Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File: VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier: IrQyB7RSfuEEP7eTFh/WjqkM8pOhJG5shNjeYQxhPK0=
Subject key identifier: C4:D5:28:70:68:2A:7F:3A:2E:82:5D:E8:F4:BD:CB:7D:D6:9B:5C:6D
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial: 019D32D0DE446E857E82D11A75FE044A2C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number: 14FD
Signing time: Sat 28 Mar 2026 05:00:42 +0000
Manifest this update: Sat 28 Mar 2026 05:00:42 +0000
Manifest next update: Sun 29 Mar 2026 05:00:42 +0000
Files and hashes: 1: TzFMlyGi4zFmCDU2h2qG4O6pMds.roa (hash: TJpZbRVZ7iaxJCXPVUNPAifcE/xvT1lmZtmQUt0op4c=)
2: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: bglkKosCm/MwM6NfF1mVDSIyRBDpoHbu1x7ZE5iSbJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:de:44:6e:85:7e:82:d1:1a:75:fe:04:4a:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Validity
Not Before: Mar 28 05:00:42 2026 GMT
Not After : Mar 29 05:00:42 2026 GMT
Subject: CN=c4d52870682a7f3a2e825de8f4bdcb7dd69b5c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:88:f0:fd:b3:1e:14:e6:ca:ac:57:02:ff:be:
f1:b7:34:6b:8b:e6:ed:39:91:3c:11:1e:40:65:f5:
00:bc:a3:be:78:29:4b:f0:91:a2:72:ad:ad:3f:a0:
b9:9a:4d:33:ef:4a:2f:f7:63:f2:e8:d1:22:25:d9:
c3:9e:b1:f6:92:8c:8e:a4:cb:4e:18:b2:aa:bf:28:
b9:2b:f8:49:7d:0b:9e:d6:31:e9:39:de:ac:50:ca:
45:db:2d:52:f9:08:b7:88:bd:89:3f:e5:01:c5:86:
90:2b:52:26:dd:85:75:7e:aa:e3:3b:7a:af:98:d4:
d2:b2:98:ea:48:f6:77:aa:55:b1:72:e6:39:29:6c:
b3:0a:17:8e:ef:79:fd:f8:3f:88:8b:41:f3:84:58:
73:f1:2c:fc:7a:e8:88:ab:83:72:a7:9e:2a:5e:aa:
4e:b7:cc:c0:e9:81:c6:cc:12:6b:7f:0d:83:d7:e3:
5d:0b:4c:a0:33:3e:30:ed:37:81:81:c6:65:4a:41:
e4:be:84:5d:c8:17:66:b8:65:10:9d:2e:d6:1f:44:
34:b3:e9:8f:28:79:3c:db:a6:a9:50:59:f7:39:7e:
b5:c1:81:5c:19:8f:48:ed:73:14:d7:76:ca:72:11:
c7:15:97:8b:b1:8b:2f:ce:39:12:13:1b:c5:00:ab:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:28:70:68:2A:7F:3A:2E:82:5D:E8:F4:BD:CB:7D:D6:9B:5C:6D
X509v3 Authority Key Identifier:
keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fc:31:e2:14:96:8c:dc:ca:1a:56:17:0e:2b:60:78:68:b7:
68:61:5f:3c:6f:e2:95:49:9e:ab:53:ae:9e:3b:26:12:d4:43:
26:cf:51:54:87:3e:a8:7d:12:fa:23:1b:82:4e:22:93:ae:cc:
5b:88:2b:d5:1b:62:c5:15:da:9c:7b:78:01:cf:ec:7c:a5:3b:
2a:5d:2f:01:07:92:de:38:61:b2:84:5a:ee:81:40:c6:c3:5b:
a9:2f:d8:cc:fc:ce:e7:2d:85:9d:1c:18:be:6e:b5:70:7e:2c:
a0:8b:cd:28:f9:97:5f:f6:b1:6d:0e:61:63:55:19:63:a6:97:
f3:24:db:af:ff:4a:72:43:86:c8:24:33:a1:93:d1:f2:64:73:
32:46:5a:dc:86:ff:95:dd:7d:2b:bb:53:3e:01:32:fb:81:42:
19:4a:5c:c6:b4:db:83:b2:b3:2d:a7:f2:a8:6c:0d:2a:9c:23:
00:e2:3e:b4:7c:d8:81:bc:eb:34:28:81:26:01:bd:db:5d:8b:
de:3e:f5:da:30:e7:d9:d5:1e:0e:f8:d2:0f:af:77:e1:d7:f5:
ce:33:5d:71:45:d3:7d:49:9a:82:b5:2e:43:cb:ab:98:30:33:
64:b0:78:2b:77:dd:7c:e7:0d:25:30:b1:8c:7b:53:c6:3d:b5:
9c:c9:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:13 2026 by rpki-client