Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
File: VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft (raw, json)
Hash identifier: YHS/70RyasSMcpek/stqPAieDVrDYYXG3LYlpVTKmaM=
Subject key identifier: A6:44:17:DB:62:27:10:5B:30:A5:BE:7B:E3:0D:E9:E9:15:BD:3C:50
Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
Certificate issuer: /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Certificate serial: 019D27DFCF616C83029CE9DA95A718AEBF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: F_4HRfGZ4DSq8Yan6ITw9ijxBSw.roa (hash: N5WEBXopx2PPKlcC41tM4IKPvt/ddBOWJi67v3cU+5Q=)
2: VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl (hash: zxO0f0WV7Pb5/FDPMgyvFIquaNXSwL8TaAtSE15UFvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cf:61:6c:83:02:9c:e9:da:95:a7:18:ae:bf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=a64417db6227105b30a5be7be30de9e915bd3c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:db:a5:fe:0a:9a:49:7b:ef:c5:15:f1:12:
bf:91:3e:81:da:31:2a:c4:cd:77:52:3f:77:e8:38:
9f:e4:44:35:80:8e:90:ac:15:44:b9:5a:b3:e8:a3:
a0:2f:2b:9e:1a:c4:48:7c:aa:c3:76:47:9d:f2:70:
f7:45:5d:89:b5:99:7e:58:b3:4c:28:18:e9:8b:a5:
c7:00:94:62:80:a7:dd:82:3d:fe:b5:a4:75:8b:a2:
99:21:8c:cd:e3:c8:f7:33:c4:49:19:42:05:9f:d3:
db:d2:d8:e5:fb:56:4e:83:b4:0a:b4:92:c8:36:0e:
2b:1c:b7:e6:1e:94:9d:7e:5e:e9:c7:94:90:dd:d9:
51:2b:f7:2d:d5:63:85:10:bf:08:61:49:f9:4f:f5:
05:6e:30:7d:e9:13:a7:4d:f1:de:2d:02:c0:8c:24:
58:3f:aa:68:68:5b:1e:14:b4:73:ad:4d:3b:54:53:
dc:b3:ba:74:4f:39:24:ce:ce:0a:5d:05:5c:f7:20:
58:8f:3f:5e:32:f4:d5:42:1b:6e:06:06:56:c8:79:
90:24:f3:3d:80:37:db:b1:24:74:66:5d:b1:3e:b2:
b7:20:a9:d6:d0:38:ea:c1:0e:9a:a5:68:4c:2f:07:
d9:b6:51:d5:7e:0c:3d:43:55:6d:16:6c:51:9b:d8:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:17:DB:62:27:10:5B:30:A5:BE:7B:E3:0D:E9:E9:15:BD:3C:50
X509v3 Authority Key Identifier:
keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:af:b7:32:0b:e3:cc:ce:2c:30:fc:78:64:e6:c9:03:87:f4:
2e:90:9f:b1:08:c6:96:0e:74:30:20:8b:e0:58:1f:3c:6b:38:
0a:e0:a4:9c:57:3f:11:fc:49:12:a3:e2:f8:2b:42:fc:aa:69:
da:aa:07:11:3d:6f:c7:ad:76:3c:cb:88:6d:80:de:3a:1e:3e:
c8:0d:2a:00:d4:77:6f:d4:dd:3f:a7:b2:cc:6b:11:32:d3:57:
bf:8f:10:7b:5f:4b:e7:2e:8f:7c:7a:bd:a9:85:2e:c8:48:6e:
63:22:1d:55:b3:cf:18:11:78:a9:16:3f:6a:1a:37:18:82:e8:
87:48:57:32:bd:e8:8c:64:db:b7:a0:ba:3f:cb:98:6a:96:c5:
fb:52:d6:a6:7b:fd:ed:31:7e:b9:19:e7:5a:6e:c4:b3:31:0c:
2f:01:e5:b5:8a:95:79:66:29:a9:21:04:4f:7f:18:0d:46:0d:
36:a9:67:47:37:19:93:76:c2:bd:c9:e5:75:15:02:d0:b8:35:
b8:43:fa:c9:c6:94:06:a9:15:2a:02:78:6f:83:4b:07:3d:a8:
e5:b3:74:5e:94:3d:d9:54:ed:23:9b:94:fd:52:1e:39:42:56:
22:e8:fb:a4:17:9f:2f:f1:b8:cb:f9:5d:d1:98:fc:d7:0b:bc:
b1:f4:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:56 2026 by rpki-client