Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: is/XSgrTQMO0SE4+NSKXkKPjqo4hNzoDqpZj9Esa48U=
Subject key identifier: 2B:05:84:5B:3E:E4:B8:92:6B:7A:2F:3F:54:5D:72:B1:05:DC:C3:21
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 019D2816ABE1B8079DB41E0D0752549A6487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 131A
Signing time: Thu 26 Mar 2026 03:01:07 +0000
Manifest this update: Thu 26 Mar 2026 03:01:07 +0000
Manifest next update: Fri 27 Mar 2026 03:01:07 +0000
Files and hashes: 1: FpVW71nyoW-_gJoXR54EYMZoVQE.roa (hash: gZatusuUvr/QTel7Hexm6oiz929ityXKMuJIjfNYW6U=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: jwNzxh7Hyjf+D8BycdKQBLMsaE1vrsV3B/TfAdRnyJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ab:e1:b8:07:9d:b4:1e:0d:07:52:54:9a:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Mar 26 03:01:07 2026 GMT
Not After : Mar 27 03:01:07 2026 GMT
Subject: CN=2b05845b3ee4b8926b7a2f3f545d72b105dcc321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:f0:dc:7a:60:84:43:79:54:45:99:b8:a0:
45:cc:8a:ec:90:11:55:ba:5f:9a:15:67:8b:a5:4b:
29:d5:28:2e:56:00:44:6f:45:28:b6:f2:08:86:f9:
a4:15:de:4d:a1:7d:ec:6d:cb:ca:5a:ff:4a:5e:0d:
47:9b:9b:f0:73:2a:31:22:f1:29:2d:38:9c:73:6b:
08:dd:e4:50:55:54:85:6a:39:25:84:a4:b8:0f:09:
ef:b9:d7:4e:1b:35:8c:e3:f9:22:8b:3c:f1:16:b7:
2f:e5:77:84:a5:d2:17:5c:2a:55:b5:8f:df:1f:f9:
e4:c0:3a:69:30:c8:b6:c1:f9:bb:4a:87:a3:c2:fb:
df:72:1c:a5:e8:24:31:b6:57:b0:66:14:c6:8a:24:
cf:6a:55:76:5f:97:ba:34:6a:01:c2:04:44:f3:93:
bd:b5:e3:51:4c:10:2c:9c:a5:ab:d0:ec:0e:ff:1f:
c6:3d:df:53:37:b0:73:c9:1f:4d:cf:5e:64:e8:e5:
19:5f:82:ba:08:07:97:f3:39:76:da:83:a9:46:09:
51:d5:a2:11:f2:cd:f9:e0:cd:50:ae:dd:2e:55:52:
4c:ac:fa:81:12:f3:fa:67:b2:3a:1d:94:e4:0c:5b:
cb:8a:1d:b4:70:56:e1:e3:08:65:13:db:d9:8b:07:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:05:84:5B:3E:E4:B8:92:6B:7A:2F:3F:54:5D:72:B1:05:DC:C3:21
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e7:72:33:04:d1:e1:68:d5:4f:c3:0c:67:99:a0:a5:83:4a:
51:0b:a0:a6:e4:b8:90:37:04:37:74:bb:98:ce:4f:37:02:a4:
88:7f:13:50:dc:17:e8:01:35:89:f3:92:5a:99:90:c6:19:6d:
fc:8f:34:43:f2:af:7c:2d:42:ff:f6:05:9a:bf:1e:b3:90:ab:
2d:63:12:83:7e:52:9c:3b:61:fa:c9:0c:cc:24:ea:7e:9c:75:
ef:3e:4a:84:ff:73:b3:63:a2:a6:07:c8:22:0c:e0:1a:1d:bf:
4d:e6:d0:02:3c:e8:53:af:c3:58:3f:04:42:14:34:c8:de:0f:
8c:b7:30:44:4e:89:97:20:58:98:c5:fc:0f:e8:7e:94:80:f3:
4c:fe:e3:e9:8f:c6:c0:e8:50:2a:ca:0a:6b:cc:63:92:4f:81:
e6:e5:30:81:28:1b:8e:32:25:4d:a1:c9:ec:05:16:2c:13:16:
a0:80:56:7a:5a:10:06:c2:be:9b:83:dd:5a:7f:df:c7:00:69:
43:b9:e2:cc:e1:9e:ef:ab:f9:e9:3d:25:87:38:f2:38:c2:31:
55:e4:02:a6:c6:f2:90:9f:19:c9:bc:18:35:26:ea:d7:14:e2:
5f:15:ab:ad:91:54:ba:c4:3f:70:68:4f:25:8a:d0:c5:51:d8:
22:d1:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:58 2026 by rpki-client