Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: dU17YZE9Mic7Rssh9upR1IQRL2TUhqEnw9AJAXmQ4TA=
Subject key identifier: DB:3F:02:AF:18:C6:3F:27:9B:C3:E3:DD:A1:F7:F0:CB:76:5C:12:82
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 019D2583EC81169A6BC69DFB46CBC28F3377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 1805
Signing time: Wed 25 Mar 2026 15:01:35 +0000
Manifest this update: Wed 25 Mar 2026 15:01:35 +0000
Manifest next update: Thu 26 Mar 2026 15:01:35 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: viQk+x7XJ8rctTC7iZvKQlHgSDCostDfe7ZzX/czELU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ec:81:16:9a:6b:c6:9d:fb:46:cb:c2:8f:33:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Mar 25 15:01:35 2026 GMT
Not After : Mar 26 15:01:35 2026 GMT
Subject: CN=db3f02af18c63f279bc3e3dda1f7f0cb765c1282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:d9:74:42:16:db:6e:d5:f3:99:31:a4:0d:
46:e1:c6:a9:0a:96:ce:35:0d:db:5e:ac:af:98:1e:
19:e9:4a:19:ac:a5:7e:8f:2b:25:0b:f7:27:8a:57:
29:73:f4:d0:01:37:13:c7:4c:ed:61:e8:90:aa:54:
47:9e:0d:17:29:21:a6:66:4d:2a:ab:30:8b:6a:81:
6c:52:57:18:67:d3:27:f2:06:c1:04:41:cd:f6:17:
35:b7:f6:fb:04:07:a9:4c:c7:6f:b3:5a:41:70:f5:
25:d4:06:63:19:cd:9c:16:58:20:0e:bc:07:52:87:
ab:e8:33:c9:a2:53:0e:f1:3f:94:93:14:48:98:54:
ab:c2:f1:44:5b:e7:fa:d6:eb:54:27:4b:4c:1a:84:
5f:6b:e8:d2:68:cc:5b:d6:44:1e:70:51:59:ff:1d:
d8:ef:9f:d4:71:09:86:56:2d:3c:37:4d:fc:e9:ce:
8a:ba:cf:d3:4b:a4:a6:c2:24:12:e8:75:a4:7d:30:
0a:e8:49:95:93:b2:0e:6b:3f:3b:6d:7d:67:a1:b3:
28:1b:6a:1f:e6:50:ad:48:96:de:40:06:34:d1:29:
10:55:16:22:c6:eb:79:fc:0b:61:b0:08:50:33:b6:
b8:b7:a9:4a:cc:30:4b:89:b8:98:5c:bf:ef:1b:c8:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:02:AF:18:C6:3F:27:9B:C3:E3:DD:A1:F7:F0:CB:76:5C:12:82
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:65:d7:49:8f:01:02:81:9c:fc:8c:49:58:08:8a:5f:a8:db:
ad:b6:98:c5:5a:fd:90:a4:b6:8a:af:24:99:b2:3c:02:d4:81:
fa:69:fb:e5:de:a2:bb:0f:10:9d:ca:ca:d5:28:2c:ca:07:ef:
2d:3a:b1:77:7e:27:44:4c:38:f0:34:2f:fd:9f:d9:00:61:52:
14:89:9b:9e:3b:f4:bb:90:e9:d0:84:05:0c:ae:0e:ed:ea:78:
96:74:79:2e:8b:4c:98:f9:4a:37:b0:c0:66:15:68:aa:6d:38:
64:4a:2a:e8:ce:94:af:30:fa:81:e0:5d:51:a8:58:7d:ba:8c:
7e:85:0b:b8:58:d2:f8:f8:d0:1a:1a:c5:3a:d6:a5:b0:f4:6c:
e1:52:a7:fe:f7:a1:fd:bc:6d:ad:4c:4d:3e:6a:d5:52:ee:2e:
d7:ed:f4:6b:60:97:ef:e0:0b:1f:e6:d4:a5:81:f5:31:d3:c9:
4a:8a:95:82:d8:71:6b:79:61:c3:dd:d3:36:31:05:97:9e:22:
9d:02:3f:3d:39:f5:45:0a:30:03:cd:36:2d:9c:98:2a:cb:f5:
bd:ab:12:78:ad:1f:e4:35:28:d5:e2:29:1c:ac:f2:60:42:7d:
e2:dd:94:c9:36:33:ec:67:b8:05:9d:d0:3f:17:89:d0:da:f4:
d6:53:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:06 2026 by rpki-client