Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: +LnCyQSLfOshgnGsy/t3ywaAFX5Ar049ly67gtQBTNw=
Subject key identifier: 7E:33:65:A0:A2:A7:0F:0B:E7:2F:B1:BD:4B:DA:6F:82:90:AF:C4:E8
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019D27A8E4B17B9A1363AE29241B4F8FB7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: ydhoL7c8gIgRwD+nyWP51XH+iZi3rfSeso0b1WwsWKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e4:b1:7b:9a:13:63:ae:29:24:1b:4f:8f:b7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=7e3365a0a2a70f0be72fb1bd4bda6f8290afc4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:a8:1d:26:c8:a3:55:50:7e:d5:8c:d6:98:
b1:e0:b8:5b:ca:12:5f:0e:0c:e6:22:64:bb:b4:63:
e3:bd:f1:10:fb:c8:c2:2e:ef:2c:f5:0f:78:1d:e8:
85:25:01:20:f4:ce:aa:9a:e3:91:3a:51:41:55:1d:
92:55:e7:16:4b:b6:02:8c:a9:37:bc:61:a6:97:c8:
a9:5d:c6:2d:cf:63:5a:dd:80:11:d5:aa:ca:64:0f:
63:6a:cd:2f:98:17:3d:3d:ae:d9:e2:b7:cf:a4:cd:
3d:79:49:87:ea:44:b3:62:ab:29:e0:59:45:50:a5:
8f:40:ab:16:1a:1d:3b:f4:46:f2:6e:0b:76:9d:d4:
b4:cc:b8:a9:f4:cc:8c:d3:a6:6e:95:0d:bd:08:37:
a9:12:bb:98:49:35:c5:0a:45:69:9e:6a:12:07:11:
5f:35:18:f2:bf:a4:d8:27:df:16:e1:79:54:b4:ed:
7c:88:fb:2d:b4:46:ef:c8:d8:5b:7c:ba:57:1b:d9:
a0:06:b2:bc:0c:a9:01:21:d8:3a:b3:61:ff:8e:c3:
35:8b:bc:6f:33:3b:46:42:66:00:70:ee:4e:7e:b7:
2d:53:9a:9a:61:1e:f4:14:6f:48:3e:66:7b:d8:05:
e3:fd:28:bc:42:04:1e:72:8e:66:24:58:bd:26:1a:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:65:A0:A2:A7:0F:0B:E7:2F:B1:BD:4B:DA:6F:82:90:AF:C4:E8
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:cf:38:01:5e:f2:a1:44:06:2e:6c:52:44:e8:44:2b:11:
b1:cc:d1:0d:0d:bd:6b:c5:51:d4:87:3b:5b:88:ee:07:0f:f8:
c7:26:34:92:bb:5f:fe:be:cc:46:d1:f2:86:f1:ba:4f:2d:e7:
b1:f5:9a:c2:36:d8:30:8d:93:ba:0a:88:bd:8c:5e:7f:d0:b1:
12:e7:a3:97:d6:47:73:e2:1d:5f:0d:35:97:06:bb:ab:78:2b:
15:e1:65:da:76:4f:67:8c:f5:6b:29:ce:2a:11:f4:8d:cb:c9:
5d:b7:17:2b:99:f4:3e:4c:a1:cb:7d:01:ed:9f:62:ef:d1:55:
ae:96:17:15:2e:07:f4:03:c6:3a:5b:ea:62:78:aa:87:e2:08:
47:e2:6b:00:84:1d:fd:7c:84:81:93:8a:cb:49:6d:77:8c:f7:
64:34:a8:32:bc:c2:1b:3b:ec:a2:cb:ca:e2:8d:3c:b5:3b:86:
66:f7:b0:5c:4a:92:c8:14:46:8a:28:02:a6:eb:4f:49:9e:a1:
b8:dc:66:b5:ce:f3:56:ba:0c:97:be:0b:fa:a4:cf:35:36:f2:
26:5b:b8:ec:20:f0:cb:56:0b:0d:a5:70:ab:1c:e8:d2:1f:c6:
f4:fa:14:b2:b6:5b:30:c3:c8:15:bd:63:61:1f:2b:14:7b:cf:
78:13:40:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:36 2026 by rpki-client