Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: DJ/1NW/r++tkEWT6/2LSvuvP29e2Edy4iFxwl3nGbMU=
Subject key identifier: 7A:7A:7A:0E:A1:F8:AB:99:14:E1:5E:E5:DD:48:07:C3:EC:29:FA:C2
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 019DA59DA2F9053DE889650847F65AD9784A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 36
Signing time: Sun 19 Apr 2026 12:01:04 +0000
Manifest this update: Sun 19 Apr 2026 12:01:04 +0000
Manifest next update: Mon 20 Apr 2026 12:01:04 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: E9pLGnTxC6x7ySzVvkF6IlEQfZFqgnn0qT3trePjqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:a2:f9:05:3d:e8:89:65:08:47:f6:5a:d9:78:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Apr 19 12:01:04 2026 GMT
Not After : Apr 20 12:01:04 2026 GMT
Subject: CN=7a7a7a0ea1f8ab9914e15ee5dd4807c3ec29fac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:dc:d1:e3:7c:8b:7f:ff:2e:1c:20:4f:d7:
f2:6e:a2:46:60:e9:66:f1:a1:09:7a:b3:ac:4f:87:
5a:2a:31:e0:dd:42:7f:3a:0b:72:d0:68:af:d6:55:
17:26:5d:ec:5e:a1:f4:be:b4:5e:99:fa:18:6c:a5:
ac:84:60:0f:61:e7:28:30:a3:af:2f:1a:48:a9:f9:
be:de:fa:07:11:bc:91:d6:bc:b1:4c:71:ff:79:f4:
12:1d:e3:76:69:19:59:6a:c0:2d:44:74:17:43:f6:
91:93:93:4e:01:8a:76:9c:8f:2d:f7:94:72:22:fb:
f4:3d:e2:16:81:11:f2:1d:ec:12:41:54:2b:1a:bf:
d0:9a:70:8c:9b:10:e5:7f:92:22:cb:b2:47:03:c0:
62:99:9d:16:2a:5b:f0:e7:df:34:c3:1a:94:fd:3d:
e7:90:e7:42:4f:b2:9c:e4:f9:f5:e2:af:80:b4:78:
93:64:45:68:c1:08:fe:39:63:29:df:08:17:09:46:
3d:17:d9:bc:0f:79:a2:8a:65:9f:18:c4:57:ec:09:
48:95:7e:36:2f:d1:68:6d:bb:ac:fe:78:d6:7a:0a:
fc:8c:d9:d3:fe:68:4f:37:0d:a3:3d:17:8f:f6:a2:
2e:34:95:7b:cc:c9:b0:a0:68:a0:d7:4a:f3:8f:fa:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:7A:0E:A1:F8:AB:99:14:E1:5E:E5:DD:48:07:C3:EC:29:FA:C2
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:39:f2:a6:25:e1:39:87:bb:dd:d3:7b:59:01:a3:95:69:
a1:bd:24:01:21:3a:5e:21:7f:12:53:1e:95:78:35:6f:66:63:
b3:cd:6a:cc:91:66:22:39:f2:a4:ac:9b:ee:83:26:52:4d:38:
98:03:e5:d3:f2:d5:09:c9:a7:cf:d1:9d:20:51:8c:95:df:7f:
1c:f5:f6:cd:ce:ca:ff:af:3d:95:b9:6d:fe:1b:e0:82:af:b7:
04:fd:e5:04:f2:e7:c3:8c:5c:97:bf:75:f0:e9:11:ed:d8:d8:
7f:59:58:b7:4a:7b:3f:b4:74:75:6b:ea:49:09:d4:fa:ad:6a:
5b:a0:54:c2:05:86:a2:1b:05:4b:f9:0a:a5:b2:c8:8c:5a:55:
57:2e:c1:db:b5:1d:17:45:fc:d2:85:c4:d4:3a:4c:5a:c8:07:
a6:54:9c:d0:cc:8c:82:85:55:4f:a0:44:18:77:3d:af:f4:9d:
90:9a:a3:e2:3e:6b:12:f9:a7:2c:22:c8:6e:cc:d9:54:0f:a8:
ee:eb:af:6c:64:0a:2f:fa:87:27:e8:7f:ba:82:bc:ef:56:1b:
52:a4:43:4c:8d:5a:7e:f1:04:21:6f:1e:84:ae:d1:54:33:76:
a6:4f:54:ac:0f:9d:da:10:e0:12:39:36:46:b8:01:45:bc:b8:
19:c5:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:31 2026 by rpki-client