Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: K4cJMyAOuPymobhnISpBD1uma6zf+VcI5NPSyhzn+J4=
Subject key identifier: D6:44:E7:C8:10:1B:C4:E1:30:32:48:BB:C3:64:28:18:E1:7A:93:72
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 019D27E02665694C5F0C006B7E7F9432A87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0BF4
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: ixR/wo+R/gpWEaaQs0tIJiBzrKkxARSO1GiNLgLV/Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:26:65:69:4c:5f:0c:00:6b:7e:7f:94:32:a8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=d644e7c8101bc4e1303248bbc3642818e17a9372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:0f:c4:cf:92:39:8d:86:f1:b9:b9:45:91:
d6:e2:e0:9a:2f:f9:5a:48:7a:51:38:70:c6:da:81:
63:06:98:ad:46:b6:3c:84:df:a4:8b:b8:8a:95:72:
79:4a:85:c3:18:55:61:99:e6:74:f5:cd:8e:e4:79:
6a:97:fc:72:48:a4:9d:66:54:d6:e0:e5:8b:fb:7f:
fa:30:98:0c:ee:0d:67:71:f2:64:ad:d1:8e:a0:3f:
65:a2:60:36:44:6e:21:61:78:3b:6d:55:71:b0:41:
57:8d:bb:27:a0:b2:55:dd:2e:4a:31:fe:6c:59:65:
fe:36:c3:3c:7d:df:6d:96:c7:11:ad:92:59:d7:10:
13:26:f9:7b:df:43:be:71:f5:1f:69:fd:49:b9:5f:
ba:09:ee:8e:46:a4:27:ea:ac:98:0e:a3:a1:60:73:
8c:a8:b4:05:d4:6c:32:e9:54:b3:5c:87:24:1e:b1:
d4:3b:8d:4a:ce:33:16:1b:f1:d3:b3:48:f6:88:90:
ba:7b:a6:50:ef:53:5f:bf:c2:db:66:c6:fe:a8:14:
26:b6:9f:7c:f0:03:a4:88:ca:60:8c:03:6a:0d:30:
cc:f9:71:48:fb:24:96:2d:1f:6c:ad:eb:17:30:02:
db:e2:12:8d:75:e1:62:d7:54:2b:15:b7:6b:e1:cd:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:44:E7:C8:10:1B:C4:E1:30:32:48:BB:C3:64:28:18:E1:7A:93:72
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:18:2e:2f:09:ea:92:0d:7f:8d:37:ac:db:f2:d0:3d:92:
1c:1a:07:80:91:d3:2d:9b:8d:ac:34:65:80:c2:fb:b5:39:93:
41:16:85:e6:f9:42:d8:b4:f9:b9:17:0a:c8:ab:88:50:35:88:
e5:fd:b5:c2:24:53:b9:87:49:8c:a5:69:29:f2:73:9b:73:91:
da:aa:84:ee:81:91:27:9e:a3:8b:39:cf:7e:a1:f1:91:ed:10:
65:1c:82:7a:d8:10:fa:04:d4:56:08:ce:66:58:c4:6b:23:85:
43:9a:c4:4f:64:42:65:29:6d:20:e9:62:f9:e6:ba:e7:83:d3:
c4:24:0f:c5:73:54:1a:07:1a:d3:47:16:1d:8e:d1:17:dc:87:
8c:76:d2:ba:90:27:54:e7:62:28:d4:0c:0d:a1:48:f8:78:50:
64:40:35:bf:f3:50:b8:20:7d:c2:e3:3f:e8:34:3c:9b:a5:e5:
8e:59:da:e9:6d:38:99:3c:09:60:0a:2f:59:42:e0:28:ec:38:
ad:36:eb:a3:82:be:00:98:5e:8b:fa:44:a8:e3:01:d2:e4:31:
fb:5c:be:98:9e:2d:e3:5b:c5:9f:12:11:d6:60:73:ca:fd:59:
e8:03:ee:4d:a8:30:ec:ec:b4:18:81:b4:23:a2:a1:fa:e3:5b:
c8:63:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:07 2026 by rpki-client