Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: p7adAsU1TeBb4uPjs6DTlTKae8VezgnMwJGlj2myBTU=
Subject key identifier: 08:13:19:9F:F1:F9:A5:8F:96:12:21:A6:F7:C3:18:35:76:33:66:AD
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 019D28167342958B7E232C0FD272666A47D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 0754
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: Ivg6snMydNXdySu3QX12mNo28u8.roa (hash: j9c4g1fOAHiMBPWaG5AigoutzfZxb4EuhkBYBF49VwY=)
2: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (hash: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: oCAWxHzOFcO7vn8pargtGjREs9aL9dLESMg4OnD2s70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:73:42:95:8b:7e:23:2c:0f:d2:72:66:6a:47:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=0813199ff1f9a58f961221a6f7c31835763366ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:a3:a3:9c:82:e1:a9:09:8b:03:ac:69:5a:
b8:4e:8e:b6:ce:d9:b7:04:97:53:e9:6e:9c:68:28:
de:a5:e5:81:de:8b:ac:ab:2c:b3:80:39:57:2f:03:
31:a1:ed:2a:5b:cd:32:2c:2b:25:33:55:64:95:fe:
65:f0:fe:5a:e1:52:f0:3f:76:47:07:4e:e5:e0:13:
43:c8:78:3f:db:0f:b9:45:07:5f:71:88:d0:e8:69:
ad:cf:74:1a:76:b5:44:11:a2:4b:a4:95:f9:60:eb:
4a:ed:d1:00:b8:c6:63:1d:d1:4b:57:f1:a2:71:96:
ab:98:31:66:f9:f4:33:ae:d1:3c:cf:9d:81:f1:04:
d5:db:ef:ad:e9:d9:73:b3:c1:ce:79:69:29:6d:47:
a9:da:a8:4f:07:e9:90:89:05:1b:51:97:a5:ca:aa:
25:a7:e1:eb:6e:fe:c8:f0:05:1f:4a:31:40:63:79:
a5:2a:d1:0f:66:44:19:42:87:97:aa:3b:e1:39:f5:
18:4e:f5:14:1a:47:dc:1e:df:e8:c8:49:26:57:38:
9d:e5:d7:12:d6:38:37:76:65:3f:e3:80:44:21:4c:
e2:a1:75:0b:d3:95:8e:b5:ee:c0:d3:7b:30:e6:a5:
35:d3:aa:5c:cb:03:27:64:85:2d:db:42:19:e5:a8:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:19:9F:F1:F9:A5:8F:96:12:21:A6:F7:C3:18:35:76:33:66:AD
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ab:8f:c4:31:eb:d7:19:a3:ee:d4:9c:ad:72:c3:31:6b:22:
76:22:84:4b:64:0f:22:8c:6e:4e:86:9f:eb:1e:0e:4a:ac:5a:
8b:5b:71:67:a5:86:e2:5b:04:24:d6:f4:11:bd:2c:3f:ec:c6:
de:c0:e8:07:bf:7d:76:c2:73:3a:c6:ef:d8:f9:b8:67:4c:e7:
b6:de:ba:ad:6b:10:ae:8d:72:5a:df:03:be:d2:d0:84:5b:5d:
75:6f:02:95:58:db:0e:10:32:54:de:85:fb:28:95:c6:81:d5:
5a:68:9e:03:de:c6:6b:15:c6:b5:08:e0:6d:a6:0b:c5:02:15:
0c:5c:57:2b:f5:83:2b:99:1a:68:92:bc:df:88:d5:20:5d:87:
2f:99:5f:05:17:05:5a:3d:7c:d3:ee:3e:47:c2:59:d8:43:c3:
7f:33:4e:27:ef:16:9c:3e:c8:03:f6:a1:41:05:fb:06:ca:5e:
1e:18:2c:7f:c5:1e:4f:92:db:fa:90:f6:b1:31:90:0e:77:2b:
cd:99:19:ce:c4:c6:24:b4:56:9b:3f:70:e6:61:52:ee:9a:09:
31:ff:34:c4:5e:47:1e:60:dd:48:9b:40:d7:5d:f1:06:7f:69:
51:2c:e5:0f:d0:ef:9b:37:8e:4f:67:16:0a:fb:93:67:60:73:
c4:c6:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:01 2026 by rpki-client