
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: PAsEikWzvOFWr9I1kWnHdyCVb1XCOufSzQY0gRomcno=
Subject key identifier: 01:F4:1D:E3:24:CD:D4:41:22:84:26:6C:A7:30:57:C1:54:43:05:43
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 019D27DF82D02E11D0A6A83500463FF25604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0E4E
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: 7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa (hash: 5arTTImvBzaIRupQVayIK37D8OB4WYArstAWqXrZVwM=)
2: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: 2ZV4NZ/SPy3G5DiH0Zl8C3UKl/i1XG4NLvkZVR6kNEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:82:d0:2e:11:d0:a6:a8:35:00:46:3f:f2:56:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=01f41de324cdd4412284266ca73057c154430543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:5a:a4:72:ff:c9:f7:f6:42:87:c0:b0:cd:
1b:86:87:0e:f3:34:7b:42:da:40:ab:f7:f6:03:55:
48:7a:e5:62:70:55:3b:25:5b:7e:c2:3f:bc:86:35:
bd:35:c5:de:3a:8d:14:1c:e1:60:59:98:e8:72:a7:
4d:1a:0e:92:de:04:4a:50:31:71:2e:d7:b2:ab:bc:
1e:c2:66:b5:f0:98:5d:15:7f:fe:6d:a9:ef:b5:86:
79:61:95:e2:50:4c:86:92:a0:e5:f5:db:b5:8f:00:
be:22:35:14:ee:a9:fa:b2:cd:fc:a1:15:62:c9:5d:
19:3f:d7:51:8d:f3:86:fe:b2:a5:f2:04:7d:cf:f2:
3c:7d:a6:12:41:0a:83:7f:3d:a7:04:9b:6b:26:1c:
15:57:f8:1a:f7:da:5d:77:0f:11:7f:92:76:5e:d2:
a4:dc:d4:0e:34:6b:7d:66:84:06:57:4c:46:ba:e2:
15:40:bf:76:6c:6f:b9:fa:27:4b:89:2a:6f:9e:aa:
6a:38:23:ed:7a:1f:f0:bd:f2:55:97:a2:1d:ab:73:
9e:00:a0:a7:17:04:d2:93:5a:49:90:e3:ec:34:81:
ff:33:d1:c2:7d:1d:f1:00:da:49:68:e0:7f:64:2a:
a7:b8:64:2c:7e:89:08:cc:da:43:e6:dd:b7:50:27:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:1D:E3:24:CD:D4:41:22:84:26:6C:A7:30:57:C1:54:43:05:43
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cf:e1:e9:cd:6d:6f:3c:ff:38:e5:2a:5d:52:ac:a9:c2:b5:
06:bc:78:d4:73:7a:82:13:5f:3c:93:4e:d9:b1:25:26:cd:f8:
51:8a:08:fe:45:45:20:6c:9a:b9:26:84:c9:35:38:4c:0c:d9:
f4:b3:94:3d:62:c4:5a:83:dd:b6:b6:e0:3e:af:20:c5:8c:c6:
0c:88:47:f9:57:7a:99:b3:9d:53:8a:f8:c5:75:73:9e:dc:79:
93:3f:c3:b5:d5:04:8c:3d:7d:41:d3:47:20:5b:62:8d:2f:76:
5b:84:d2:6d:0f:fa:3f:2d:48:fb:06:23:a1:55:82:bd:b5:02:
7f:95:a1:ce:cc:c7:e2:03:f1:2e:19:d6:11:b1:cc:7e:a5:5d:
c6:ef:35:a9:4f:3d:32:28:5e:8f:c3:5b:6f:92:27:a1:ee:71:
5f:06:d9:b8:d5:fb:6e:83:30:fb:68:5d:fc:b6:1c:1f:ac:ac:
f9:62:ad:d0:b5:e8:00:3c:1e:f9:94:af:bd:18:c9:8a:4d:d1:
e8:82:78:70:fd:6a:58:41:44:14:14:10:fc:ef:67:3b:cd:78:
28:9b:4e:37:da:b7:76:2c:74:31:d9:ac:d5:1a:dd:a8:1f:42:
5e:10:20:0c:13:84:79:31:31:53:93:14:87:17:1b:a1:67:8c:
32:bd:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:00 2026 by rpki-client