Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: 4mHmIt+AdAirXw4pOTu9CXbUaKe1i6s1gehdi1VC3lE=
Subject key identifier: F7:A4:95:CE:83:E8:62:B7:C7:14:69:97:3F:A8:B2:6E:F9:3C:4B:4B
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 019D2A725C54B099D3A33CCE04711CC3E746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 09A3
Signing time: Thu 26 Mar 2026 14:00:30 +0000
Manifest this update: Thu 26 Mar 2026 14:00:30 +0000
Manifest next update: Fri 27 Mar 2026 14:00:30 +0000
Files and hashes: 1: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: onU1ZPrykU8xf3WFIWt1UHftfhb1KE5wkCtPHgin5T8=)
2: xdDHjpMxa5Db0sg2IbYCFBzBU4g.roa (hash: i6O8Zdm48WH9FHIuopoB/Fvv/PqB8Y1fepb+H0IN4zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5c:54:b0:99:d3:a3:3c:ce:04:71:1c:c3:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Mar 26 14:00:30 2026 GMT
Not After : Mar 27 14:00:30 2026 GMT
Subject: CN=f7a495ce83e862b7c71469973fa8b26ef93c4b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:25:30:3b:b5:3c:29:d7:61:d4:a3:0c:c8:
20:d5:37:69:5e:c3:23:39:54:b5:46:85:ac:63:b6:
13:54:a2:ed:db:7b:ff:f5:4c:13:c5:7a:79:2a:20:
60:05:1a:38:61:12:17:56:21:e5:f9:12:11:b3:f0:
24:ad:73:38:ce:19:74:4b:16:ab:06:08:55:f9:41:
47:46:2b:ce:22:97:6c:56:58:05:d2:e4:15:99:02:
83:27:cc:51:fb:ca:0d:85:d1:ec:52:0f:0c:d9:c5:
6b:02:5a:24:ce:81:d8:33:52:ac:2d:78:f0:55:a0:
1b:8c:d6:92:4e:6a:c0:98:fc:af:a8:4f:77:9c:48:
2b:1a:9a:13:3c:1d:38:df:3e:2e:3e:a0:97:44:ae:
88:c1:f2:ee:79:4d:02:6a:1b:1e:69:47:c0:01:b0:
25:5a:c7:3b:2a:57:e7:78:c3:4a:7f:2a:17:a0:7f:
a7:fa:c1:8d:61:8d:2d:bd:1a:c3:19:9a:c7:28:91:
bb:90:c0:63:1b:c8:3f:7e:7a:ef:5e:c2:06:f7:b1:
5e:e6:b2:9a:05:ae:0f:c0:ce:4e:5f:07:84:f7:6a:
ca:7a:c6:7e:c8:0a:e3:e0:f1:49:81:0c:1d:92:e6:
4f:ae:74:21:59:19:71:1a:8f:03:b6:59:e7:f7:49:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A4:95:CE:83:E8:62:B7:C7:14:69:97:3F:A8:B2:6E:F9:3C:4B:4B
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c1:b5:b0:66:ca:ae:86:75:ff:1f:72:dc:a4:46:c1:55:40:
01:a2:2e:62:3e:51:fa:8b:d1:4e:62:db:bf:32:2d:ed:fc:aa:
3b:40:4e:33:d9:25:09:2a:99:7c:d2:2d:51:2f:8e:83:5e:4f:
b2:3a:3b:31:cb:03:41:6a:cb:34:bc:96:dd:05:e3:2a:5f:b2:
e9:69:51:a9:c1:b5:13:c6:25:4c:bf:7c:16:e3:8b:49:52:3e:
88:d0:7d:d9:08:a9:6e:1b:b6:a1:43:da:81:9d:59:ab:a7:7c:
a1:d5:e5:44:cc:0e:3d:5f:f4:ba:8d:14:e8:d7:74:01:11:71:
76:30:5a:74:17:00:53:09:0e:08:ac:8f:72:28:84:a9:4e:93:
d0:a9:79:2d:23:e4:29:d0:e5:cc:c6:b1:26:87:68:0d:fa:17:
84:9c:dc:ee:54:aa:d9:ba:f3:fa:71:37:79:f2:19:24:2b:12:
5c:b4:2c:76:d9:43:72:e9:9f:e8:0f:6a:d2:3d:e4:bd:07:1c:
ba:ff:22:29:65:54:fc:f9:9d:b1:72:ff:f4:a4:68:99:ee:d4:
db:75:0a:91:41:19:18:63:fa:84:84:9a:5c:4f:fa:e0:84:e0:
75:6e:bd:12:29:0f:9e:33:ac:fe:a2:1e:8c:99:5f:94:38:ee:
8b:b3:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:47 2026 by rpki-client