Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: WKT0lfhdR/qEZbU6pCGaSrPPbvtDBeSFMT7fTBrurnc=
Subject key identifier: 2A:B3:AE:0F:EA:99:8B:A1:C8:DF:F1:16:62:DF:AC:2F:F3:69:2D:17
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019D29297A788CEA903C44184DA3081A71F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 03B8
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: r+yeyZhNNkvNT4aJGoxpruhyOJ+YjR1+jIza5TlwvvQ=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7a:78:8c:ea:90:3c:44:18:4d:a3:08:1a:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=2ab3ae0fea998ba1c8dff11662dfac2ff3692d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:96:81:2d:19:e4:52:3f:78:0b:80:70:1c:
1c:f8:65:e4:4a:b2:7b:f0:b6:60:a1:9d:83:38:8f:
a4:7b:d2:0b:35:75:4f:d9:56:da:09:4d:1c:30:ae:
a6:55:90:4b:cf:a4:f4:fd:e1:98:7a:66:36:de:9a:
bc:aa:ba:b6:2b:dc:72:1d:a0:d1:1e:b7:93:fd:bc:
7b:7d:3b:62:47:dc:b2:47:cd:46:9c:09:01:9b:81:
f7:24:8e:4a:65:0f:75:ba:53:1f:72:ff:bc:fa:1c:
ba:8d:5d:df:89:03:ff:e2:a9:d1:2a:5d:47:a8:f3:
0f:72:5c:56:e2:0b:9b:92:dc:9b:60:e1:01:5e:8e:
75:1e:84:ad:31:48:a6:51:6b:a4:ad:d9:e8:f9:9b:
94:0c:16:24:a4:f1:b4:90:83:1a:69:69:87:47:d6:
60:2e:cd:0e:38:98:cb:6f:12:30:bc:24:da:aa:9b:
ab:92:68:ea:81:51:07:f7:2f:64:9b:ba:43:cf:6c:
db:f5:db:da:9e:69:b5:92:6a:1e:da:02:38:15:15:
64:47:03:f4:f4:db:2a:bf:3c:9f:f0:c6:e4:c9:09:
12:22:c7:4b:be:b5:7c:32:42:68:4d:b3:14:07:c4:
5c:91:e4:76:37:95:bb:6f:89:9b:6e:7b:1c:d0:a8:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B3:AE:0F:EA:99:8B:A1:C8:DF:F1:16:62:DF:AC:2F:F3:69:2D:17
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e9:cd:b1:f7:50:fa:17:dd:5f:81:88:2a:79:41:2a:a2:5c:
b3:59:c5:a5:17:2f:71:02:7b:13:6e:cb:ad:6c:2d:90:45:58:
cd:25:ec:de:31:bd:96:56:f4:5d:f2:ba:c2:0f:2b:dd:f1:93:
b3:98:4c:96:5e:92:aa:2f:a9:23:da:85:ff:a0:74:85:b3:8d:
31:65:ae:a5:68:65:a6:90:1a:7d:c4:ad:23:f8:87:08:d0:08:
02:e5:bb:45:38:fe:e1:b4:a7:d8:b0:60:79:58:cf:a4:3d:de:
07:3f:3b:79:38:55:b7:79:ea:8b:17:f4:4e:81:17:62:dd:27:
d7:be:7a:6f:18:14:0e:67:b5:15:af:ba:67:1f:fe:5f:9c:c9:
2b:94:6c:be:b5:e0:c8:da:a4:41:7d:27:48:93:ce:2f:fb:c2:
34:4a:ad:2a:91:56:5b:d3:09:df:07:f5:66:ae:fe:f6:b9:3a:
c9:f7:fc:98:d7:63:e4:25:51:6c:9a:1d:75:9c:1b:80:57:8b:
6b:00:81:a3:30:b4:4f:8d:21:2c:57:8a:77:c2:7e:eb:77:fa:
5c:a2:60:3b:91:7b:64:cc:52:23:63:96:f8:c5:2a:ee:0e:e8:
3b:a7:48:50:46:f6:d5:c3:ad:90:9c:5a:7b:5b:71:55:f1:d8:
47:39:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:28 2026 by rpki-client