Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: /rifbUSze/yZeT0I341hlVEeX2TTXiYq7G/JzglPZQY=
Subject key identifier: 71:9A:66:C9:80:CF:D2:C9:12:AB:08:BF:D2:B9:33:A5:D2:7D:AC:CD
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019D29CE02A28AB555C98754AB9EBAD201C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 127C
Signing time: Thu 26 Mar 2026 11:01:00 +0000
Manifest this update: Thu 26 Mar 2026 11:01:00 +0000
Manifest next update: Fri 27 Mar 2026 11:01:00 +0000
Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: rM5W49iHtWl+FOQUlGpeqicxqZ7bP6/ip4mLb/J0t2k=)
2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:02:a2:8a:b5:55:c9:87:54:ab:9e:ba:d2:01:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Mar 26 11:01:00 2026 GMT
Not After : Mar 27 11:01:00 2026 GMT
Subject: CN=719a66c980cfd2c912ab08bfd2b933a5d27daccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:0d:bb:fc:da:b1:de:ee:6a:d8:81:d1:a7:
53:22:c7:81:0c:cc:5c:3e:49:46:5c:c6:57:b6:1b:
a4:50:e9:09:ea:bc:3a:e8:3d:4e:de:47:d4:c8:7b:
2c:e1:2c:39:97:c9:2e:b3:e0:ae:30:0b:a3:66:f8:
d5:ee:46:e4:c8:35:46:42:8d:1e:3d:86:db:f1:17:
95:94:e3:c4:b6:2f:0c:c3:cf:12:92:86:70:03:a3:
e9:d7:ad:84:0c:a1:9e:54:46:76:75:b9:a9:5c:d8:
6c:bf:44:29:c0:12:89:07:37:b2:3d:3d:8b:94:1e:
5b:2a:1b:0e:02:c1:91:e8:e2:a7:6d:3d:fa:e4:23:
6e:71:74:08:db:b8:87:dd:4e:b7:2f:ff:75:a8:0b:
b1:28:16:1c:f3:b0:34:c5:16:23:02:be:ee:b1:8d:
93:1e:da:2d:5d:3a:25:0e:ae:18:2a:15:7b:34:3f:
06:74:d3:76:e2:ff:1f:ba:8c:e7:bf:a4:25:21:6c:
e7:86:7a:07:ee:f4:00:d7:bd:be:f3:94:09:95:5a:
17:f7:cc:6b:7e:63:b6:9a:9d:4e:51:e6:ee:6a:53:
5a:f2:ff:aa:73:b7:d8:78:b5:e2:8f:c5:4b:a6:39:
57:35:e3:74:bc:75:a3:71:5a:9e:49:c3:6b:26:18:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:66:C9:80:CF:D2:C9:12:AB:08:BF:D2:B9:33:A5:D2:7D:AC:CD
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5d:7b:50:32:86:3d:e0:d8:47:4a:00:dc:81:02:8c:b4:a6:
9a:a3:a3:60:bd:8f:d6:61:19:2b:4a:07:a9:74:6b:73:de:5a:
e8:9d:97:76:1f:8e:2d:3c:85:1a:6d:77:c0:a5:a0:9a:c5:6e:
6b:22:74:53:27:74:48:4a:5f:01:0e:56:0d:1a:07:4b:a0:79:
c3:01:e2:91:d0:e5:dd:ed:d9:9f:50:90:a0:a2:79:67:4c:8f:
e4:07:52:4c:ca:dd:dd:6d:11:22:45:48:00:b8:42:12:1b:32:
b8:d9:37:1b:61:a8:0a:31:bc:bf:15:e6:a2:40:98:e2:f6:2e:
da:cd:b8:bb:56:e9:ce:83:c1:98:2b:99:c4:6d:3a:04:6b:9a:
ba:ab:02:a9:6f:67:df:17:f6:ae:ae:bf:a6:21:34:a2:14:bf:
bc:28:85:2b:82:d4:a9:89:f5:21:bd:8c:04:93:2e:69:9b:a5:
96:61:b9:e0:c9:e6:51:70:5a:43:4f:bf:f8:c1:3b:8f:a5:be:
6b:74:69:50:64:a4:dd:f8:b4:b9:96:54:a5:92:98:48:b9:cb:
ae:70:47:06:ce:e0:48:00:85:25:99:1b:75:ae:72:60:c2:ac:
59:6e:f4:b0:f2:bc:91:68:c4:e9:20:91:9f:0c:95:16:50:b9:
87:6e:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:20 2026 by rpki-client