE6C1B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
Manifest number: 016E
Signing time: Thu 26 Mar 2026 02:00:39 +0000
Manifest this update: Thu 26 Mar 2026 02:00:39 +0000
Manifest next update: Fri 27 Mar 2026 02:00:39 +0000
Files and hashes: 1: rAid6SWBifBeRfH_M1UAs5DcdRw.roa (hash: FzoFH/XQPycD4zEWka8Y3TTeasXdHpRVco1PTcTkVs4=)
2: vdAX3W18v-gmYVTBrkNMTPi2ilc.crl (hash: IAmJNAxd66A1cbEE9WEbBuRDi2Yi5G3PWvXEFos4qXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:51:58:8b:51:4c:80:e7:d0:f1:ef:ee:6c:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Validity
Not Before: Mar 26 02:00:39 2026 GMT
Not After : Mar 27 02:00:39 2026 GMT
Subject: CN=74c367cb2ee5214077854f095a461d471156afdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:70:be:e9:3d:6e:27:74:bb:ab:3b:2a:8d:7c:
3e:82:33:72:18:20:9c:a8:c3:b6:06:c2:29:72:47:
5b:d7:57:a2:5c:a7:19:c1:b1:77:49:e6:78:15:03:
32:f3:fe:44:cc:2a:50:c4:6f:ec:61:d5:50:52:bf:
36:03:7f:07:64:d7:8e:ed:3f:de:08:1f:7c:1f:b1:
5c:44:7e:0d:b0:49:44:dc:bd:75:d6:90:f7:16:12:
54:51:84:9d:c2:ac:83:9d:9d:26:3c:8b:00:e4:2b:
5d:11:66:a7:5f:b0:73:17:7a:8a:b8:a3:28:f3:05:
42:01:e6:b3:b7:4b:1e:50:6d:c3:30:f3:14:37:7b:
66:49:50:d4:e3:77:94:39:31:7b:10:b6:2f:c7:9a:
27:a6:00:64:86:b7:ef:67:8d:09:e8:9e:30:22:ab:
17:d1:e3:9c:41:b4:94:9c:4b:04:12:61:56:82:65:
0f:af:27:f4:c2:45:06:99:fc:f0:12:92:13:b2:6b:
a0:6c:50:e5:b4:4d:74:5d:f6:81:86:37:23:e7:af:
12:60:0c:1a:81:66:96:a9:d4:c4:56:d9:76:31:2b:
b7:a5:3f:50:94:f6:43:01:27:99:fb:55:24:b0:0d:
59:05:58:36:48:a5:19:fc:72:38:2d:7a:e0:4c:db:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C3:67:CB:2E:E5:21:40:77:85:4F:09:5A:46:1D:47:11:56:AF:DC
X509v3 Authority Key Identifier:
keyid:BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:5a:22:9d:05:97:49:00:ca:1e:51:e5:89:71:d6:9e:58:
87:62:c0:79:02:a7:67:68:c2:66:53:db:4f:09:ff:52:f8:8d:
78:a9:c4:f9:ec:d0:9e:39:99:96:c1:bc:8c:7b:0a:90:18:84:
c0:f5:c6:7b:e6:fb:65:41:9c:0b:70:18:f4:bd:98:33:92:ec:
bc:0b:c2:73:90:f8:6a:ae:22:0c:ac:31:93:dd:dd:67:e6:6b:
7a:d3:7e:99:d0:8e:fd:1f:0d:18:db:cd:fd:2b:98:42:a8:53:
da:9b:45:6b:1f:9e:e5:d6:26:fc:14:cb:d3:9a:84:68:7c:cc:
1b:5c:3c:63:6a:0d:e4:51:e7:85:f6:9e:84:e4:f4:0a:93:65:
f7:da:0c:0e:35:fa:b6:16:cd:1e:d0:fc:e5:c0:2a:53:e2:8c:
f8:52:45:53:09:dd:dc:67:61:dc:cf:34:19:1e:04:18:e9:0d:
4b:f7:21:77:7f:b8:75:91:3f:87:77:69:87:1f:db:c4:29:a5:
af:fc:cf:8d:3f:0e:05:51:29:9e:ec:d5:c0:f4:72:55:1b:06:
36:b4:94:67:bb:d6:bf:2c:1d:9f:35:5e:83:ed:b2:79:4e:98:
6d:93:1b:24:70:a8:4c:e4:65:ca:17:ce:5a:76:69:cf:21:0c:
46:50:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:11 2026 by rpki-client