Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
File: vWGQNE2etusMy5SON6oKqr4vLpA.mft (raw, json)
Hash identifier: tX9dFk3sXgdd52Bd+6WTpWGuYPMjzup7LNZG8Ix3ZxA=
Subject key identifier: 1A:13:13:25:4D:EC:46:27:48:F2:12:DD:6E:F6:19:A5:4F:0E:71:7D
Authority key identifier: BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
Certificate issuer: /CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Certificate serial: 019D2583EBFE89741EACD7A92A4067437C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
Manifest number: A5
Signing time: Wed 25 Mar 2026 15:01:35 +0000
Manifest this update: Wed 25 Mar 2026 15:01:35 +0000
Manifest next update: Thu 26 Mar 2026 15:01:35 +0000
Files and hashes: 1: jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa (hash: 4Rm+AgcIx2QNLzodYb14yKwLv1JgZDJIFSxZdtp7HDw=)
2: vWGQNE2etusMy5SON6oKqr4vLpA.crl (hash: FbKGOKEOqC5GgskSNcDgPuRAuYvWnxSRn++RLwvdaIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:eb:fe:89:74:1e:ac:d7:a9:2a:40:67:43:7c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Validity
Not Before: Mar 25 15:01:35 2026 GMT
Not After : Mar 26 15:01:35 2026 GMT
Subject: CN=1a1313254dec462748f212dd6ef619a54f0e717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:06:97:04:43:7f:69:9b:87:56:b9:e0:df:
5e:3c:30:f3:69:82:38:4e:e6:ac:5b:d4:9e:1d:59:
bb:de:48:32:4f:91:47:a4:9d:da:f0:65:4e:5c:eb:
5e:d3:d2:ec:a0:c4:62:a1:9e:f9:58:b9:43:92:f8:
c8:4b:27:7a:84:26:54:03:36:f2:05:3c:61:9b:b0:
b2:92:16:db:65:79:81:23:ae:e5:67:80:11:56:08:
fc:48:01:9f:f0:58:8a:48:6c:6e:29:36:72:96:dc:
6c:94:3c:09:ac:d3:83:1c:76:cb:f8:a4:15:30:a0:
19:2e:78:64:8f:a0:fd:d8:4b:64:77:c7:50:b4:e2:
ec:6d:b5:fb:3e:70:b5:3d:04:32:60:92:1c:7f:1d:
04:e7:8d:3b:de:77:1c:05:61:e4:ab:6a:60:75:f4:
90:7a:4a:0f:b3:ed:ca:51:2e:55:d6:4c:d0:70:17:
66:5e:9f:ae:41:38:cb:b3:1d:ad:03:c5:43:5d:ee:
22:63:b9:57:6d:84:46:db:5c:cc:26:c3:44:0f:32:
42:1d:ee:bd:1d:6d:32:ad:1a:9d:7b:fd:57:cf:a3:
e1:56:f2:70:29:6a:59:86:3f:70:b2:15:cf:1d:21:
24:64:d6:56:05:47:47:1d:d7:76:15:55:de:d5:13:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:13:25:4D:EC:46:27:48:F2:12:DD:6E:F6:19:A5:4F:0E:71:7D
X509v3 Authority Key Identifier:
keyid:BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:95:be:55:00:5e:52:a0:59:e9:7b:a9:83:6b:23:ba:33:7e:
36:df:4e:cc:ae:ef:8f:4b:bf:f3:8a:97:19:80:9e:88:8d:5f:
86:a5:b6:c5:fa:08:92:c0:f0:59:73:43:fc:00:0c:05:64:3e:
7a:b6:90:b6:89:c8:a8:69:02:44:64:0d:ce:43:bf:5a:36:92:
49:8e:31:a2:48:e6:96:c8:d8:01:a9:f1:84:67:bb:26:b4:d3:
92:f1:16:d0:cd:34:6f:59:5f:85:7a:05:c8:e8:b6:a3:ce:d9:
32:38:b0:6a:8c:4d:e9:a9:7e:fc:01:a5:9a:7f:91:ac:99:15:
aa:e3:00:50:38:e2:06:f7:16:7a:0b:c0:5d:96:cb:97:a8:e1:
ad:17:2f:bf:d9:bf:ca:98:c5:6f:04:41:9d:2f:52:85:81:90:
21:ec:91:58:db:2d:66:0d:2d:16:80:fa:4c:eb:63:6b:c8:48:
e3:37:b8:65:a8:39:ba:55:62:dd:41:7f:27:7b:b0:28:a6:fd:
21:3e:eb:f8:e1:d4:79:51:73:d7:12:26:a2:96:9b:6f:18:45:
a9:16:4a:b6:15:9d:bc:4d:57:8e:2d:d2:10:fe:9a:79:1a:25:
53:03:49:f4:a9:25:26:c4:ae:df:91:13:03:ec:f6:2a:11:3b:
3d:d0:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:16 2026 by rpki-client