Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File: VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier: R2BOBu7q5aQreQYscqZQkQZlfF3QArJz+xhRbFLTQr0=
Subject key identifier: 6C:87:3C:0C:A1:8D:32:57:C3:26:51:A8:72:93:33:A7:E4:2F:51:11
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial: 019D254CB506CE1B3F8DFA08EB3D6E2AA74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number: 0D7C
Signing time: Wed 25 Mar 2026 14:01:17 +0000
Manifest this update: Wed 25 Mar 2026 14:01:17 +0000
Manifest next update: Thu 26 Mar 2026 14:01:17 +0000
Files and hashes: 1: EgvxwX18F988dQqkK9XKl7B803U.roa (hash: LbApliZ16bFCZoVrhnEezKbFE+rVBexY2nPAOQAYD/U=)
2: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: JiY/mpUh3zP+IFaCkAZIFDfHw7c7aUF85mipfsFh6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:b5:06:ce:1b:3f:8d:fa:08:eb:3d:6e:2a:a7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
Validity
Not Before: Mar 25 14:01:17 2026 GMT
Not After : Mar 26 14:01:17 2026 GMT
Subject: CN=6c873c0ca18d3257c32651a8729333a7e42f5111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:95:bc:e3:8b:6d:ee:cd:9c:49:58:40:3c:
74:7e:68:e0:8e:b9:9b:46:46:e4:05:3c:b1:c6:c8:
7a:f4:06:bc:d3:cd:54:23:4c:63:50:9e:3f:09:f1:
9d:40:97:43:c6:b1:87:c3:16:d8:98:22:c3:59:69:
6f:f5:26:cb:45:59:01:f8:6c:5e:d9:d8:c3:a3:5e:
b9:1d:85:e1:8d:9e:d6:00:c6:06:6a:50:30:29:a4:
1e:58:a0:e7:81:bb:ff:99:74:f5:9a:9c:b3:d9:02:
d1:da:99:9b:39:53:06:da:84:bd:18:fe:6b:01:68:
4c:4a:6c:79:97:be:97:fd:f2:58:34:92:10:6e:fa:
3e:c1:ec:29:8a:2a:6a:1d:dc:77:37:31:f3:0d:51:
a5:29:14:1f:0e:69:04:15:8d:a0:9c:22:61:e4:e6:
d5:b3:7b:fb:57:aa:cb:9d:ee:e1:99:56:5a:ed:eb:
7a:d9:8b:f0:fa:8f:6e:ed:42:d8:cb:3b:0e:b1:91:
20:96:19:6a:48:2c:08:60:e6:46:b4:20:60:2f:59:
20:e2:22:48:53:18:86:52:c1:9e:9d:b6:a6:8d:aa:
9e:bc:94:28:a0:4f:2c:5d:da:49:bb:1b:7f:dd:3d:
fe:c5:aa:78:ce:63:0d:e6:4c:3f:e3:bd:dc:6c:a3:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:3C:0C:A1:8D:32:57:C3:26:51:A8:72:93:33:A7:E4:2F:51:11
X509v3 Authority Key Identifier:
keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:10:52:4d:9c:ca:32:2c:c9:63:26:15:eb:c9:50:7f:36:84:
1b:d0:fc:41:41:54:57:bd:31:6b:50:23:e3:c9:44:b7:09:c6:
b3:6a:09:16:4a:89:24:65:39:64:1a:e7:a9:39:ee:60:b6:c9:
00:0f:b2:19:08:67:b3:8d:8e:2d:eb:05:db:c7:81:0e:04:90:
e5:9d:a3:e9:83:cf:4a:83:3f:b1:a6:1a:fd:20:a3:50:a6:d1:
33:e1:07:14:ea:4e:d0:48:10:62:a8:c8:cd:09:d5:58:ce:7b:
0c:2c:c3:2f:b6:a0:ea:10:e1:19:c4:1a:f6:3a:b2:23:68:e2:
88:5a:d7:ed:c5:42:2e:9c:95:5d:2c:2a:ba:b7:f4:83:69:ba:
8d:7e:cd:52:f7:92:5d:0c:7d:66:b0:26:0f:4f:66:7c:4e:66:
97:82:75:7c:be:b4:6e:da:ea:94:2c:90:d4:e4:3d:57:32:c7:
6e:33:2e:11:a9:bd:75:56:17:fc:6e:bb:d7:f4:e2:3f:af:ef:
7a:f2:e5:fb:fe:a6:87:0f:f6:4f:df:3a:7e:e5:de:6e:02:3e:
aa:9c:c0:c1:97:db:d5:20:8c:6e:cf:0f:4a:7c:7d:0f:50:34:
bf:11:3b:85:77:ac:38:5d:6c:5d:4d:9c:6c:77:60:51:09:bd:
cf:de:9e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:27 2026 by rpki-client