Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
File: vrs3Cx2yDf2QiVQkesseCgUkCsE.mft (raw, json)
Hash identifier: lgArqRtrdwEEZcRTOCF7aIZ2jQuyTNdyclNBcY528oE=
Subject key identifier: BF:20:38:F2:41:60:9B:B9:B1:78:55:8A:D8:DE:F3:BB:97:5B:42:8E
Authority key identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1
Certificate issuer: /CN=bebb370b1db20dfd908954247acb1e0a05240ac1
Certificate serial: 019CB024402B925A39301C10417B0542DCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
Manifest number: 012A
Signing time: Mon 02 Mar 2026 20:01:31 +0000
Manifest this update: Mon 02 Mar 2026 20:01:31 +0000
Manifest next update: Tue 03 Mar 2026 20:01:31 +0000
Files and hashes: 1: 4n5Ua4aTaAunDOOW01P0fMrY7k0.roa (hash: WNNgqxjBcUK1ZKvwmBjdbFYyCDwsWtboY/v6WqR+zss=)
2: vrs3Cx2yDf2QiVQkesseCgUkCsE.crl (hash: 2LzN3YL7Fn+xBonya+hmejpVVS7ENNTgjA5dS21svaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:40:2b:92:5a:39:30:1c:10:41:7b:05:42:dc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebb370b1db20dfd908954247acb1e0a05240ac1
Validity
Not Before: Mar 2 20:01:31 2026 GMT
Not After : Mar 3 20:01:31 2026 GMT
Subject: CN=bf2038f241609bb9b178558ad8def3bb975b428e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:d5:82:d1:6e:56:7d:96:44:9b:4f:30:8d:
7c:41:e2:de:bf:10:ee:63:5e:1d:22:4f:af:73:d2:
81:34:c2:7b:84:b0:a3:85:d7:f3:9f:ca:da:cc:da:
9e:5f:13:cb:d8:a8:8e:ad:27:86:b6:69:cc:8c:d5:
05:98:6a:04:a5:b7:21:13:94:23:69:68:df:e0:3b:
85:8b:c0:5f:bf:ac:1f:26:83:12:65:ae:bf:2f:aa:
66:22:3e:e0:bd:30:bf:a7:b7:df:eb:44:ef:34:89:
5b:53:cb:ce:e2:98:55:75:f1:87:fc:5d:b2:6f:ed:
11:6d:d7:ae:5e:99:8c:71:73:03:9e:20:70:7a:f0:
45:17:f9:2a:f9:c7:0c:93:83:1e:cb:1f:da:51:5e:
27:b0:4a:a5:77:87:2b:09:0f:81:e5:75:04:ef:8d:
ab:c2:96:79:f7:db:ee:a1:0d:60:2e:21:25:d9:fc:
55:f7:63:a9:30:c1:ab:46:5e:43:68:d5:36:81:f5:
70:3e:35:64:9a:69:e5:57:a8:e9:c4:04:52:07:85:
3a:51:ef:79:c9:56:5e:1a:5c:1c:43:54:a5:ec:92:
8c:f6:9f:40:68:65:90:f3:d9:a3:22:83:94:df:fd:
db:44:e0:c2:5c:a2:b2:2a:58:6a:02:4c:67:68:1c:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:38:F2:41:60:9B:B9:B1:78:55:8A:D8:DE:F3:BB:97:5B:42:8E
X509v3 Authority Key Identifier:
keyid:BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:96:11:a2:89:0f:f1:e3:6e:35:0b:a3:d2:29:ec:ee:1d:
33:07:25:19:aa:ad:f5:82:d1:9b:2f:28:b8:86:98:67:22:43:
f1:d8:14:e7:f3:30:91:13:8f:1d:38:1e:c9:c8:99:8c:7b:fa:
7c:18:65:b3:28:41:08:fd:1d:22:05:7b:a6:c6:83:27:98:71:
84:2e:17:5f:d4:c2:a5:6f:c7:d2:44:7b:ef:83:00:5c:1e:f8:
13:c2:a0:bd:2e:1d:da:cd:3b:17:c1:15:a8:3c:ff:f9:0b:dd:
d3:8e:1a:cb:50:f8:f1:f3:37:af:06:16:26:04:49:78:11:c9:
15:5c:f6:45:0f:0c:26:3d:e4:c9:d3:55:45:7d:f1:d5:e3:25:
e9:c6:c7:88:9e:16:ab:83:a7:7d:ff:98:bb:31:be:52:b0:05:
9f:c2:14:a6:df:2f:0f:67:de:51:2b:47:d8:ed:7f:91:69:54:
b1:c2:37:d5:0c:53:26:a8:4b:d1:ca:39:fc:56:bc:e0:9b:48:
c3:35:58:c1:26:97:e2:27:c2:38:95:83:26:7d:c4:6b:9e:1f:
2e:bb:9b:98:bb:9c:1b:d8:58:6a:b1:0b:e4:d4:51:33:ff:ce:
93:3b:d8:20:c6:e0:92:a4:64:c2:27:22:1f:a0:5c:cc:52:b0:
6b:6c:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:02 2026 by rpki-client