Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
File: VwciOmKIeWeXTXTfTljijV5DfYY.mft (raw, json)
Hash identifier: evCuuPUCNTY6kE53CfrnE5iwsnnXfKNIINuCFgNRLyc=
Subject key identifier: 71:F9:32:B5:27:E7:AC:A4:26:61:36:98:A6:0C:BF:30:C7:6E:C6:2F
Authority key identifier: 57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86
Certificate issuer: /CN=5707223a62887967974d74df4e58e28d5e437d86
Certificate serial: 019D2AE128A306F9D2F214303E08F520EC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
Manifest number: 0189
Signing time: Thu 26 Mar 2026 16:01:32 +0000
Manifest this update: Thu 26 Mar 2026 16:01:32 +0000
Manifest next update: Fri 27 Mar 2026 16:01:32 +0000
Files and hashes: 1: VwciOmKIeWeXTXTfTljijV5DfYY.crl (hash: VKH4v4h13On1/eF31sN3KbaTmF77Nor3AsNzOmyAG9M=)
2: p0ShZyZrwUY3Z8d8i-UzhwWKWVc.roa (hash: Xb9kX/JSqQvcz9Un5jVk/fOLkQYgqLNMso1gG+CAwN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:28:a3:06:f9:d2:f2:14:30:3e:08:f5:20:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5707223a62887967974d74df4e58e28d5e437d86
Validity
Not Before: Mar 26 16:01:32 2026 GMT
Not After : Mar 27 16:01:32 2026 GMT
Subject: CN=71f932b527e7aca426613698a60cbf30c76ec62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:1d:9c:9d:e3:e9:25:3a:63:2e:0b:5a:a1:
c9:26:0d:23:d3:52:79:6d:10:c0:55:db:d2:21:bb:
6c:45:ea:ce:43:9e:53:f2:82:ae:cd:8d:81:4d:df:
24:48:90:3b:75:20:d1:78:cd:10:af:a0:bd:11:ee:
3a:cc:58:99:4d:9b:1a:58:48:1e:21:8d:f5:6e:49:
57:99:3c:9e:d3:6c:24:ea:db:4f:1a:58:30:fe:d7:
f9:68:dd:8a:d7:bb:65:91:76:d9:6f:88:76:04:a4:
e3:31:89:6e:04:bd:d9:ef:79:28:a5:8d:dc:68:35:
af:16:a8:3f:5c:01:56:db:3a:63:86:25:1f:92:78:
a4:14:1d:6a:66:0a:51:b2:14:7c:fa:c8:ed:2b:8a:
b6:01:03:46:b2:9e:7f:db:7f:c0:b0:5f:0f:a8:93:
5f:10:56:b8:d8:d3:07:2e:bd:57:5f:03:d5:04:75:
27:a2:11:10:e4:4e:b7:e3:04:d6:8a:e7:07:1d:7c:
d7:3b:c1:a4:8f:b5:b6:f0:a9:d7:58:a9:49:c5:eb:
dc:f1:9c:21:1c:98:78:dd:99:e9:7d:cc:76:0e:21:
8c:29:4e:41:99:d7:b1:5a:18:b7:c5:77:b0:9c:0c:
96:25:d5:66:fe:aa:dd:40:b6:54:2a:00:d0:3e:b7:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:32:B5:27:E7:AC:A4:26:61:36:98:A6:0C:BF:30:C7:6E:C6:2F
X509v3 Authority Key Identifier:
keyid:57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:21:e4:ce:9b:d9:25:0e:b6:29:3f:df:0e:3b:c3:8c:fe:
ef:4c:69:a8:62:c3:26:43:2b:21:aa:70:45:28:78:2d:22:77:
8e:f2:b8:60:82:b6:c9:ff:d2:0c:e0:2d:8c:88:39:2f:4a:67:
3e:58:d7:3f:9d:a0:7a:da:86:91:83:c9:93:9e:75:ec:52:90:
67:a0:1f:28:4d:b7:41:b8:f7:d2:bf:86:3b:8d:b0:24:c6:42:
f0:54:af:70:be:09:71:59:b0:94:59:a3:5d:a9:59:79:ce:0b:
ea:7f:a8:62:e5:81:cc:eb:f6:7b:5d:2c:09:b4:77:54:a3:61:
01:07:da:3f:0e:7d:09:62:5a:80:9f:20:00:d6:80:c1:4c:cc:
4e:a9:31:e7:52:05:d4:7b:12:87:c3:ed:bc:21:ec:60:61:96:
94:06:ca:08:a5:94:db:0e:c0:2b:e1:d9:57:a6:db:f0:6e:91:
a5:a1:4f:29:ac:7a:4f:d5:00:13:32:87:64:d9:8e:e0:26:19:
14:5f:51:53:a6:5f:4b:e2:cc:df:8d:78:a8:43:14:a9:46:ac:
aa:23:ba:ae:ca:05:10:85:54:7a:8d:ea:f2:e7:35:27:5b:d4:
86:ab:c3:bc:d3:97:df:bd:c7:8c:a6:e5:46:9f:c6:34:1b:0a:
e5:4c:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:36 2026 by rpki-client