Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: VwldSvQGuzmlNbTaMlBv+PK+p5zAt9kel1rzEIHudf0=
Subject key identifier: F1:27:FE:CB:D2:3D:22:65:18:4A:77:09:5A:6A:C6:01:2D:98:A4:F9
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019D284DF305CA596C17B9694CA20C291A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0C88
Signing time: Thu 26 Mar 2026 04:01:30 +0000
Manifest this update: Thu 26 Mar 2026 04:01:30 +0000
Manifest next update: Fri 27 Mar 2026 04:01:30 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: bBF3MqA1bArM9UMLCiDXe4QpxCOJYywWOaIFjRD0Kw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f3:05:ca:59:6c:17:b9:69:4c:a2:0c:29:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Mar 26 04:01:30 2026 GMT
Not After : Mar 27 04:01:30 2026 GMT
Subject: CN=f127fecbd23d2265184a77095a6ac6012d98a4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:5d:26:0a:a7:19:02:99:6c:f2:69:f8:7d:
0c:02:4a:7e:37:b0:b2:2c:12:32:4f:35:6c:1b:4e:
27:6e:d0:14:bb:3b:80:7d:17:95:c5:3e:38:51:61:
98:82:2e:a0:8b:c0:f9:6a:7d:ec:db:4b:4b:20:5f:
c9:e3:f2:35:cd:17:ac:de:d8:a5:a1:08:fd:7d:e1:
9a:72:c8:2f:a9:a4:6e:07:6b:e3:6b:bb:f1:b6:9e:
31:72:0c:55:2a:36:2d:03:ae:95:1a:76:5a:12:89:
2a:e5:24:ba:be:e1:ec:70:50:56:52:3d:b1:b3:8e:
43:7f:ad:af:4f:a2:b9:d5:68:b6:48:5b:19:3d:22:
77:b8:31:b3:09:96:8b:31:6c:c1:ac:b6:e0:dd:c5:
90:49:1a:c4:33:32:41:43:bd:b1:b3:03:b5:dc:53:
cf:6e:5d:af:ea:62:5e:3d:15:e4:dc:6a:fb:95:16:
f1:c9:f4:f8:5a:90:08:a6:a4:9a:ff:63:e6:73:d5:
f6:60:35:1e:b8:6d:dc:fd:3a:70:6a:04:32:03:65:
13:6f:ea:75:a6:4f:c1:4f:96:dc:4c:c2:8e:e8:6f:
53:ec:33:fc:8b:f3:ff:d9:b0:ad:d7:68:a6:35:61:
e9:f1:fd:2f:c1:37:f3:96:d4:44:7a:6b:9a:67:02:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:FE:CB:D2:3D:22:65:18:4A:77:09:5A:6A:C6:01:2D:98:A4:F9
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:55:99:4c:e5:61:91:71:76:43:58:87:15:e4:ed:23:3e:9e:
29:fa:45:6b:4e:f2:a8:8c:02:22:f9:6d:72:88:b5:a9:6e:70:
91:64:1b:b8:35:cb:33:37:69:a1:0f:f2:12:28:67:4c:20:b4:
89:fe:2a:e6:4b:69:d0:2e:ca:7e:d3:98:a2:ba:bb:ac:4d:ce:
a6:67:8e:eb:34:91:70:c8:79:a7:ad:39:3a:b9:61:aa:48:79:
71:dc:9e:5b:7d:19:23:9d:03:e4:d8:50:a0:3f:56:84:27:38:
43:57:87:db:82:92:66:77:e2:cf:51:97:01:9c:17:13:e1:58:
bd:19:50:85:8e:b7:45:94:80:e6:b0:b3:cc:f9:5d:2a:e5:a4:
b0:25:a7:a3:98:43:06:43:33:b4:7a:b6:93:bb:84:68:ff:59:
7a:00:82:ab:b3:5e:60:e6:23:3f:04:ed:96:4c:3a:32:04:63:
d8:c6:ea:98:10:d1:80:66:b6:0c:8c:15:62:a1:bc:5d:33:e3:
3b:7e:7c:51:03:c2:50:73:d4:80:6e:81:7c:9e:c4:03:ba:80:
f5:f5:14:ed:5f:b2:63:7b:a4:88:6e:4d:e6:a6:bd:23:5f:10:
cc:98:bf:84:1b:69:31:da:51:0c:2a:2e:ac:88:35:82:56:3c:
2c:cd:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:37 2026 by rpki-client