Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier: 1vjmbpxYBl81Gb/O1kwEV3nRvKW1rVLwjWdb5A1Unqk=
Subject key identifier: 49:DC:31:72:8F:A6:C7:F4:90:AD:D4:87:AB:1A:67:C1:B1:E1:1A:ED
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 019D281659A6852F088D6760BC160C742F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number: 141A
Signing time: Thu 26 Mar 2026 03:00:46 +0000
Manifest this update: Thu 26 Mar 2026 03:00:46 +0000
Manifest next update: Fri 27 Mar 2026 03:00:46 +0000
Files and hashes: 1: WYdRQ5cIvCbePXrfeSyu6TkOanw.roa (hash: ovr1qQ5nW2VpX0gLwNkAZbSyQiC2DrZzZpubC+JN+Yk=)
2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: fgSyHHVBMmnVxWBhc7F5wuRKfrQ59+rUA37xWLWcj38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:59:a6:85:2f:08:8d:67:60:bc:16:0c:74:2f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Mar 26 03:00:46 2026 GMT
Not After : Mar 27 03:00:46 2026 GMT
Subject: CN=49dc31728fa6c7f490add487ab1a67c1b1e11aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:b1:00:38:4f:4d:b0:40:39:5b:ed:7b:a7:
ec:4f:c4:9a:f3:bf:f9:ac:71:22:8d:d7:35:df:fc:
97:8f:84:fc:5e:76:4a:f9:9a:56:1c:24:70:31:5d:
c7:31:5f:b3:97:3e:33:39:93:cd:b3:d2:b2:c7:fb:
b6:94:1d:a8:ef:65:4e:db:9b:91:82:a2:85:84:aa:
41:a0:6e:da:d9:ba:d8:6b:6f:5b:f7:d0:6a:2e:64:
b8:9b:8c:00:a6:d1:c3:2b:fd:30:47:60:8e:09:68:
c0:de:b6:96:19:ee:53:39:cd:cf:e5:9c:c5:f6:af:
de:ca:be:28:74:cc:41:19:22:53:ce:c2:26:a5:bb:
62:69:eb:58:15:6d:d4:38:16:04:21:45:49:8e:65:
06:38:ae:49:60:67:77:15:3e:59:71:a8:08:3c:46:
d8:99:ba:5e:2d:77:cf:49:cd:72:38:7d:43:81:c8:
f2:05:e6:40:7c:b5:22:d1:8d:86:c4:2c:23:6b:38:
b7:7c:ad:f4:bd:35:77:46:20:fe:b0:fb:fa:9a:8c:
63:c6:a1:c4:c0:cd:46:df:c1:d4:d9:dd:39:08:16:
a6:37:f5:9f:bc:4a:10:d1:58:1b:ea:8a:98:33:ee:
b9:2d:2b:3c:dc:dd:ed:ef:d0:8d:0f:3d:9c:48:95:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:31:72:8F:A6:C7:F4:90:AD:D4:87:AB:1A:67:C1:B1:E1:1A:ED
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:89:ea:b6:70:f0:2a:b7:44:50:aa:1c:bc:fb:6d:17:cd:bb:
71:7d:e6:d4:ca:11:f4:34:e6:15:0f:0d:ce:7f:2d:16:e0:13:
90:36:d0:85:ef:14:24:fe:5e:b3:8d:db:03:fa:d4:ca:91:16:
25:9c:7b:9a:1d:81:75:1f:18:84:2b:da:d0:0a:aa:f0:15:73:
74:42:58:34:12:b0:65:53:17:0d:f3:cc:da:f5:c4:ed:b9:88:
59:60:d9:27:77:64:85:95:77:4a:e4:45:c4:d4:8e:d1:34:10:
14:a6:90:20:73:4c:f6:5e:fe:5f:3b:77:ee:9d:91:b4:8b:35:
5d:9c:ed:c2:f4:ec:e2:10:1f:3d:db:6c:4d:a5:16:af:ba:bd:
a5:ff:6a:16:84:ff:4a:f1:38:28:a7:12:90:d8:98:31:4d:a6:
1e:10:d6:c6:29:7c:ef:a3:ca:15:68:75:a9:36:af:8b:e4:9c:
f4:2c:dd:1f:57:60:6c:65:16:e3:65:fb:71:a8:e9:7b:ee:1e:
53:2e:ea:96:e6:b8:39:06:4a:3f:3b:7b:ca:ee:54:79:91:3d:
c9:52:6d:ee:c2:fa:3f:70:77:b0:85:53:48:e8:23:f0:bf:30:
b8:86:cf:7c:56:49:23:e3:90:af:2f:bc:00:62:cf:88:f5:68:
5a:f7:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:44:20 2026 by rpki-client