Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: 2W9yPGou0FpD5gcyBvd7QAUmRTXQ8NUwKDf6iIRCpbA=
Subject key identifier: 53:2C:21:DF:71:F3:06:48:AB:E2:CA:6E:0F:3B:6D:AB:04:B7:01:C2
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019D2A6D95A309DEF7551997406D245CA528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0E69
Signing time: Thu 26 Mar 2026 13:55:17 +0000
Manifest this update: Thu 26 Mar 2026 13:55:17 +0000
Manifest next update: Fri 27 Mar 2026 13:55:17 +0000
Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
2: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=)
3: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
4: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
5: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=)
6: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: T4X1ajhwTsPzGloOA1pYGNcCubNjb/RwhhRq0UbjS2A=)
7: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
8: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
9: zFeGQFAvAw6aATxlal8JSV3VnqA.roa (hash: 097ilzQL9LW0Bc1l2A3VV39iVVLt++EbcMo7JQEiFFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:6d:95:a3:09:de:f7:55:19:97:40:6d:24:5c:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Mar 26 13:55:17 2026 GMT
Not After : Mar 27 13:55:17 2026 GMT
Subject: CN=532c21df71f30648abe2ca6e0f3b6dab04b701c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:41:04:de:1b:dc:50:cd:76:3d:f9:41:21:
78:5c:17:6f:92:2f:a1:8c:54:1b:44:e0:3a:de:65:
4a:aa:8b:ce:09:d9:a3:88:45:1a:9f:71:79:d7:65:
63:c4:3f:12:3d:f4:b3:22:d0:d1:7a:4a:01:3b:90:
d3:2d:34:f3:96:6e:dd:90:fc:9c:83:4e:6f:3b:54:
c5:f9:53:fc:05:d6:07:62:61:76:3f:06:ff:6b:9b:
ed:7b:5d:3d:89:48:62:c3:28:b8:67:82:91:66:8b:
c3:70:68:96:f3:29:7d:e5:57:3e:70:0f:26:39:e6:
22:af:55:c3:50:2a:2f:a6:f7:a2:13:fc:2b:11:6b:
18:2f:65:d9:57:27:af:f4:4d:2a:18:c1:a7:ee:7b:
b0:1f:17:27:06:cf:53:02:41:11:80:a8:5a:99:bd:
b6:0f:67:2a:41:01:12:1a:d2:7d:19:b9:48:51:64:
b8:ae:1a:30:87:78:57:88:3e:53:f8:a5:69:9a:7c:
a6:8f:d5:fc:ac:2c:60:b6:5d:17:09:50:d7:38:48:
91:04:32:88:af:45:94:98:53:1d:5e:b3:13:4c:80:
fa:5a:73:5c:f2:42:4b:90:98:f6:e7:05:ca:47:7d:
a8:4c:35:f8:52:48:60:4d:52:1b:e9:b4:68:2c:27:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:21:DF:71:F3:06:48:AB:E2:CA:6E:0F:3B:6D:AB:04:B7:01:C2
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:d2:10:40:7b:39:a9:82:e0:e4:ae:28:b6:b3:3f:24:92:
23:c3:aa:a8:c4:d7:33:c9:a2:3e:5d:f9:dd:80:3d:e4:0c:2c:
2c:8f:03:5d:79:98:a6:23:ac:3b:f1:b5:e1:96:2d:8c:fc:54:
63:42:4c:d3:ed:1f:f7:55:6a:0d:c1:14:10:4e:d7:09:35:fd:
55:6b:c0:77:48:4e:7b:fd:66:7f:79:6f:94:28:a4:7a:c5:ca:
6b:b7:b0:04:57:75:d3:32:85:3a:e5:a7:c0:97:fe:7a:21:6a:
af:41:23:f5:2c:82:fd:fd:3e:ca:7c:66:b0:1d:f4:db:2c:71:
e7:59:2a:69:bb:89:16:80:26:1f:97:2f:16:e2:2b:bd:7d:56:
36:ce:fb:54:30:8d:70:14:88:85:cd:fb:6b:f2:ca:aa:81:7c:
9b:d0:eb:bc:9a:b6:53:c9:34:71:20:df:3b:b5:df:9b:3a:f4:
c6:5a:62:ec:14:3a:eb:e3:20:96:e7:51:9b:08:c7:c2:e6:ba:
71:d9:a1:5b:7c:90:c2:37:04:e4:ad:63:93:96:eb:52:ea:d9:
4d:84:2e:82:67:ba:00:f1:0e:49:21:bd:ca:ee:f7:02:54:b3:
f6:8a:c7:a0:c5:b5:f1:9b:d7:2e:18:8c:4c:67:f9:96:cc:39:
ea:17:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:50 2026 by rpki-client