Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: NYKR/p/siXJEDDROOL9GfCWdjXhcqli703Qv80UUAeA=
Subject key identifier: 1B:B8:33:D1:49:FB:89:39:01:9A:63:3E:DF:B2:70:5D:F7:21:6C:FC
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 019D26CD22FC0C9DABF104388D6866ACC27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: PdCQtFo1MZdYsa-X6x_yCeQP7WM.roa (hash: YWw0xEJYfH26bXcOtAt0QTYng83/pphUu49fNcxHt/0=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: s/bAON/miHXrZtdM/kBkhxVpTBytBfWZ78m/1+jfF/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:22:fc:0c:9d:ab:f1:04:38:8d:68:66:ac:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=1bb833d149fb8939019a633edfb2705df7216cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:aa:f4:2a:f8:1b:a4:a5:92:e5:ea:db:1d:
61:6f:14:24:4d:5a:a5:2a:0a:46:c8:04:ef:e5:2c:
f0:37:6e:51:46:52:f8:55:06:be:f2:73:ff:1e:67:
54:bc:2d:08:1f:0b:67:2b:0b:ce:d9:d7:38:fa:cc:
aa:19:00:1a:56:51:fa:1e:b9:36:6e:72:bf:5e:bd:
2e:70:5a:0d:30:e5:e7:37:2d:a6:d7:cf:6d:17:56:
ae:e8:3a:f6:96:79:4a:b7:cc:1b:94:21:90:91:9f:
2c:ec:a3:77:0e:41:45:99:0e:af:33:86:5a:ab:c3:
ff:0e:6e:55:3f:3b:e0:7c:48:4d:4a:f5:f2:35:de:
6b:04:8e:d0:d3:3f:55:78:bc:37:94:8c:c7:2d:4b:
15:e5:93:3a:74:1f:60:f1:29:d3:1c:ae:fc:d2:36:
59:b9:71:19:ff:b7:b8:cf:29:fd:78:ad:44:62:16:
75:4b:05:4a:29:b6:65:31:be:ab:73:87:83:25:4f:
6d:c5:38:78:05:d2:b6:9c:a0:70:08:0f:fa:01:f5:
73:a4:4a:a6:c9:70:22:1b:46:14:06:a9:f0:ba:ec:
7b:93:40:aa:49:81:af:8a:47:59:1b:5f:1d:d1:3c:
5d:97:65:ec:24:a7:0e:7c:3e:da:a0:c7:c9:6c:39:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:33:D1:49:FB:89:39:01:9A:63:3E:DF:B2:70:5D:F7:21:6C:FC
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7b:4f:02:96:8d:10:b5:f4:28:b2:ae:31:6d:44:bc:b0:85:
c8:c9:ec:0a:69:24:84:f9:52:54:55:8a:49:17:95:60:21:f5:
ca:10:da:dd:6b:ae:56:6a:f4:1a:c7:a2:07:d9:af:e3:0a:13:
a8:83:35:b3:e8:d8:83:f1:cf:45:d4:b0:2a:ce:31:d1:01:91:
86:66:eb:0e:d0:54:d9:32:9e:78:76:54:83:f8:e2:a8:c2:44:
42:b3:89:ec:25:e5:fe:ec:ec:c0:4d:e1:6b:c2:4e:ff:b5:15:
52:a7:52:68:6a:87:bd:3f:80:21:65:c0:34:3a:ef:0c:5e:37:
12:56:9f:e1:50:58:16:91:c5:a1:10:09:8a:e4:ff:30:cc:8b:
2f:d9:c5:ef:42:74:e9:a4:3e:70:d3:de:b6:c2:53:5a:e1:87:
83:f9:db:7d:00:f6:3d:15:77:b2:99:b0:6f:a5:2f:c2:cf:02:
6c:1e:e2:0e:cc:2a:76:29:ea:89:ec:75:0a:ff:e4:ae:45:47:
1d:f0:e9:66:bb:b6:da:57:c4:77:b0:26:4e:01:58:04:6c:45:
0e:4d:a8:b7:74:cc:fb:ad:ad:5b:e7:88:8e:83:ec:cd:4b:f6:
7a:5a:7c:1e:cf:a7:27:cd:8b:0f:bf:cf:e0:06:50:ac:3c:cd:
c3:07:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:20:13 2026 by rpki-client