Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: yMk6eVsyErBrmfqsjahBSOLF65dG80NbFGnMUsd95Aw=
Subject key identifier: E2:80:42:4C:FF:AB:43:C2:14:BC:99:CE:21:83:A5:41:50:E8:10:74
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019CAD5A53018B90BB2A998E23585B1F4ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 03B1
Signing time: Mon 02 Mar 2026 07:01:43 +0000
Manifest this update: Mon 02 Mar 2026 07:01:43 +0000
Manifest next update: Tue 03 Mar 2026 07:01:43 +0000
Files and hashes: 1: R7QMGmuA2wDaBVvULaWvGaz5Evg.roa (hash: fySPMSDcnymZQ851W9mCK2einppIFGfSXw6lDW7Rxuo=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: +BDqOJx5Aj+XBlYCPpq0R5aodPJTTJqlV8cbDztJW7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:53:01:8b:90:bb:2a:99:8e:23:58:5b:1f:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Mar 2 07:01:43 2026 GMT
Not After : Mar 3 07:01:43 2026 GMT
Subject: CN=e280424cffab43c214bc99ce2183a54150e81074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:ca:c6:6a:16:58:b7:73:35:00:1c:31:60:
e9:d7:1b:d7:dc:db:70:d6:7d:79:b7:f2:45:ea:1e:
5e:5a:b9:bc:92:12:99:5a:c1:13:61:02:d4:d6:3e:
db:45:d9:78:f9:44:3a:5d:4e:63:3f:93:5d:0b:a0:
fa:0a:36:57:5c:cd:92:e4:e7:1c:98:d1:18:3c:28:
f0:52:4c:f1:43:e1:82:5e:9c:c2:fc:51:16:aa:69:
6b:0a:52:cc:7e:9f:a6:42:5a:e7:3d:99:85:d5:31:
fd:d8:d7:fd:ad:b2:7c:13:04:fe:f0:ee:a0:69:91:
54:e4:0d:30:56:10:a3:5f:85:a5:1b:c3:30:4e:a0:
01:fd:ba:67:01:4b:e7:94:48:a6:eb:99:c7:94:70:
d4:de:06:00:7f:d6:95:c5:78:9c:eb:f6:31:77:b3:
5c:05:4f:2d:fd:0d:b7:40:05:f2:dc:4e:b8:72:85:
ea:36:e7:b3:fb:d2:f2:38:63:a5:03:4a:b2:8c:2f:
55:46:ac:39:40:a5:c2:15:a6:f7:c6:2a:10:ae:1c:
ec:0f:38:03:e5:1a:e7:39:75:75:f5:d8:57:76:60:
3a:9c:06:2e:28:ed:cd:68:e8:1d:af:8b:80:70:2a:
49:55:a6:7a:7b:a2:8b:ac:c5:34:85:2f:3e:61:4f:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:80:42:4C:FF:AB:43:C2:14:BC:99:CE:21:83:A5:41:50:E8:10:74
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:78:59:64:ab:aa:a1:6b:0f:e8:2f:d6:1e:80:cb:a6:a0:0b:
43:c5:25:85:b3:2f:41:d3:09:18:2d:81:bb:4f:b0:3a:4c:ce:
9f:c6:3c:26:b9:6d:19:06:88:f2:49:34:27:3c:0b:e7:00:59:
af:70:46:fa:93:a0:56:2f:9f:c0:6a:c4:74:39:1a:ae:62:3d:
62:06:16:1b:5e:c1:b4:88:43:1d:26:aa:01:52:af:9f:dc:a0:
dc:17:52:78:5a:56:29:c5:77:c0:21:83:98:70:a3:fd:36:da:
24:a4:15:46:49:5f:91:0c:92:d3:42:d1:85:8c:0a:80:68:97:
4e:99:16:0a:91:48:6f:36:82:71:a9:45:51:27:60:9c:7f:da:
fa:66:94:c9:c2:08:75:98:6a:04:a0:2c:2e:f4:48:0b:35:57:
af:0d:25:61:f9:7b:9f:b0:9c:7c:77:b7:33:1f:83:e1:59:8e:
14:ef:18:1b:8e:9a:8a:f7:92:a1:8b:88:b8:b2:55:cd:7f:dd:
57:46:61:3c:6f:20:a5:dd:e7:21:d7:75:8c:15:72:d4:b0:9f:
fa:53:b8:39:4d:0d:6e:56:e7:70:0f:22:8b:ec:4c:0e:dd:f7:
05:7f:78:00:0d:5a:e0:8d:8c:ea:24:3d:4c:7b:d8:a1:24:70:
56:47:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:08 2026 by rpki-client