Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier: rqyFBl7Q9vtXX/E1HurPXlKtGsAOc/i9mpacZFm1Ti0=
Subject key identifier: E9:31:06:24:27:58:59:56:D1:03:9E:95:4C:DE:FF:5F:A3:EE:0A:87
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 019D273A84C4679D12270CE508E9E206A5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number: 0BB9
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: o9tlHllKosDG6b5GedMJwpOilet44Xb3O5MopPmIGOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:84:c4:67:9d:12:27:0c:e5:08:e9:e2:06:a5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=e931062427585956d1039e954cdeff5fa3ee0a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:56:1a:f6:12:52:f9:4a:42:e8:b6:88:90:
ea:df:b2:59:13:8b:df:dc:fd:2f:c0:90:e8:5e:27:
cb:52:75:7d:07:48:3b:dc:33:aa:95:f0:52:9f:f6:
24:a5:2b:65:1a:f7:73:07:f8:ef:3b:cd:25:2e:e2:
5e:ca:ab:da:7a:13:87:68:39:ec:f8:ad:10:68:70:
01:ed:82:67:77:a6:96:97:04:8f:57:83:15:d3:f9:
d1:f5:30:36:fd:e3:df:26:2e:b7:34:e4:26:2f:2e:
20:36:1b:10:6a:59:e0:ff:6d:ad:90:1e:1f:fc:80:
ba:bc:7a:b5:50:7d:43:d0:5e:62:03:77:2e:f7:49:
5f:00:e2:8e:06:ea:e5:24:0d:9f:e3:a2:c6:c7:fb:
d3:83:e1:7b:7e:1a:94:71:84:9b:be:08:c7:54:71:
15:40:91:0f:e1:92:07:c5:87:68:d5:9f:10:bf:7f:
52:78:d7:af:c8:85:55:3e:1b:1b:53:bf:47:ba:19:
9e:60:cc:24:68:d9:64:fd:02:91:a5:74:c8:53:57:
83:ba:64:63:d7:b0:7c:33:a7:ea:5e:38:80:25:57:
db:ee:c5:fe:9b:d8:0a:b1:87:7e:96:bc:19:73:5b:
4f:43:2f:d6:6c:bb:13:18:07:f6:f3:43:d9:1a:fe:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:06:24:27:58:59:56:D1:03:9E:95:4C:DE:FF:5F:A3:EE:0A:87
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:38:15:d1:a0:6d:04:3b:3e:b4:62:bb:15:3e:16:bc:58:
86:e5:46:8f:52:36:38:c2:42:50:02:2f:de:43:48:7b:3e:11:
ac:55:1c:4e:9a:c6:99:cd:0f:f5:24:d3:56:fa:27:6f:1a:22:
19:f9:7c:d3:9e:f2:9a:dd:b2:3f:eb:a7:10:91:9f:6f:68:f9:
e7:00:e5:4c:de:ff:69:b5:08:b3:3f:38:03:7a:50:23:fc:a3:
d3:f7:3b:80:0d:1b:4e:91:91:31:52:f8:ff:e7:21:9c:2f:63:
d0:3d:32:7b:06:e3:e4:d0:11:2b:cb:cf:49:7b:3c:8d:e7:90:
8a:85:d4:65:7f:00:5f:82:f3:bc:a7:06:60:d9:b3:71:a6:35:
5c:3a:9c:75:38:4b:f6:b3:e6:ca:66:6e:89:88:76:b8:f2:dd:
aa:c7:45:a2:47:a3:7d:ce:6d:df:8c:4b:02:61:0f:4a:8d:1e:
37:ae:21:90:1a:87:15:8c:6f:7d:a4:19:a5:34:49:60:fa:20:
d3:c1:1c:36:52:de:23:46:68:7f:69:ac:44:94:39:33:8d:a0:
67:e6:21:ae:9f:bf:55:6d:08:39:0a:73:9e:68:b0:21:02:5a:
d1:c6:ba:78:a1:2b:d5:39:fb:29:7d:90:bd:5d:59:bb:cc:df:
3f:17:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:12 2026 by rpki-client