Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: VoINwHbuSvTvZis5cswBkP33RbGOgTjAEh9D5Pnv4TY=
Subject key identifier: 1B:EA:80:04:C2:B8:A2:18:41:C1:44:40:88:75:64:47:7B:C0:36:03
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019D284D6484FF0CEB6D4BB366608A7F00F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: 37uxPO9BVwic1+f8c69iCIimp5bYCArGAAsrBj/srfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:64:84:ff:0c:eb:6d:4b:b3:66:60:8a:7f:00:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=1bea8004c2b8a21841c14440887564477bc03603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:80:4a:f4:ba:b6:0d:0d:3f:0f:24:a9:d7:
92:6e:bd:76:e0:dc:46:3b:6b:e3:cb:70:10:56:03:
b0:da:5c:2c:02:6d:2b:ae:83:90:07:57:c8:4b:8f:
14:41:22:38:5a:05:05:c7:6c:c4:00:90:a6:4b:5e:
17:e9:03:73:b8:2d:de:72:63:b2:7a:fa:b0:69:e6:
d3:00:5e:a0:ed:14:28:10:b6:81:a2:f1:59:22:86:
cb:8a:1d:4f:37:5a:90:a8:eb:12:66:8d:d7:8e:fb:
00:13:42:54:10:af:e4:97:87:49:ab:8f:d5:d8:5f:
e1:58:1d:a2:04:25:ee:5a:01:a4:e5:bb:ea:bc:5c:
7e:d6:97:86:30:38:4d:46:06:c2:12:1f:5b:4f:4e:
71:81:e5:fc:d0:24:88:3d:00:91:66:14:96:4a:af:
0a:5c:c8:2a:82:03:4f:aa:4a:09:bf:1a:ee:1c:2e:
5a:6c:99:35:a8:cc:59:19:16:88:9c:46:d0:48:54:
f3:a4:1a:17:c0:3a:f5:7f:91:bc:6a:1d:4d:9e:2f:
cc:a0:7d:35:7e:b8:ba:db:5e:2e:d5:18:b2:62:7e:
7e:29:80:0b:b0:e7:61:4f:a5:12:88:cf:67:36:ba:
cb:ab:04:5b:d0:73:79:4b:54:b8:61:d3:bc:05:57:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:80:04:C2:B8:A2:18:41:C1:44:40:88:75:64:47:7B:C0:36:03
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:21:40:a4:1e:a9:b1:2d:7f:e8:89:29:2b:02:20:83:39:5a:
bf:72:8c:4c:01:df:d8:5a:d7:05:97:45:2b:31:d1:a6:dd:f8:
b4:95:4a:26:45:fb:a0:e4:2d:0d:0e:8f:35:e1:d0:d4:1a:00:
12:80:9b:a9:ca:b0:63:7b:24:2d:f3:5b:5e:f3:bd:22:44:fa:
dd:57:13:9f:2e:39:f5:a6:5a:48:fc:4a:24:95:44:01:aa:77:
f0:73:d3:e0:59:78:15:ff:a8:bd:87:50:2f:ff:3c:27:65:9a:
ea:e5:b6:85:72:57:be:d0:37:44:98:6a:b7:18:11:27:a4:2f:
42:6c:e6:e8:5b:5d:aa:6d:37:22:2f:a7:31:e6:39:69:19:b4:
cd:53:97:af:3b:7c:e6:bc:83:08:60:bb:5e:93:66:bb:c7:b7:
5c:79:14:46:dc:9d:3a:bc:60:1b:7a:f3:c0:5f:9f:51:89:ec:
49:a6:35:d5:c6:56:5c:6a:13:41:69:3b:b2:0a:7d:77:ee:cb:
7c:e7:31:60:23:da:7b:bb:8c:8f:b6:9c:f6:70:d4:3d:09:8b:
e4:50:34:94:a4:83:6e:3c:a1:52:32:75:73:13:df:19:08:a0:
f4:36:bf:3e:8f:26:ce:c6:4e:d8:16:99:29:73:c4:ef:f0:96:
db:d5:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:45 2026 by rpki-client