Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: muGxgXxnEmMYklA9EqE4vSERZjc9hX5uzxoOc6/xdjw=
Subject key identifier: 7A:E2:B5:E1:4C:07:8B:C0:C7:8B:E5:91:02:92:B4:B6:F2:E2:7B:34
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 019D26CD97F9AD29F2AC8BEF297440ADC2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 138E
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: qobIcfeU6nrdlOVqSH5eoEXWNc4.roa (hash: Ajh39YpvJBLhmSQ2jvIh5vojnzHR5G4xIOrDmEyjq6g=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: Xj0BAtSLofvE7VBMJs7c2r7s7kB0Xa3QyqP1Scv9iVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:97:f9:ad:29:f2:ac:8b:ef:29:74:40:ad:c2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=7ae2b5e14c078bc0c78be5910292b4b6f2e27b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:83:91:02:07:f6:79:97:74:9c:88:c5:c8:
2e:41:7a:f2:bb:37:ee:81:61:ac:cd:c5:e1:e9:16:
5a:a0:d4:39:0e:c4:4d:11:db:d9:7e:30:21:8a:af:
7f:1d:1e:df:b1:ff:7e:fe:af:0e:39:4d:0d:05:e9:
83:a5:23:79:5d:70:86:01:90:9b:3c:6c:4c:4c:36:
82:e4:19:7c:d6:dc:50:6f:7e:03:8e:54:5e:d4:1a:
71:53:79:62:70:9c:a9:22:69:33:49:d9:10:81:9c:
cd:6d:07:94:ae:71:77:88:59:80:1a:95:d4:84:8d:
ab:6c:06:69:fb:2c:87:22:c9:dd:56:1c:b3:d6:51:
60:ba:0d:ff:ac:fa:07:1b:53:f5:21:c1:17:45:26:
76:6a:fd:98:14:f0:95:62:3b:c6:6a:9c:78:13:fd:
7c:80:8a:b9:24:3c:ca:b9:b4:6a:af:80:bc:4d:e1:
b4:33:0a:09:34:0f:80:86:3c:8f:a3:b8:9f:ef:d8:
ff:92:72:b2:2d:ba:aa:ab:d8:28:59:40:59:88:f9:
bf:bd:9f:12:de:2f:5f:5c:9a:38:9a:86:94:c9:3c:
d3:24:27:1d:60:3b:4d:de:60:d1:87:8d:ab:92:96:
58:e3:14:b0:dc:04:01:c8:0a:4c:73:9c:93:27:9a:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:B5:E1:4C:07:8B:C0:C7:8B:E5:91:02:92:B4:B6:F2:E2:7B:34
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:85:e5:24:38:4f:86:bf:b6:27:93:8c:82:d1:18:3a:45:
9d:98:7c:eb:ab:66:16:70:d3:d5:ea:35:30:59:73:b7:9c:5b:
fe:dd:d8:d9:cc:71:cd:7b:6c:ec:cc:08:4b:3c:be:6e:f8:4c:
c7:c8:81:ba:4a:96:3d:1b:30:19:94:0c:6f:09:88:9e:88:60:
31:b8:d3:83:9e:2e:6d:3a:ce:d2:eb:05:02:8d:a0:c4:ab:d1:
25:d0:d4:73:6b:3c:97:5a:36:d0:09:09:62:d6:e3:89:96:d5:
44:66:23:92:e2:ee:f0:9e:a7:48:a5:dd:75:fd:4f:9e:8d:50:
ef:f5:7e:56:27:0a:02:5a:73:d6:d0:1a:91:1a:a4:d7:49:f7:
17:47:aa:65:cc:8f:c5:cb:88:35:b5:04:8a:65:84:e7:34:de:
be:01:1a:80:7b:dd:45:8b:68:9a:4d:dd:48:19:5f:03:e1:e3:
d7:6e:9a:da:ef:a7:64:be:3d:f5:d4:f5:9d:39:4f:83:57:a9:
c3:f5:be:bf:49:f1:f2:f8:2e:e1:34:f1:5b:28:20:d9:5c:c6:
7b:63:df:4a:c5:ce:d5:de:04:29:55:24:9a:75:54:de:e4:ae:
1e:86:d7:f1:ae:74:39:37:ba:a3:89:fe:ef:99:47:16:18:38:
f7:69:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:25 2026 by rpki-client