Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: TZEz1P979P5cJOyLp6a1+Rr1s9c6gT2uKUMAds/z+8c=
Subject key identifier: A6:E5:A8:C6:B7:12:10:11:B8:BE:A2:A5:8A:F7:3F:8B:70:72:98:2F
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019D26CCE72346DCFA11348611D33A98F2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0BAF
Signing time: Wed 25 Mar 2026 21:00:55 +0000
Manifest this update: Wed 25 Mar 2026 21:00:55 +0000
Manifest next update: Thu 26 Mar 2026 21:00:55 +0000
Files and hashes: 1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: bAZaxq3Cljid0knanObsRVYOageQJzY6X1P+XqAWCPQ=)
3: kqmzm016eJM-jijUIFSE8gE6p00.roa (hash: gAMMlg6BzmaFhWE/fM7vHF/m24ObBw3vzLwmqGTTkPI=)
4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e7:23:46:dc:fa:11:34:86:11:d3:3a:98:f2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Mar 25 21:00:55 2026 GMT
Not After : Mar 26 21:00:55 2026 GMT
Subject: CN=a6e5a8c6b7121011b8bea2a58af73f8b7072982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:f3:0a:85:a2:ff:c0:62:10:2c:4d:af:10:
53:d9:ee:40:dc:d1:3b:9c:9e:70:9e:65:43:b2:2d:
c9:c4:cc:bf:22:05:92:9d:d6:ba:e6:94:98:0c:b7:
db:9a:f0:ff:c6:5c:5d:75:a4:bf:27:bf:7c:47:18:
56:7c:c0:62:11:cb:e2:ac:86:e4:2b:aa:62:3a:28:
c5:63:7f:ed:6e:92:64:b7:ac:96:16:82:bb:04:0c:
f9:16:72:2d:ed:cb:9a:86:83:a7:0c:ce:01:a3:9b:
25:7b:ec:90:7e:e9:ae:d6:86:f0:05:f2:2b:29:94:
6a:3e:18:c0:19:8a:52:86:43:f2:37:88:6e:f6:87:
80:d0:27:bd:b5:07:8b:f5:ff:6c:ff:d1:64:f7:63:
40:9e:cf:f3:36:31:cc:0e:07:2d:70:4b:99:78:60:
a6:60:64:c9:47:b7:86:7b:6e:71:2e:e0:82:61:9d:
3e:75:1d:12:1c:97:76:5b:e3:74:94:4d:69:e5:6f:
6c:87:9e:24:9c:e9:cb:61:52:02:15:ae:05:ac:13:
1c:31:05:8a:fe:90:82:79:93:c0:20:4c:42:ef:5d:
6a:dd:97:95:49:e9:a9:9c:53:c9:59:3f:fa:c3:f2:
61:8e:07:78:3e:50:6f:86:1c:fe:fb:be:8c:7f:e6:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E5:A8:C6:B7:12:10:11:B8:BE:A2:A5:8A:F7:3F:8B:70:72:98:2F
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c9:07:d4:1b:17:6d:d5:7e:5f:19:bc:73:6f:e3:f9:4e:79:
1c:50:64:7a:10:1a:fc:7d:5c:11:be:fc:0f:35:46:c7:cb:5d:
c4:70:45:7b:73:18:18:97:34:5f:1f:14:66:d3:19:4b:11:f3:
03:ff:49:51:d6:3b:ae:0d:b0:f5:f9:f0:81:a1:44:90:1e:80:
cc:a6:a6:98:07:19:d4:bf:79:0e:f2:ce:b8:d3:85:11:0c:e0:
f1:ec:ff:72:4b:7a:e9:bc:dc:22:05:7b:38:de:ff:1d:df:5a:
d5:7a:8b:44:c2:1a:66:57:12:bc:d1:9c:01:12:c5:a1:d6:3e:
49:b4:5e:f3:77:46:eb:5b:a1:25:1d:e1:2b:47:f4:8c:ab:c4:
5c:b1:5b:71:0b:16:a7:00:b3:4c:cf:e6:f1:67:12:76:b4:d8:
2f:56:e1:f1:00:99:1b:36:94:8e:05:36:b8:4c:bb:09:25:cb:
d1:2e:85:9f:18:f9:eb:89:88:63:74:69:7f:1d:d2:c5:b1:01:
a5:0f:cd:96:da:57:e4:04:a0:2f:4a:b8:97:27:fd:9f:f7:05:
eb:a4:8c:a0:6f:96:a5:f4:3d:65:f4:a9:3a:09:bd:2b:53:8b:
68:9e:46:df:55:dc:94:26:65:9a:55:76:22:21:a4:69:ba:2a:
7b:e4:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:42 2026 by rpki-client