Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: gMaKJvfGTxBTgWdfLnNBXGII+gkEN98ZO8V6krBrxdc=
Subject key identifier: E8:24:F2:BB:BF:D8:A7:42:88:E0:9B:CD:99:EF:63:04:3E:14:59:B2
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 019D2A3B92EC68EDA828E672062D678494A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 13BA
Signing time: Thu 26 Mar 2026 13:00:40 +0000
Manifest this update: Thu 26 Mar 2026 13:00:40 +0000
Manifest next update: Fri 27 Mar 2026 13:00:40 +0000
Files and hashes: 1: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: zZkKvduNzDCmV5nP/t38MX7uM1baPLJzRvDhojdwMRY=)
2: wtAobWAtIsJ9eoMextQEU1zoyGo.roa (hash: QGRc3yCeMrwfNC3vCqeJOv3KoeMn2Gn4BzCoJrTisLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:92:ec:68:ed:a8:28:e6:72:06:2d:67:84:94:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Mar 26 13:00:40 2026 GMT
Not After : Mar 27 13:00:40 2026 GMT
Subject: CN=e824f2bbbfd8a74288e09bcd99ef63043e1459b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:33:5e:f9:f9:11:ed:c6:da:09:dd:03:94:
74:87:d0:c7:12:60:66:71:dc:11:6e:26:71:5f:1d:
06:cb:26:d9:3d:b6:7d:71:75:94:80:93:a4:89:57:
1f:3b:ff:50:3d:e3:cf:3f:87:2b:07:91:7c:90:27:
5b:3f:b0:14:46:93:e4:63:7d:eb:32:5e:e1:fa:3c:
f8:6b:b3:8d:1b:e6:61:80:5a:c5:13:ad:01:86:45:
1a:3e:67:71:f0:2b:95:a8:dd:d7:45:d3:34:72:2c:
cf:d1:35:69:1b:09:77:e2:b8:60:e0:15:6c:9d:04:
be:c7:78:4a:50:31:e5:16:38:96:1a:d0:b5:18:0f:
56:a1:4b:28:dc:82:e8:a0:93:49:ed:03:53:99:09:
05:77:68:a9:13:69:f5:58:92:31:63:3d:bc:0a:6b:
cb:26:54:ee:ee:97:ab:03:e7:0a:fe:c0:37:0e:0a:
c4:ff:f6:63:66:2b:3f:25:5a:cd:b6:e8:b8:f1:7e:
23:7b:ee:dc:3f:0b:84:98:96:d0:4c:20:86:0c:22:
ae:6b:f6:fa:8b:ce:90:79:40:a9:5e:e0:c8:1f:01:
d7:05:d3:79:da:1b:80:b6:20:11:02:32:ac:6e:73:
f1:0a:de:3a:be:f0:19:3e:fc:d9:45:d4:3b:61:d8:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:F2:BB:BF:D8:A7:42:88:E0:9B:CD:99:EF:63:04:3E:14:59:B2
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:77:d2:5a:3b:c7:83:05:e3:f5:8b:19:89:e8:ba:5c:0e:0c:
3f:10:3f:0b:3b:98:a4:0e:48:12:3c:03:ca:f4:d3:df:38:5f:
e4:93:16:58:e7:48:a1:08:79:30:44:8a:14:31:8a:aa:eb:d8:
f8:7a:6d:e6:04:18:cd:d9:e7:ea:52:28:99:d2:6c:48:0b:57:
f1:30:d1:d5:89:a1:07:1c:80:ba:64:ae:13:8f:ae:67:ac:df:
23:40:bc:47:e2:92:85:85:17:c6:9c:2c:e9:59:8b:ad:e6:25:
43:38:9e:1e:29:c5:f1:7b:c2:8b:63:69:3b:74:d5:bb:fb:e2:
d5:63:56:66:51:20:d3:a7:5f:8f:e0:f8:c9:2d:e9:5b:f4:cf:
b4:ff:67:26:c9:7b:34:0c:57:a4:b4:bc:eb:bd:8c:29:43:b3:
f5:31:9d:4e:1e:71:72:11:5d:83:c7:3a:11:c8:bd:1d:c6:30:
53:1c:a8:3e:92:75:81:2a:e9:1f:0b:4a:53:c4:7c:22:65:63:
11:47:92:f5:f7:96:68:84:bf:24:1e:8b:b7:32:05:75:a5:48:
8a:10:fd:d5:d3:2e:94:75:3c:2f:34:0a:17:dd:e2:ac:89:b3:
b3:f7:57:81:f8:74:17:35:15:47:82:2b:82:e4:d7:41:a2:3b:
3e:8b:58:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO5LsaO2oKOZyBi1nhJSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NzdiNGI4N2FiODZhY2E1NzdlNTZlMzhkNWI4YTU4MTNj
Y2NjM2QwHhcNMjYwMzI2MTMwMDQwWhcNMjYwMzI3MTMwMDQwWjAzMTEwLwYDVQQD
EyhlODI0ZjJiYmJmZDhhNzQyODhlMDliY2Q5OWVmNjMwNDNlMTQ1OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbIzXvn5Ee3G2gndA5R0h9DHEmBm
cdwRbiZxXx0GyybZPbZ9cXWUgJOkiVcfO/9QPePPP4crB5F8kCdbP7AURpPkY33r
Ml7h+jz4a7ONG+ZhgFrFE60BhkUaPmdx8CuVqN3XRdM0cizP0TVpGwl34rhg4BVs
nQS+x3hKUDHlFjiWGtC1GA9WoUso3ILooJNJ7QNTmQkFd2ipE2n1WJIxYz28CmvL
JlTu7perA+cK/sA3DgrE//ZjZis/JVrNtui48X4je+7cPwuEmJbQTCCGDCKua/b6
i86QeUCpXuDIHwHXBdN52huAtiARAjKsbnPxCt46vvAZPvzZRdQ7YdjP0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgk8ru/2KdCiOCbzZnvYwQ+FFmyMB8GA1UdIwQY
MBaAFFV3tLh6uGrKV35W441bilgTzMw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhlMHVIcTRhc3BYZmxiampWdUtXQlBNekQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kMTU4ZTEtNTEyYi00NDg2LWFmODct
YjQ5MGE2ZDZiZTI1LzEvVlhlMHVIcTRhc3BYZmxiampWdUtXQlBNekQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kMTU4ZTEtNTEyYi00NDg2LWFmODctYjQ5MGE2ZDZiZTI1
LzEvVlhlMHVIcTRhc3BYZmxiampWdUtXQlBNekQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnfSWjvH
gwXj9YsZiei6XA4MPxA/CzuYpA5IEjwDyvTT3zhf5JMWWOdIoQh5MESKFDGKquvY
+Hpt5gQYzdnn6lIomdJsSAtX8TDR1YmhBxyAumSuE4+uZ6zfI0C8R+KShYUXxpws
6VmLreYlQzieHinF8XvCi2NpO3TVu/vi1WNWZlEg06dfj+D4yS3pW/TPtP9nJsl7
NAxXpLS8672MKUOz9TGdTh5xchFdg8c6Eci9HcYwUxyoPpJ1gSrpHwtKU8R8ImVj
EUeS9feWaIS/JB6LtzIFdaVIihD91dMulHU8LzQKF93irImzs/dXgfh0FzUVR4Ir
guTXQaI7PotYgg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:35 2026 by rpki-client