Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier: bZhZxulEpyRV3tisZ+KegcAPGdMpwXXeVZTRlPXAoZY=
Subject key identifier: 48:C1:5D:08:3C:70:7A:DC:42:0D:3E:CC:B2:E2:71:E8:AF:29:9D:E0
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 019D2884AECC9FF4F27A6A363B431D829166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number: 0D97
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: M-FsfGOycf9jYfp9tqtSOE1tveg.roa (hash: KbWLzZCgilO6OBGCbfqwG+EF0N+c9KwghmXNtRevPUA=)
2: OC1nyRt0bfVZANX8lUlsmij_SRQ.roa (hash: Rdwkl90u1nSZHEd8rY7u8aTFZGWKHVXtuaJS4W++hPQ=)
3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: ZjRyg2dZcll5im2/02+LR+GWXKrJ12i3YMkXAGdor50=)
4: VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa (hash: LHcWGrhhqmQEefD63qRAeICnBie6NA3TujUcOgPmo8Q=)
5: X8URGrQy5lQVgKZucRbyZdlIJ0A.roa (hash: v3GGPEKUSmn7q4SXBMTsOj2RRQGTLoKv6ZyqiXOL8do=)
6: tEALMFY5mRNnPeI1w2B4fh6s5fw.roa (hash: OpvOgmRGG0JJ9f1GQilIMwIzyL+4wnLk8rAzuKjlbwM=)
7: tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa (hash: mCMHaaXhfT9VeDu9M4tgELO+5HgeDqSNi4Gr5v6WmTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ae:cc:9f:f4:f2:7a:6a:36:3b:43:1d:82:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=48c15d083c707adc420d3eccb2e271e8af299de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:1f:e1:08:12:47:83:7b:a7:31:11:6b:02:
bd:fa:d8:04:42:d4:da:53:6a:ec:fe:83:b7:bf:ab:
68:09:8d:7f:c7:ec:1a:68:8d:c4:1b:f8:1f:7a:2e:
b6:16:c2:61:15:df:cb:16:38:d4:24:01:d0:94:01:
ba:de:2f:ae:57:44:42:0c:d6:5f:c9:ca:fe:4f:90:
fc:9a:73:15:59:1d:f3:a2:96:1c:b9:0c:9b:c4:c8:
3f:80:40:93:4b:4b:33:c2:5b:16:2a:70:ad:1f:f9:
56:8c:61:90:67:1b:08:18:e7:51:c6:d5:c7:88:ac:
ac:fd:37:b3:73:a3:00:3d:b9:24:83:71:7a:a9:a5:
5e:08:a5:c5:c4:f3:53:e6:d5:de:68:a7:28:34:c1:
e0:9b:50:1d:e6:2a:6e:fa:40:93:f0:55:f4:c2:ff:
6b:2b:90:0e:42:db:56:d8:f6:ed:8c:0b:07:f0:e6:
2a:7d:a9:03:c9:eb:3f:5a:54:2b:2c:a9:d1:4f:91:
5d:5f:8e:dd:67:a1:6a:a5:90:45:77:62:98:51:f0:
09:18:8b:af:35:58:ac:6f:f1:55:23:5b:83:9c:fe:
3e:bc:8d:ed:21:1b:57:87:1b:a3:22:a3:2b:6d:21:
e1:93:12:d9:a7:45:f1:80:d8:13:8d:eb:d4:86:99:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:5D:08:3C:70:7A:DC:42:0D:3E:CC:B2:E2:71:E8:AF:29:9D:E0
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:79:50:7c:28:1b:96:ef:74:60:d6:6b:81:9c:00:1f:12:21:
07:16:36:ab:73:47:7c:08:a8:97:8a:40:89:b6:2f:2e:c4:e8:
f1:7a:8c:d6:e1:40:48:fc:3b:d8:9e:9c:5c:5a:bd:98:f7:2a:
1b:9c:91:e8:65:02:c2:35:9c:c6:b7:5f:93:06:9b:7a:2a:c7:
85:b8:8b:e0:df:c2:05:e2:54:a7:04:95:d6:cb:5e:97:4d:b3:
ed:17:b8:b8:a4:29:e0:10:62:b2:42:2c:81:46:a0:5c:80:2b:
a0:f6:ce:f8:3a:0e:30:4c:4d:00:64:9c:a4:0e:8b:c0:fe:e3:
6a:93:fb:8d:8e:02:58:b7:7f:a2:e9:db:f8:3f:2b:ec:5a:a9:
9d:18:d8:90:32:25:a7:48:5e:99:61:fd:d1:44:42:59:f2:aa:
f6:18:e0:d7:1a:42:42:55:2b:57:00:16:4a:99:4c:e1:8a:86:
ea:1b:87:a0:1d:56:74:80:40:a3:c7:ec:92:69:c1:ba:c6:c9:
76:f5:b8:aa:6a:01:bc:95:99:fe:af:7c:5c:98:4d:a1:08:dc:
4d:6a:af:07:5e:e1:ca:2b:14:4b:34:0b:a6:c5:d3:60:46:f1:
d0:40:ed:1a:76:1e:ac:6b:7c:c0:0f:4e:f5:9a:e6:54:d7:62:
4f:d6:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:43 2026 by rpki-client