Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: UAjrS8xuLr5ty2E2smahpqTgRJUTBpb0h+EL2oUPZIg=
Subject key identifier: D9:00:DF:82:7E:95:A0:DE:11:F8:6B:81:76:F2:C2:F4:EB:E1:15:2C
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 019D284E676BE497528B16F16E38C960A61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 1329
Signing time: Thu 26 Mar 2026 04:02:00 +0000
Manifest this update: Thu 26 Mar 2026 04:02:00 +0000
Manifest next update: Fri 27 Mar 2026 04:02:00 +0000
Files and hashes: 1: PYk6RC5m7OJWXRNYO3x9foVmPwM.roa (hash: PyAWpAbdnvAvMuGXImxWil5LYMDe43kyqM8HknJO3mg=)
2: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: +WauegGA3iV4VOb05PyzkvMS3XKub8nzXoQxno155vA=)
3: VilG8hdH4e2PgtPf0HH0QvCs9SA.roa (hash: X3S3ljAAWfahEeHRRoaDomf7TEYfABDZSsMixEQ2Qa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:67:6b:e4:97:52:8b:16:f1:6e:38:c9:60:a6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Mar 26 04:02:00 2026 GMT
Not After : Mar 27 04:02:00 2026 GMT
Subject: CN=d900df827e95a0de11f86b8176f2c2f4ebe1152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:77:3d:5a:78:7a:5a:10:bd:54:81:4a:4b:
bb:b5:7c:f3:2a:cc:ba:f2:c1:99:15:ac:0c:e5:39:
26:3b:b3:03:20:dd:07:de:0e:66:91:5a:04:4c:61:
93:be:c5:4d:02:23:ba:24:27:ec:bd:86:da:87:93:
95:93:12:25:69:ef:41:ea:b2:b7:42:f1:1b:fd:cc:
69:0a:7e:2a:a6:0c:8c:0f:e6:07:65:e8:78:9e:73:
07:8c:e2:0c:24:fc:79:60:3f:85:05:50:36:6d:38:
af:0a:ce:92:88:1b:cc:e1:78:33:d3:71:d7:3d:ae:
28:08:b0:ab:71:69:d0:11:ec:8d:78:aa:8d:73:47:
b2:7c:b4:b8:84:b6:08:a2:87:85:37:81:23:e9:0f:
bf:ce:d2:64:3d:ae:d9:32:e0:f7:db:c8:37:28:8e:
df:7e:31:0b:50:b6:ae:59:37:53:63:42:f2:02:9b:
05:c2:83:0d:fb:25:aa:b2:f2:1e:55:dd:f9:27:12:
a1:c9:99:fb:41:ff:8e:77:38:30:b2:71:61:3d:8f:
30:63:d7:c4:7b:28:a3:31:c9:13:86:2b:51:32:89:
86:c1:4b:3c:3d:b8:7f:c6:cc:d8:b6:77:80:77:d8:
d1:42:8f:21:90:d0:84:c3:f8:46:33:fb:09:0e:d4:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:DF:82:7E:95:A0:DE:11:F8:6B:81:76:F2:C2:F4:EB:E1:15:2C
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:37:b0:16:3d:1c:71:39:b5:07:f8:6a:72:a8:97:49:4d:6c:
61:59:21:74:a3:51:84:04:07:d7:9d:50:e4:75:0f:0c:fc:03:
0b:57:f2:b1:52:1d:cb:d2:96:94:8a:e7:24:6a:e2:19:90:4e:
27:a7:2e:3a:46:88:81:9f:33:d6:2a:ae:3f:21:b1:22:54:e5:
f6:72:e7:22:bf:9a:0f:e6:a5:db:17:0e:10:3d:64:41:13:7d:
63:e8:91:2f:60:a7:ab:26:75:0b:84:86:4c:63:b6:ed:a1:ba:
19:39:24:21:78:d0:57:9a:75:16:06:60:76:e2:bd:6c:e5:16:
83:2e:69:29:3d:15:a8:d1:49:7d:cf:19:62:0d:47:f9:61:01:
2c:53:ed:3b:15:62:36:91:f5:da:ff:ff:f5:f0:a8:3d:27:08:
db:f0:29:e2:47:0d:74:12:e2:e6:92:8f:16:16:1b:c4:49:48:
c0:dc:f5:d4:c2:8f:d4:07:f4:fa:40:c3:af:fe:c5:68:c7:51:
34:dc:91:d7:30:c8:3c:9d:12:cc:ba:77:a5:e8:90:75:cb:b9:
b1:3b:78:c1:6c:80:a8:13:6f:9a:ff:53:42:a2:e5:51:f7:74:
b7:70:14:bc:90:b0:5f:62:82:9a:a3:45:68:ae:18:97:e5:a8:
6e:6e:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:34 2026 by rpki-client