Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: LZuK9nO3V9BaNPhXA27noEtHEzpa6AyMzMwDxryxCaM=
Subject key identifier: EC:69:EE:C2:20:2B:15:D8:AA:39:22:B7:BA:00:AC:92:A3:59:2A:3B
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 019D27DF8FFCDEBB7E9DBA492F985CDD44F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: +/RjElSyXMXHkT1e27UUGTv/i5Ex2FZjXx+bK0ptjf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8f:fc:de:bb:7e:9d:ba:49:2f:98:5c:dd:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=ec69eec2202b15d8aa3922b7ba00ac92a3592a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:68:4e:ae:0a:be:56:68:1d:1d:b4:46:8e:
1e:28:43:48:60:b5:17:38:2a:21:90:c7:dd:0e:8f:
34:8d:9a:ba:6e:65:9a:7b:30:0d:91:a4:b4:1a:4d:
be:03:4c:51:8f:47:67:bf:bf:db:36:bf:32:95:e8:
42:0c:0f:38:3b:e5:d9:ba:a7:e2:ac:d8:0d:55:14:
03:85:5f:b6:9f:f0:18:aa:9d:ba:8b:c4:37:61:ab:
04:83:50:3f:87:fa:dc:4c:75:38:66:01:bb:59:a4:
52:ef:e0:b6:d6:30:c4:c2:a2:5d:43:2c:5f:1a:44:
05:e7:e5:ea:13:2a:ba:38:57:46:e8:6a:63:c5:29:
e3:94:ec:c5:3c:f7:04:8d:27:b9:98:80:c1:9a:79:
61:49:41:ee:d1:30:e1:bb:ed:14:6b:90:3f:91:ed:
ff:7c:46:15:6e:33:4e:92:d2:3a:4f:75:41:86:2f:
a2:a0:95:98:0f:d8:39:86:60:ea:99:9f:ea:73:0b:
76:9d:c7:97:6a:b7:2f:f2:cc:90:b5:d4:12:80:50:
d9:40:81:06:f7:a1:97:9d:22:24:99:d8:b4:87:8f:
3f:2c:4c:4a:b0:3a:d8:d3:ab:4f:1d:82:7d:04:39:
c0:ab:e6:05:f5:c4:c7:95:8b:2e:34:ef:af:ec:5b:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:EE:C2:20:2B:15:D8:AA:39:22:B7:BA:00:AC:92:A3:59:2A:3B
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1a:48:32:b3:41:a5:87:34:7d:a1:dd:73:2f:97:0c:48:1e:
e3:8b:15:2a:c4:7a:bd:f8:4c:ff:0f:03:46:1a:71:82:9d:83:
94:4b:ac:b5:cc:3d:a7:67:47:21:77:fd:c9:00:ab:61:17:5a:
c8:89:ba:68:f5:ed:fa:ad:69:87:8f:c1:8f:15:21:24:9a:11:
e9:8f:10:0c:a3:17:35:53:56:60:92:e5:38:05:63:f5:66:64:
38:39:f9:24:ec:94:8c:f5:b0:ca:ac:6a:b6:8b:9c:c6:d5:c6:
a9:d4:70:c0:8f:87:89:8d:86:15:2d:d9:45:c6:ca:50:ef:aa:
66:fc:f8:bb:5a:f3:a5:84:5b:12:e7:e3:ba:e4:cd:19:54:1f:
8b:e1:7a:c9:35:b9:05:ed:9c:a0:69:93:3f:5b:fd:1c:f3:c5:
44:70:7c:b3:1b:e6:a5:a3:7b:5f:cf:c7:57:f8:86:10:89:eb:
b1:46:25:76:bf:8c:b6:6d:a6:5a:65:27:46:59:53:dc:bd:e2:
2d:ba:2f:ae:5c:b7:bc:16:07:51:08:ec:93:59:04:04:28:2e:
40:9c:e8:68:15:04:af:d1:af:b0:e3:7e:b9:51:df:bb:fd:de:
77:7e:01:08:92:de:1b:ba:01:63:25:18:66:0d:e1:56:2c:01:
d7:ac:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:06 2026 by rpki-client