Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier: cp6/HTE1NU1l/sQJgzVRy6lPHgZSnPgaMvwDsmKGwdY=
Subject key identifier: 62:23:58:89:67:99:45:18:99:35:38:E1:E4:A9:54:8C:1C:D5:EA:8B
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 019D273AD4A6EC82040C4D81F56A3944F7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number: 18A3
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: 35RKWFaAWG0FZ0_sumSRQjo-ZTk.roa (hash: ZVFWp4+g/AarEhCpcB89stJLNFioN0GCQ4WE7V4D3XE=)
2: 3e1aB77stWTp_pcWReBzNO2IJyQ.roa (hash: y600ju7YKSbJWZwn4QGcu4eyhB4Kn+pcLohTFXP1j3U=)
3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: dmKFgy7n4pZ4ZmK4UveeUji863bNYZkbqpIjCNDl18s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d4:a6:ec:82:04:0c:4d:81:f5:6a:39:44:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=6223588967994518993538e1e4a9548c1cd5ea8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:39:de:e1:62:fe:72:0b:de:b0:db:ad:79:
d4:d1:78:69:a7:e5:5b:4d:37:5a:4d:d7:e9:18:72:
35:1d:dc:8d:6a:5a:c8:9c:48:ab:bd:1c:84:cf:d9:
51:0c:1f:73:6a:4f:c1:ea:a9:ea:06:c0:0f:1d:c5:
c3:9c:73:24:24:9b:17:19:b4:8d:24:08:6a:d6:2c:
ab:18:1e:51:49:07:c1:ea:8c:56:fe:b6:07:34:a7:
32:1e:57:5d:09:ec:12:27:61:bf:69:e6:d6:d7:dd:
40:af:b5:d5:15:54:e4:bc:11:68:d2:37:3a:d5:f9:
f5:59:54:1b:35:54:ae:d2:af:79:d6:37:03:1b:4a:
9c:d9:86:c9:ed:9d:64:e3:ab:b6:be:b6:42:87:d5:
58:60:8a:a3:87:93:f3:f6:e9:fb:06:87:53:a4:dc:
ec:2d:8f:f0:fb:13:a2:89:31:37:4a:e6:63:91:f7:
d6:a7:e1:a3:41:e3:ff:f5:89:86:4a:79:32:29:4a:
7c:f9:97:b4:08:ec:c1:08:6e:35:ec:75:32:c6:8a:
4e:f5:df:6c:de:42:e2:07:db:75:c2:d1:5d:a0:ca:
23:b8:f0:e8:a9:ef:e8:9b:5a:6c:1c:d3:ec:3f:8d:
af:61:c3:5b:c1:29:a3:d2:42:dc:82:0c:f6:56:82:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:23:58:89:67:99:45:18:99:35:38:E1:E4:A9:54:8C:1C:D5:EA:8B
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:83:8b:89:e1:ca:ee:fe:bd:38:bd:0d:75:23:52:b9:d8:d7:
39:8a:55:6b:37:93:93:4d:cd:c7:07:34:5c:a7:09:bb:84:50:
09:c4:5f:20:3a:34:51:47:a4:50:8b:ac:26:86:28:dd:62:bf:
f1:39:a0:eb:71:1b:cc:84:fb:1e:08:5c:1b:18:90:ea:ba:d3:
89:18:16:3a:5b:fb:8a:9a:a6:73:75:9d:52:75:de:2f:66:e8:
04:c0:02:91:fd:8a:3e:71:fe:25:d9:96:8a:83:21:aa:02:62:
51:b2:be:d2:e8:44:69:bd:b7:a4:c3:fd:5b:38:54:53:4a:e3:
73:46:74:26:af:dd:e0:ca:63:15:a1:62:31:50:b8:cb:b7:9b:
2b:f1:4b:5d:e1:cf:51:f8:ca:25:95:ed:84:77:8b:ab:30:46:
ea:0e:98:3c:8a:5f:68:0a:ea:64:f6:38:85:05:65:cd:22:4c:
77:db:72:a9:7d:40:13:ee:07:c0:8b:cd:3a:d6:87:5d:12:81:
fc:b9:b0:b0:52:4a:8c:6a:b6:b1:d5:81:64:08:e3:e3:d8:d1:
83:a9:e0:c1:95:9f:b6:f1:31:29:76:aa:44:4d:d2:5a:8b:8d:
77:75:b8:1b:10:f6:cb:b8:fd:c8:6a:a1:e9:e0:5d:dc:67:2b:
08:e1:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:22 2026 by rpki-client