Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: zm8NOBNfBzMhNiu5e0N/XZWNh/Omtav4bFTqLFO9I9g=
Subject key identifier: 30:F4:1B:A3:C9:E5:C5:82:8A:28:7E:FD:3E:44:69:54:D1:51:66:F0
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019CAAC65D504B650265E15AE826FAAA5541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0501
Signing time: Sun 01 Mar 2026 19:00:52 +0000
Manifest this update: Sun 01 Mar 2026 19:00:52 +0000
Manifest next update: Mon 02 Mar 2026 19:00:52 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: 1hIDkKhsNlES/lpZD4rtjzUjyZ3Pb9kZRIRFq515j1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5d:50:4b:65:02:65:e1:5a:e8:26:fa:aa:55:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Mar 1 19:00:52 2026 GMT
Not After : Mar 2 19:00:52 2026 GMT
Subject: CN=30f41ba3c9e5c5828a287efd3e446954d15166f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:1a:a8:38:29:7b:75:33:6d:85:49:bb:f5:
c7:42:39:9e:b1:fe:8c:61:72:ba:25:f4:53:97:2c:
5f:7f:25:28:72:ab:43:15:66:ba:4e:cf:d2:93:7c:
44:bb:e0:33:18:18:82:8e:6a:ff:a9:70:a9:64:26:
53:06:7e:ef:cf:40:a4:e8:93:c6:bc:f1:9f:f6:c8:
34:9b:20:f7:fe:85:ed:a2:59:d0:39:b2:f0:f0:aa:
6c:22:15:7c:7f:af:b2:43:04:a7:55:c4:db:4d:28:
50:72:7f:4d:aa:09:27:87:60:22:0c:de:4c:33:b6:
a8:45:1c:2c:2f:73:af:af:e5:12:ad:1c:c1:05:f3:
ac:6c:fc:4e:24:6d:53:d3:ff:0f:b7:24:f9:86:a2:
7d:bc:0b:4e:f2:c3:5c:d2:69:ba:d0:de:9a:82:01:
a4:5c:64:79:bd:40:e3:52:29:8d:6d:ed:85:0c:61:
9f:0e:f5:1d:be:31:d0:63:5b:bf:69:d9:ca:bd:b5:
9e:0c:77:92:36:12:d6:d4:13:cf:f4:18:d0:b5:c4:
f2:bc:4d:18:8b:21:5f:aa:19:62:43:fd:ad:5e:bb:
44:40:6c:6b:d8:b6:ae:11:2b:18:04:3e:24:e6:e5:
43:b0:13:46:87:27:88:6d:44:98:88:91:8f:6e:4f:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:1B:A3:C9:E5:C5:82:8A:28:7E:FD:3E:44:69:54:D1:51:66:F0
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d5:ee:ee:d3:53:bb:c0:0f:23:b0:cf:1d:35:b1:41:43:99:
22:0e:91:64:99:49:85:fd:48:1a:68:e0:18:8d:e0:81:60:f5:
fb:0f:6b:f8:07:ce:4b:b5:08:9d:1e:92:b2:ad:38:4d:14:9f:
01:3b:4c:a4:c7:5b:bd:a4:36:f7:a7:06:b5:c8:e3:7c:cf:57:
25:71:26:c9:3b:31:e7:3e:0d:60:c5:22:ca:46:75:8b:c7:15:
39:34:24:4b:f3:ae:f5:d2:3f:66:16:bd:fe:ce:9c:76:7c:06:
4a:e6:b5:3a:66:39:03:88:e0:e6:52:bc:30:af:32:bd:67:58:
3a:29:1e:ea:cf:7d:50:54:86:e7:87:19:c4:21:c9:06:2e:96:
6c:bc:2e:dd:8e:1a:db:fd:0e:79:71:3b:d9:72:9a:9f:d7:95:
ee:35:c9:e8:ce:20:6f:fe:cc:57:42:e0:f3:7a:6b:9c:5a:a0:
68:f3:bf:19:e4:22:50:ad:ee:b1:9e:b3:92:a8:84:be:b5:04:
6c:36:d2:b4:cb:31:d9:8c:ad:c2:80:d5:44:e0:02:87:f4:72:
28:37:61:d3:9a:80:a9:6a:fd:ae:94:f1:8d:3c:d1:16:4e:9c:
71:3a:df:30:f5:eb:9d:d7:7f:da:2e:c4:5a:34:3d:40:0c:21:
26:a9:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:13 2026 by rpki-client