Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: P7f3NWDHPgczT3FJslHgq72H3PCQMS8/28pcnvHzvsE=
Subject key identifier: 14:20:4E:4E:30:62:EC:67:14:BA:E9:C6:D0:A7:28:E0:44:29:BB:26
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 019D2BF343D36D22945400D9AFE03387E4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 1311
Signing time: Thu 26 Mar 2026 21:00:55 +0000
Manifest this update: Thu 26 Mar 2026 21:00:55 +0000
Manifest next update: Fri 27 Mar 2026 21:00:55 +0000
Files and hashes: 1: dlqROMdfCCOUh5UHb5fE0VDhtw4.roa (hash: HsyhNJLABKhY0BJRKl4WOTqYOZ/p/2IS1Tc+avRiuXo=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: 4FVDEycdj9NPulJwiPjtesPeFnHOpGUaA1D5JTeNkPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:43:d3:6d:22:94:54:00:d9:af:e0:33:87:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Mar 26 21:00:55 2026 GMT
Not After : Mar 27 21:00:55 2026 GMT
Subject: CN=14204e4e3062ec6714bae9c6d0a728e04429bb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:79:07:69:65:a0:d7:97:35:d9:b6:82:ed:
0e:55:d8:e6:3e:b5:b5:04:c4:f5:45:b7:7f:24:30:
58:fe:33:a5:8d:7c:8c:75:33:11:8e:21:26:b5:eb:
85:19:45:5f:62:88:48:7c:1e:79:8d:82:dd:19:eb:
61:10:e6:12:7f:e4:ee:1f:bd:ce:9a:91:ff:d2:85:
17:16:73:92:ef:18:de:29:b2:4a:a2:50:11:2c:87:
6e:76:50:3d:41:0c:8d:b3:a2:2c:46:63:db:2f:d2:
5d:68:2a:f3:29:28:ff:7e:1e:2f:c1:db:7d:a9:9f:
b2:75:b8:b9:e7:f0:89:31:f1:96:f2:13:7f:34:03:
06:aa:cc:0d:ed:7d:84:4d:aa:87:28:bf:c3:0b:b1:
e0:4f:e1:e5:b0:39:0d:59:d1:ba:0f:14:e2:68:c5:
fb:12:76:d1:a5:4a:6c:12:a3:ba:e8:db:f6:09:21:
45:61:4e:de:be:b7:23:50:90:b4:f2:3b:cb:c6:41:
6b:41:51:77:80:66:60:b6:79:10:f0:93:59:33:0c:
62:ff:7c:05:19:f8:34:e3:33:39:c0:47:be:e9:e1:
6d:43:fa:fe:39:2f:7f:df:c2:36:e5:85:c8:91:51:
84:31:5c:68:eb:5c:17:08:88:a8:74:6b:7d:24:51:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:4E:4E:30:62:EC:67:14:BA:E9:C6:D0:A7:28:E0:44:29:BB:26
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:0c:a1:42:a2:f9:a4:ab:f3:f3:5e:3e:98:c6:da:eb:42:
06:ea:f7:1f:6f:14:24:f9:6a:58:7c:d2:24:82:37:e9:ff:5d:
80:ea:3d:16:7e:cc:18:4b:2b:cf:7c:d0:b7:f7:c9:3d:4e:82:
ff:79:2b:78:e8:ec:9c:e6:f0:2b:a7:38:a5:d9:e1:7f:2e:5d:
7a:7a:42:f2:7c:25:10:21:cf:bb:11:4c:19:b9:59:22:74:32:
94:a5:00:0f:dd:8e:33:bb:a3:13:9d:66:59:eb:12:29:a8:c8:
1d:eb:58:ab:20:5d:8b:6c:77:76:0d:0c:7a:47:bf:a0:6c:6a:
0f:00:7b:6f:d5:1f:c8:27:9e:e5:7d:cf:ab:5e:9e:58:26:84:
9d:50:59:f7:e5:9c:9f:93:46:b5:12:50:93:42:92:f8:f6:12:
db:f4:ca:b7:40:fc:94:d5:14:68:50:99:1c:ed:ac:d0:09:78:
02:00:39:77:c2:c0:18:89:0d:27:31:f7:37:ef:29:9b:cb:05:
97:d2:11:7a:78:be:53:1e:4c:f7:7d:ba:47:71:25:6a:c3:71:
27:ea:c3:53:fc:0d:c2:3e:67:28:fa:81:e7:61:eb:a9:38:13:
c0:f6:5f:0c:94:f5:5a:5a:7f:6e:90:89:b5:1e:ce:83:91:3f:
ec:92:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:22 2026 by rpki-client