Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: yvjKCe23BDLdeVJgmWFQfg7P/WP0QAW0QXJdoETfF7g=
Subject key identifier: 91:E9:29:8D:93:2E:CE:43:E9:A7:B4:B3:BC:0E:B2:1B:EB:0C:B8:D8
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019D2772B403DFBAFE0CC7BB77C25EADAC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0AA2
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
4: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=)
5: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
6: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: z2U4CYiqGrPAbJnQmIWsB6c6TMZ5hr7s1Y6K8GC+zww=)
7: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
8: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b4:03:df:ba:fe:0c:c7:bb:77:c2:5e:ad:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=91e9298d932ece43e9a7b4b3bc0eb21beb0cb8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:47:7b:bd:67:b4:54:90:94:a7:1c:7d:bf:
75:84:a1:b7:6b:d6:10:87:dc:f4:5f:dd:96:ea:05:
f6:38:77:6a:de:05:04:38:42:25:e2:5a:1c:6f:ed:
58:9b:20:2f:59:52:fb:b8:66:7c:fb:b2:1f:e2:69:
cb:c5:af:b5:a6:8f:77:26:a7:e7:57:28:d4:3d:d5:
ab:41:69:db:8e:f2:2c:b2:d1:39:0f:e0:0b:26:23:
bf:73:ff:9a:3b:89:24:22:5a:a5:0d:78:8d:66:57:
c7:ff:35:8b:c4:98:a6:1d:e2:a4:30:f9:e0:22:99:
bd:f2:52:0e:b5:d7:75:cf:62:bb:da:7f:54:df:95:
12:b4:7a:c2:1a:5d:31:35:c4:81:18:c4:46:a7:9a:
96:bf:0d:3b:1a:9f:f6:e8:8f:e0:60:35:6a:c1:40:
39:18:4d:47:69:4d:f1:f0:2a:84:b8:52:45:52:62:
98:4c:55:67:d6:67:0c:e7:49:b5:06:10:5e:98:b7:
e2:b5:54:55:21:9d:fa:c3:a2:1c:d1:58:06:5c:d1:
b8:fd:2a:92:be:1d:b3:02:4d:f2:4c:4c:7f:d5:3b:
ec:8b:32:09:db:98:6b:4e:98:ab:ce:73:5f:6c:c3:
17:62:1d:b6:26:38:96:24:f0:a8:6f:4e:41:f5:5a:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:29:8D:93:2E:CE:43:E9:A7:B4:B3:BC:0E:B2:1B:EB:0C:B8:D8
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:7a:09:d9:b7:4c:f7:ae:0f:ee:5f:9f:a0:c2:26:d3:ff:
87:9b:3f:aa:39:5b:ee:52:f5:10:fe:79:d1:01:e9:94:16:7e:
93:6a:de:b4:7e:39:65:30:37:2c:11:1e:8c:3a:49:0e:c7:c8:
6d:1c:82:45:6f:e6:04:7c:41:a3:10:dd:f4:1a:63:f0:16:b8:
72:c5:0d:8c:da:f6:15:44:2b:e3:c9:c5:20:c9:38:d3:ab:e3:
34:e1:50:35:3d:cb:c4:30:cc:5c:eb:0d:4c:9b:0e:21:7f:fb:
98:a9:ae:0f:2f:a8:67:4b:b9:2f:26:66:30:b1:a8:98:2e:67:
9b:c8:42:0a:25:47:34:2a:05:01:3a:72:1f:fc:e0:c7:26:7f:
4a:59:6a:51:6a:4a:d9:a2:5c:b3:96:de:4b:7b:e5:9d:cb:bb:
5c:c9:9d:07:54:d6:45:1c:be:e0:a8:b9:84:57:76:ab:5e:8a:
60:8d:94:c1:0f:21:98:77:ad:01:b6:e7:ad:c2:61:d6:b8:31:
33:fe:a0:8e:59:21:b9:b4:98:6f:61:c4:be:71:4a:dd:1f:72:
96:b5:8c:bf:36:23:a9:23:29:ae:22:7a:4b:3d:91:14:18:05:
04:c3:a6:3f:6a:03:32:4c:06:3c:e4:d2:e7:90:23:cf:38:b7:
f2:30:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:19 2026 by rpki-client