Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier: 8hH9BM5hUPnp7yl4/NZ062s8BpOSpXIQ6SzHc7thrBY=
Subject key identifier: 13:F0:89:4B:2F:2D:3A:3B:75:AC:25:56:65:C8:F7:7B:B7:E9:88:60
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 019D27DFA29DA196998F48ED541F77C324F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:00 +0000
Manifest this update: Thu 26 Mar 2026 02:01:00 +0000
Manifest next update: Fri 27 Mar 2026 02:01:00 +0000
Files and hashes: 1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: bWinFpJhmmxdIw161gPcyXf2B+F5X0nrXZHW8QyIH88=)
2: z0QAGClogihB3W-zAzL6xgls6ko.roa (hash: fuMklyfUot+dHjODiv8mp7OwICNiKJEa1iwTJOTMA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a2:9d:a1:96:99:8f:48:ed:54:1f:77:c3:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Mar 26 02:01:00 2026 GMT
Not After : Mar 27 02:01:00 2026 GMT
Subject: CN=13f0894b2f2d3a3b75ac255665c8f77bb7e98860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:7d:e7:2c:cb:62:2d:1f:5c:d0:52:10:17:
dc:2c:12:48:df:cf:8a:85:14:d2:6d:29:80:55:bc:
28:f9:ba:13:66:7d:dc:a2:84:26:65:97:0a:f6:73:
33:2d:bb:87:10:19:8e:e2:e4:ab:c9:42:29:9f:32:
18:44:f8:78:a4:04:41:e1:e6:15:dd:27:a0:bb:31:
2b:17:a1:e4:de:6d:97:2d:1b:69:4c:e8:0b:6e:00:
85:dd:80:8f:8b:0b:a9:1b:92:99:49:ad:52:51:d5:
76:d1:10:5b:28:11:da:c6:de:19:5a:60:8e:35:a3:
36:23:e6:cc:e3:5c:78:c6:5f:33:99:c8:38:92:7d:
76:c3:1b:a3:ec:ed:99:7b:df:70:cd:25:ca:54:91:
f2:8d:2b:1a:53:73:0b:2b:3c:de:9d:0a:db:2a:ef:
25:d2:98:2a:e0:cd:1d:61:a6:f4:5a:cf:79:4d:f7:
56:e9:c3:48:77:06:61:2d:53:2c:2b:8c:5f:27:de:
d2:cc:20:be:f3:f6:d4:2e:d0:9e:74:2e:d3:87:3d:
be:0f:8b:4f:93:5e:a3:e0:ca:0c:17:a1:f5:21:3f:
fe:74:b6:a4:28:2d:8d:b9:5e:e2:ef:1f:f5:01:3a:
df:ab:06:25:eb:9a:be:7e:44:84:37:d5:e4:82:ae:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:89:4B:2F:2D:3A:3B:75:AC:25:56:65:C8:F7:7B:B7:E9:88:60
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4e:ef:e2:ae:6d:99:28:74:7b:fd:06:2b:42:c4:ee:84:bc:
64:fe:7e:1e:ce:ac:4e:97:d2:ed:9d:8d:c1:84:cd:ca:6f:82:
8d:f7:af:de:72:0f:4a:13:9d:6a:85:d3:a4:32:89:3e:fb:08:
e8:40:f3:2d:db:ab:bd:6f:6b:09:44:3f:61:c2:41:0d:82:98:
d0:64:0a:c7:2b:19:55:84:6b:29:4c:7d:4a:dc:2f:1d:ad:61:
13:c4:a6:02:c9:8f:4e:0e:f0:87:5f:03:9c:c1:05:d8:ae:33:
59:3c:ec:0b:67:f1:6f:56:37:ec:b6:3e:cc:00:75:f4:cf:62:
6a:2c:40:97:63:0e:a7:ec:36:37:a1:9e:41:c9:68:62:66:9f:
48:c3:63:28:03:e6:7e:9d:0d:b6:61:3d:77:00:2e:77:87:a6:
ab:80:ae:43:6d:1a:4d:6f:06:23:4d:6c:07:0d:70:f4:9a:11:
2d:2c:99:ec:cc:7b:38:94:55:da:a2:c0:97:6f:b2:8e:7f:4a:
a2:ad:e9:8b:9a:8c:02:1b:57:b6:95:78:41:b8:49:60:3f:de:
12:5a:c0:37:10:28:fe:d5:14:d3:15:9e:00:0e:12:a2:44:b2:
5b:df:31:57:d6:a4:fc:85:62:c0:fb:60:6c:5d:39:e4:68:23:
40:db:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:54 2026 by rpki-client