Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: Hg1U2cosOD+yxtKN9l3AgiUTVB/RCs7HpDLatXFCfpk=
Subject key identifier: E4:1F:AD:DC:26:91:00:CB:FB:DD:7A:B6:D0:91:63:8A:41:B3:01:72
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 019D2816CADD63090F80A4D026304D2C7213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 0AB0
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: p9RxkxEDg3zhOEBmGSkuGg-Qp1g.roa (hash: Pzg3LR/Kx5u+U4xpCocEsCBgxEMmX7bZWZgvVSP3EX8=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: w0UOYyKzjRX2HtI53IzpJTXYIfdh4kAFRa24epYlMJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ca:dd:63:09:0f:80:a4:d0:26:30:4d:2c:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=e41faddc269100cbfbdd7ab6d091638a41b30172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:de:5b:25:60:a0:c5:4b:f2:e4:e0:27:1a:
98:a5:42:11:de:29:09:42:a8:f1:24:0e:14:b9:5d:
1f:3d:c3:e0:c4:51:5d:b4:d5:7d:69:2f:c0:15:2b:
73:65:ff:ae:23:e7:92:44:d7:44:49:c7:6c:00:31:
3e:91:b7:6f:24:00:e7:38:13:7b:6e:a3:11:9d:e4:
5d:02:b1:d7:65:b4:cb:f0:b0:01:c8:7b:22:e0:5d:
01:a5:ef:48:bc:4d:6e:3c:69:6d:4e:cf:e1:42:7c:
84:94:92:47:4a:80:a1:83:b5:e8:88:c5:e1:85:32:
52:92:25:b7:63:ca:d6:5b:2f:55:27:64:a1:0f:f3:
fa:69:e2:73:c8:45:b4:a5:44:64:31:77:be:47:12:
ec:ce:db:db:9d:08:33:4c:ca:f0:19:e7:cd:cf:de:
09:d3:ce:1d:ab:cc:91:9e:69:25:75:d2:d4:e4:f3:
2c:40:66:d9:f0:5d:84:c8:1e:f2:e8:d5:b8:74:06:
c1:08:93:92:01:eb:6c:27:83:4a:54:6e:ef:ca:c5:
95:a8:7d:97:23:9e:30:f4:e7:61:50:d3:b1:a9:a0:
e7:84:ed:71:7d:9f:a1:d3:17:1c:2a:d0:c6:11:f4:
02:d7:28:33:c4:ed:dd:ef:cc:e4:a4:27:9a:48:25:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:AD:DC:26:91:00:CB:FB:DD:7A:B6:D0:91:63:8A:41:B3:01:72
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1e:1d:bb:5a:7e:67:34:59:24:54:1d:6d:5c:7d:2d:1d:01:
7d:c9:3f:d4:21:80:6a:8b:b6:62:bd:9c:18:a7:2d:be:a4:f3:
05:79:22:32:e3:2c:ce:3b:6e:5f:5a:48:da:a1:e7:35:d9:25:
dc:60:cd:24:e3:70:c2:7a:88:31:dd:82:f5:5e:f8:34:b8:84:
b7:25:fe:8f:c9:e9:4b:36:9e:a2:24:ab:fa:f7:dd:a8:ad:4a:
c6:20:07:72:71:c4:98:d7:35:28:d6:51:fb:ba:41:26:49:e9:
1f:a2:02:b6:4b:e2:c8:96:c1:cc:f1:18:eb:2a:9d:a2:1b:87:
1a:bf:1f:a9:2c:7a:ce:cb:22:04:f0:3d:f7:04:0d:37:5d:eb:
1e:d2:90:88:b6:7b:05:ce:f5:82:f8:40:25:f0:9f:da:b7:60:
9e:53:5a:ef:72:0c:7d:dc:1c:02:90:30:4d:6c:b2:79:66:3f:
2c:60:a8:eb:31:f9:6e:74:c3:0a:9d:8d:97:ea:0f:a9:4a:d5:
c2:5e:f0:34:11:2f:bb:2c:7c:e9:bd:6d:28:3e:2a:92:2a:fa:
24:15:d5:ac:8d:42:6a:e1:5b:1b:2a:c2:60:dc:5c:f2:82:11:
fd:4a:81:6b:48:9b:9e:63:3a:f6:d4:d5:8f:81:8f:6f:2a:23:
69:f2:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:07 2026 by rpki-client