Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: oDMR0rwH8/hFQ8kA+0ukWR0P3LjG6R54FBXJ2dRDm5E=
Subject key identifier: 1C:98:43:DF:ED:F9:C9:AE:1F:1E:AA:20:1B:8C:31:BB:D1:F8:14:BC
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 019D28846E72BE4F0D31B5B6ADD59A66B0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 15B2
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: EbkxoK1QXwqI38zvOWRCOw9jxso.roa (hash: pmUSfoLfwZaf8O7+LH3+yh3+ipYKHNuavjj2SJ+pnpk=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: zQ9TlZH16+p/7wZjaMq+rEEEQOxY9/WmXwWTw+nVa4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6e:72:be:4f:0d:31:b5:b6:ad:d5:9a:66:b0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=1c9843dfedf9c9ae1f1eaa201b8c31bbd1f814bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7d:09:e9:b8:41:80:69:b5:f9:09:fb:f5:4c:
08:d9:35:9e:c1:0b:5a:3c:14:67:9e:16:11:30:9e:
1f:e1:86:71:c4:24:89:7a:86:77:c1:dd:04:54:5b:
1d:bf:90:50:c2:e8:4f:1c:64:c4:31:9b:64:b7:5a:
7a:02:7a:ef:65:7f:6f:28:9d:8b:18:4e:2e:9f:c2:
9f:ed:9f:52:ab:6f:ba:fb:e7:45:c9:1b:63:75:56:
7e:fd:d4:33:b5:c1:68:7c:4f:99:48:70:e6:c8:fb:
2d:da:4e:04:e6:2d:08:b7:14:df:20:42:33:18:b1:
be:ab:4e:1f:42:d0:25:f6:b4:36:d9:64:0c:bf:ad:
dc:ce:2e:13:8e:ee:7a:a0:79:db:66:5b:3f:85:5e:
1b:dd:26:58:5f:88:f2:0a:85:99:df:a4:38:b9:62:
91:c9:8d:9f:4e:b8:9b:96:f1:fb:a5:7c:08:16:74:
1d:f8:c9:3a:9e:ec:fd:23:19:66:57:8e:b4:6c:5c:
cf:69:00:f1:59:d2:84:0b:61:0a:77:38:67:75:2b:
39:a9:c7:7c:e5:d8:b4:8b:61:0a:9a:16:bf:81:92:
4b:56:93:ea:1c:52:b4:19:33:de:56:19:19:0b:80:
fa:65:bd:c8:ef:0d:73:5e:6c:23:d3:ad:70:69:b5:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:43:DF:ED:F9:C9:AE:1F:1E:AA:20:1B:8C:31:BB:D1:F8:14:BC
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:91:30:c1:74:00:b1:97:09:35:84:9a:ea:c3:db:79:2b:35:
2f:01:27:9e:1c:3b:c3:3d:2a:56:84:95:46:6e:c6:be:49:ec:
dc:d8:a6:81:01:09:37:b6:80:09:78:b8:38:74:84:6a:0f:84:
b2:19:a4:0e:36:da:5f:bf:52:c4:66:3e:26:73:47:19:92:e0:
9f:9c:9c:6f:3d:ca:51:c7:e2:7c:77:10:6d:04:98:7e:cb:69:
ca:3d:cc:5b:57:7b:4d:72:f1:83:10:ba:e6:af:45:51:c0:68:
43:fd:d8:7b:f1:64:1f:74:be:41:b2:5a:24:6f:4b:dd:bc:18:
c1:37:f4:b9:63:a0:00:21:18:7c:e7:ac:39:6d:c9:28:3d:98:
18:18:d1:f4:1a:4f:3c:65:d6:84:60:ea:a0:d8:06:6d:72:84:
b2:e3:bc:d0:7b:ff:28:29:48:21:54:f5:6a:38:86:1b:47:ac:
66:3b:ea:d0:cf:f7:18:2f:87:54:ff:ed:21:40:b4:77:d8:9e:
20:2f:e4:e8:6e:b3:aa:84:74:47:1a:94:f0:73:b8:81:98:27:
69:2f:76:33:7c:ee:01:1b:a1:d5:f1:bf:72:02:95:c8:4d:6c:
4b:30:b3:78:7d:67:94:17:36:38:76:9d:52:8c:87:cb:9a:9d:
5d:cc:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:53 2026 by rpki-client