Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier: 8ApqdcHaay84ho2PWC6394jOP7NWXQlcz2BIom9OBQw=
Subject key identifier: 2E:83:FA:6A:8F:62:BD:2D:CA:32:46:2D:BF:EA:7B:2B:4A:BB:38:99
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 019CAAC61CF403996F3A32676350065D80FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number: 0B4A
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: vUchXvct0u5LisYHcmr4KgT0vgcfAnNFeo4DOoAuZ8M=)
2: i6ZPGK_7Bigyr85KXz1VVHT10Q0.roa (hash: joh45/eIjcr7bpYGjukpldugHoxa03PMZKsduB6yEWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1c:f4:03:99:6f:3a:32:67:63:50:06:5d:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=2e83fa6a8f62bd2dca32462dbfea7b2b4abb3899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:9d:e5:96:f8:56:f1:68:e0:60:b1:f4:78:
a6:9e:b6:e2:1c:72:5b:13:33:d2:e4:23:c4:d2:a4:
39:0e:9c:ab:1f:7e:73:04:ad:fc:30:54:8c:7e:67:
21:38:cc:51:a2:e4:9d:3a:4e:d8:25:55:2d:0d:ac:
a1:4f:14:fb:28:5e:a6:57:de:e5:c4:bd:63:51:33:
38:11:45:8c:37:0f:6b:1d:ef:9f:51:b7:d2:ee:53:
61:9a:1f:6f:b7:6c:79:9d:e3:45:40:71:df:de:40:
cd:4a:52:39:ae:5f:7c:35:d4:91:bc:df:ec:6b:dc:
ec:b7:ce:0f:c9:8f:c6:62:cc:7c:ca:d3:6e:a2:29:
28:f7:8a:e9:20:2d:23:23:47:6d:f8:b8:d1:7c:4c:
f6:d0:c6:c1:e2:0f:18:be:83:8e:63:a3:f8:e7:90:
5b:73:6e:9b:bc:b8:26:40:65:b5:41:09:cd:0c:16:
bf:87:1e:49:0d:9d:b5:f0:2d:18:60:4f:09:86:b4:
0c:96:2c:b7:31:87:db:e5:c6:bf:65:0e:5f:3f:e0:
de:81:9c:ee:13:c8:2a:c3:53:fe:db:41:39:cb:23:
b0:e7:c0:5c:e6:6a:20:c6:ee:11:fc:63:a5:6b:06:
c0:58:a7:4e:5e:01:31:4f:b4:5a:fc:c1:54:02:76:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:83:FA:6A:8F:62:BD:2D:CA:32:46:2D:BF:EA:7B:2B:4A:BB:38:99
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1b:0f:64:a5:80:d7:87:c3:7e:ab:8a:53:92:64:50:64:e8:
80:ff:b8:52:f0:c4:cd:47:52:40:47:c3:34:6d:01:96:79:ca:
56:53:6a:e3:d8:e1:77:10:d2:92:32:68:28:53:3d:cc:25:2c:
9a:09:44:bb:c2:bd:de:9a:ae:b6:75:f8:4d:e6:c7:e3:6e:b5:
df:79:22:a4:ad:43:20:91:f8:c5:11:70:d4:90:8d:f4:9e:5d:
a9:2f:32:6f:f1:df:4c:05:a0:2d:96:8f:0c:86:4b:80:3c:8b:
78:fe:3e:d7:ec:69:ad:5c:91:0b:93:96:e8:e5:22:54:1b:85:
de:88:b9:a6:b6:13:4a:af:1e:79:fa:3f:8c:f0:9b:98:f7:80:
ed:bf:02:1e:5d:3b:a8:18:61:67:58:24:cf:e5:52:65:15:4c:
92:a7:90:b0:f0:bc:88:f6:30:bf:c4:1f:ba:47:60:d0:e0:e1:
ef:33:75:a8:b4:a1:dc:58:80:27:4b:0b:b5:ce:54:ee:6a:30:
c5:a2:4c:c5:9d:9b:9e:e1:cb:98:82:5b:2b:09:cc:ed:21:ea:
51:b5:ca:aa:43:be:1e:8f:03:bd:0e:48:73:f0:7e:9a:da:19:
b9:ac:0a:f5:ce:3a:30:c7:3d:b8:b2:0c:59:13:bb:71:60:42:
99:98:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:33 2026 by rpki-client