Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier: Gac5oqAGMPO6axtUQ1b7Ap8mm4Yg2IyJnytX6GGwwbw=
Subject key identifier: AE:6C:D7:E6:7D:65:4D:5B:EA:53:AE:7A:18:83:EB:01:68:27:39:9D
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial: 019D2A72F0431FDD7B57A45C38A9BED9DE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number: 014C
Signing time: Thu 26 Mar 2026 14:01:08 +0000
Manifest this update: Thu 26 Mar 2026 14:01:08 +0000
Manifest next update: Fri 27 Mar 2026 14:01:08 +0000
Files and hashes: 1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=)
2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: bZUwF/zL3t7hYbjCfJQgUm/sQdX95yNeBRj+s1ibngw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:f0:43:1f:dd:7b:57:a4:5c:38:a9:be:d9:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Validity
Not Before: Mar 26 14:01:08 2026 GMT
Not After : Mar 27 14:01:08 2026 GMT
Subject: CN=ae6cd7e67d654d5bea53ae7a1883eb016827399d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:b8:6b:0d:65:7f:5d:00:b5:13:82:ae:f2:
d7:26:bd:98:7c:a3:00:60:07:84:71:9c:a2:de:59:
cd:5e:0d:55:fa:c9:61:7c:6c:6c:86:4f:e8:91:7a:
2e:85:88:14:3a:54:99:df:a7:fd:87:6b:cb:15:64:
95:26:07:b3:ba:eb:e1:6f:82:2a:27:9f:d6:96:a8:
ed:7b:5b:10:86:7b:e3:cf:05:5a:7c:54:27:57:32:
7d:7c:00:f9:df:47:45:2d:b4:5f:f2:87:a9:41:6a:
b3:f6:fb:4d:d9:fb:72:17:85:ae:4c:07:55:24:f0:
ca:97:42:6c:9a:1d:62:49:60:5a:68:93:ee:dd:6b:
3e:64:cc:f9:19:35:3b:99:e6:23:18:5c:65:14:6e:
2d:6f:be:a7:12:bb:49:55:24:4b:fc:c3:cb:69:10:
3f:12:c6:b0:2c:54:4c:77:9b:d6:48:1b:cb:ec:e9:
3d:46:e3:6e:70:7e:78:56:a0:9a:4f:d1:0f:51:c7:
56:00:86:52:e1:85:74:a1:0d:31:2d:88:a9:eb:d6:
5a:23:85:a5:f9:88:9b:d1:fe:9b:7b:75:ae:07:a3:
18:c5:b0:0c:5a:45:ae:58:bb:f8:95:ea:c4:71:bd:
8e:8e:6e:cf:ad:b0:44:ba:1f:17:ce:be:af:6b:f0:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6C:D7:E6:7D:65:4D:5B:EA:53:AE:7A:18:83:EB:01:68:27:39:9D
X509v3 Authority Key Identifier:
keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d4:cd:e0:44:25:c8:38:46:27:45:f0:73:ea:ff:7b:05:1c:
37:6b:74:45:dc:a8:21:d1:38:85:67:69:56:97:69:7c:66:6c:
23:4d:ce:05:82:13:f0:86:ce:46:1b:3d:5c:7b:cc:1c:3f:0e:
7f:a5:b2:fa:f3:bc:09:2d:5f:17:2e:c2:fd:f1:5b:34:44:3e:
47:8a:5b:e4:9d:1b:f1:ed:1c:99:e1:44:eb:72:68:b3:3f:81:
19:42:5b:da:ce:79:7a:4c:c8:be:36:be:84:dd:80:97:46:a9:
44:26:54:62:60:93:6a:bf:20:c0:20:34:82:c9:a0:b2:eb:71:
a4:c9:5c:22:ec:e6:54:5d:78:d5:8e:84:99:80:65:e1:c7:bb:
c3:0c:d2:81:cf:43:60:2d:95:26:51:21:60:03:96:fc:94:aa:
8c:40:8f:32:4f:88:e4:88:14:fe:33:cc:ae:55:77:dc:3a:65:
3c:b4:e0:bf:e2:99:12:bd:70:fa:cf:ed:0c:43:96:fe:e5:47:
c9:ab:08:55:ed:ba:5b:d3:b3:a9:a2:1e:6b:e5:14:a6:cd:73:
ec:69:c7:cc:ec:00:3b:b6:00:ec:24:2f:62:9f:49:8e:08:af:
1d:7a:67:8f:84:07:32:9c:5c:63:0f:17:fb:dd:83:90:dc:b3:
d2:99:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:09 2026 by rpki-client