Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: N8fGM7wTlc3OkT5rPl6S8gnLlF7LzJW1LkipPMgAiiQ=
Subject key identifier: E4:96:24:6C:B5:42:7B:3E:F4:A0:1B:A0:B8:18:8F:08:1F:0C:09:54
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019D2A3B7E3F4FB79BE56F7120F4787FE0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0E5B
Signing time: Thu 26 Mar 2026 13:00:35 +0000
Manifest this update: Thu 26 Mar 2026 13:00:35 +0000
Manifest next update: Fri 27 Mar 2026 13:00:35 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: pFIG+wgnd6FkLlV6fovp8GE7dXmiHKKCb2BKzy4PUZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:7e:3f:4f:b7:9b:e5:6f:71:20:f4:78:7f:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Mar 26 13:00:35 2026 GMT
Not After : Mar 27 13:00:35 2026 GMT
Subject: CN=e496246cb5427b3ef4a01ba0b8188f081f0c0954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:16:7f:c4:55:ae:51:81:c1:c6:0e:54:9a:
55:7d:88:09:9b:71:89:bb:96:36:b5:25:96:ee:8d:
b8:54:cc:ef:fa:29:48:21:c0:49:42:31:51:33:68:
88:a5:e5:0c:7a:fc:2e:cc:ac:9f:e7:80:89:0e:cc:
40:07:ae:db:03:c9:15:a2:d0:e5:d3:4b:9a:0a:61:
9f:ff:3d:9f:3c:47:a2:5b:98:49:42:53:3a:cb:37:
83:4e:b9:00:d3:ad:10:e0:6c:1d:e4:2b:99:1c:20:
86:9a:cc:8b:90:7d:fd:6a:b5:38:12:b7:6c:5f:1d:
b0:49:af:dd:e6:d1:a5:79:6e:34:4c:57:45:9c:c0:
2b:11:b0:e7:67:38:5a:41:10:2c:b2:b5:a2:c5:43:
9e:0d:53:03:31:75:49:0f:35:ce:06:79:55:0b:f7:
fc:71:95:e3:f5:1b:f0:91:06:29:cc:ec:8c:94:20:
36:bc:30:e1:00:87:56:38:0e:ac:e2:94:f4:78:ce:
85:49:20:3d:c3:fa:7b:9a:79:59:a7:2d:af:bd:98:
7c:f8:7a:ef:ac:19:44:18:e4:47:e4:d4:79:86:34:
87:92:42:c3:fd:c7:e5:6f:38:f5:02:c6:01:37:8e:
8d:8b:f1:f5:0e:48:4f:a6:f2:b8:d3:82:6a:29:d1:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:24:6C:B5:42:7B:3E:F4:A0:1B:A0:B8:18:8F:08:1F:0C:09:54
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4c:88:e4:3b:2a:8e:a9:6b:ad:09:da:0b:24:3b:26:32:78:
73:ce:6a:fe:e2:b5:ff:bc:1c:d3:4b:ea:63:d5:48:4c:58:26:
b0:e3:f7:ab:1c:45:c4:bf:c2:00:c4:04:54:90:8f:80:3f:3b:
14:3a:84:f7:0e:2d:c5:ae:ed:e9:98:07:71:16:71:3b:3e:96:
ca:a3:42:1a:e9:1d:9f:37:5d:47:c1:b0:b4:b8:e0:51:7f:9c:
b7:d6:5b:b4:9c:b8:b6:9a:37:03:69:4e:89:cc:b4:72:cf:66:
ca:07:07:42:7b:c8:90:de:ad:c1:ce:bc:c5:b5:7f:c3:33:de:
11:5c:4e:b1:9a:88:c0:11:90:fe:00:b4:ff:fc:84:40:a7:6c:
54:38:e1:70:5b:13:71:88:a5:82:00:7b:40:97:1e:7c:ef:22:
2f:62:8a:17:46:b9:ea:ed:de:50:d1:96:a2:fb:74:62:61:85:
b0:4d:ee:a6:78:70:f4:d9:0f:93:25:dc:39:9b:b4:0f:ac:1c:
72:e7:dc:1d:39:d2:5b:26:32:63:0a:85:9e:b6:52:3c:e6:2a:
9d:23:82:9e:12:c8:bc:63:83:4d:c2:4b:dc:f5:1b:9a:b3:e5:
9b:0c:04:07:a9:cd:f9:6f:42:88:ce:8c:1b:bf:5d:17:91:e8:
63:83:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:11 2026 by rpki-client