Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
File: VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json)
Hash identifier: nP9igZGRRbfKJeJ1/wtBMpolr6cyDEY45mZJhQdzSyQ=
Subject key identifier: 91:1B:FB:D5:59:C8:6E:A2:32:29:F8:48:CD:E7:4F:12:94:C4:F6:00
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Certificate issuer: /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial: 019CAC46C7158F6EEB4F938FDC580FC4DE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
Manifest number: 0C12
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: C0RY1BgP7-gM4SA2kF-ZubYjdMQ.roa (hash: n8yzv8xHg2NtYJD4BaB2U0HQGcbp6eAIylk5+xYZg2A=)
2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: 9unQ5Mnlk4guMRxPgLSIhH84/GRBzB6eFw965h+80tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c7:15:8f:6e:eb:4f:93:8f:dc:58:0f:c4:de:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=911bfbd559c86ea23229f848cde74f1294c4f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:5a:50:8e:15:0d:86:d9:fb:7c:f9:42:0d:
44:a9:2a:d6:7f:a4:05:d9:3c:39:99:17:70:36:15:
24:b4:ee:63:67:9d:3a:83:68:98:ee:b4:7b:da:9d:
fd:e0:fa:38:ee:29:1e:9a:63:68:27:40:67:d9:ff:
3a:f7:c4:72:c9:c1:e1:95:3b:6c:83:58:44:e5:58:
21:25:54:c6:fa:2e:ce:5b:8d:27:57:8c:6f:01:d2:
22:f8:69:14:1f:79:18:5b:60:61:6d:fc:3f:02:26:
0b:d7:2c:f7:c7:7c:15:2b:b5:8d:3c:42:92:6b:e8:
c7:30:34:fa:dd:5b:1a:36:d8:4e:3e:79:e8:58:34:
60:85:67:2e:a0:a7:e8:36:df:01:5c:da:04:02:51:
34:63:40:20:00:e0:6e:a9:2f:39:04:9d:20:eb:72:
78:c4:26:ff:cc:43:95:a4:fa:ce:49:d3:74:ac:80:
9b:2f:69:3a:5d:7f:b1:ad:15:90:0f:2d:0c:c7:9f:
ec:de:50:30:fb:93:09:54:13:7a:36:f5:26:ea:80:
77:32:ce:4f:60:ff:1c:3c:9f:64:64:2e:4e:89:58:
2a:67:81:f1:a4:4a:52:5b:b4:1d:a5:45:6c:11:36:
23:f1:79:7d:30:e5:4f:7d:8a:d9:27:3c:81:c6:01:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1B:FB:D5:59:C8:6E:A2:32:29:F8:48:CD:E7:4F:12:94:C4:F6:00
X509v3 Authority Key Identifier:
keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6d:f8:72:30:a5:09:01:0c:fb:68:a5:7d:b7:76:64:cb:db:
21:2c:76:7d:ea:3e:e1:cf:cc:b2:df:91:0c:46:78:a5:e1:54:
2f:2a:8a:f6:37:14:49:34:da:57:2d:67:02:f5:d2:6f:db:fc:
8a:e1:a4:3e:7b:1d:56:c0:e5:d3:10:88:f1:5a:79:fb:aa:e5:
c9:75:25:f9:b2:8a:be:f9:c3:d1:83:14:f4:17:f7:0e:95:46:
f6:90:80:ff:9c:42:17:2f:1c:da:93:cb:13:99:36:ef:79:e0:
75:68:0d:01:84:ef:02:f4:d9:8f:e3:62:b6:1c:b3:14:1f:05:
dc:1d:bc:c1:97:2c:c9:5c:31:e5:d1:b6:11:b8:bd:e0:bc:6c:
a3:d4:36:05:96:f2:f3:fa:0c:5c:2f:de:94:7c:8f:0e:57:10:
5d:58:a4:2c:e9:8b:2c:ec:72:47:a6:eb:57:ea:35:27:dc:83:
b3:75:4f:6b:47:2d:19:93:7c:ca:17:1b:fe:1e:03:6b:a0:95:
20:5f:91:92:18:7d:c1:7a:23:3b:ae:bc:07:d1:d5:93:29:4b:
3f:84:94:2c:92:f0:a0:b5:27:d7:10:2e:88:b2:1d:34:94:5c:
1c:0d:5f:32:59:73:f8:77:e4:44:5e:3a:d6:ca:15:c5:ec:64:
cd:73:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:51 2026 by rpki-client