Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: 7Pc+adoHjGTsw1nw8I5zDn31KFwOpjgBi9Cb8G4RnlI=
Subject key identifier: 6F:14:93:59:83:25:F6:F5:8B:D6:B4:A4:E5:E3:AF:FA:7A:8D:E6:75
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019D25BAA599F15E6DD7FC87A43CCE9C9D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:01:22 +0000
Manifest this update: Wed 25 Mar 2026 16:01:22 +0000
Manifest next update: Thu 26 Mar 2026 16:01:22 +0000
Files and hashes: 1: hBfOWNz8aB-uKsUJCSf2XACnmmc.roa (hash: 5Y5YLQETtQumGJBT9gG5Cwrp98Yqiy17fOUfKzajf7c=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: xN8O+0KYgd8kiq15VinTMSc5wPUpmV/8zE0KEDfVdaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a5:99:f1:5e:6d:d7:fc:87:a4:3c:ce:9c:9d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Mar 25 16:01:22 2026 GMT
Not After : Mar 26 16:01:22 2026 GMT
Subject: CN=6f1493598325f6f58bd6b4a4e5e3affa7a8de675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:c5:0e:41:0a:1f:39:05:4c:7d:47:9a:15:
83:c2:7b:50:f6:a0:a4:7e:24:23:5c:5c:d6:72:33:
95:93:2c:05:40:c8:73:06:ae:c1:4d:06:a3:c1:85:
e3:82:09:e7:07:9e:05:89:d9:19:3c:06:da:af:79:
49:f0:77:f7:02:7b:2f:88:c0:a1:d7:13:92:27:9f:
cd:6e:3d:c3:a3:ed:b6:19:db:1a:e5:a3:dc:cc:57:
de:e2:c3:51:62:dd:b4:23:c0:c5:22:64:7d:6e:28:
90:cc:97:8c:be:6c:e9:34:be:10:94:7d:fb:95:49:
a0:c9:00:ac:d0:9d:53:b4:e6:ce:67:86:fa:75:58:
ec:43:15:6f:df:62:21:a2:b3:ff:6d:c3:39:af:ff:
43:e7:38:c1:2f:7e:5b:1c:7b:ff:9a:38:31:89:08:
8c:bb:a5:25:c9:39:6d:20:a3:95:87:23:8d:4c:3e:
b6:1e:66:ea:5a:6d:a9:62:bd:91:6e:5f:79:d5:77:
98:30:e4:b0:03:19:d6:5b:98:89:70:57:80:db:c4:
ea:2f:70:98:92:94:9d:13:ce:a6:94:94:55:75:ca:
a4:68:c4:10:fb:3c:92:2b:7b:00:36:29:f7:ec:37:
f0:5b:d7:f3:03:09:71:81:3c:a7:dc:a5:9c:61:81:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:14:93:59:83:25:F6:F5:8B:D6:B4:A4:E5:E3:AF:FA:7A:8D:E6:75
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:49:44:b1:bc:96:37:7a:82:1c:91:fe:d2:9f:9e:00:2f:c7:
e4:1a:d9:82:7b:5e:ae:e2:1c:1c:98:9f:d0:06:78:4d:98:06:
90:c5:f1:ff:d7:4a:e8:0b:5b:37:4e:2c:b1:34:eb:3a:e1:07:
6e:d6:8c:33:cb:62:70:73:4c:9f:27:db:49:21:26:4f:2a:c5:
68:1b:00:40:4c:2b:f7:a9:6a:ad:63:77:70:80:91:ed:bb:ed:
04:97:56:66:07:9d:d9:98:49:91:13:0c:64:05:8c:a3:4a:04:
64:4b:35:7a:e7:f8:99:7e:ad:4b:60:19:56:d1:d2:c0:9d:5d:
90:f0:d8:f1:5b:27:7c:8e:f5:a2:fb:ab:b0:88:52:63:24:ba:
e4:ab:4a:53:fa:6d:a9:06:9b:91:dc:aa:96:4c:70:45:ea:c7:
8f:5d:51:53:8d:96:50:9f:e9:3b:a5:13:29:f5:e1:fe:f9:2e:
28:50:05:04:94:ec:b8:52:77:e5:3d:7b:3f:74:cb:5e:ea:8d:
1f:0e:97:bb:2d:b5:de:78:05:58:86:8f:b5:1a:a5:52:2f:84:
21:d1:aa:8b:dc:66:3e:02:23:0f:28:84:e1:21:d5:3c:4a:ba:
0c:58:64:18:03:e9:0c:58:37:a9:9a:81:48:76:29:10:53:ed:
98:49:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:45 2026 by rpki-client