Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: OnvTGbo9IzBY1K4RPyQ8rzfV7of+Po5H/3zqNVkUAXE=
Subject key identifier: E5:C5:02:51:1B:F0:05:DE:D5:3C:92:A0:0F:8D:D6:E0:46:A3:BF:E0
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019CAD23104F778F02B5713BA80FEF43D710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 158E
Signing time: Mon 02 Mar 2026 06:01:22 +0000
Manifest this update: Mon 02 Mar 2026 06:01:22 +0000
Manifest next update: Tue 03 Mar 2026 06:01:22 +0000
Files and hashes: 1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: qJ2gN3FHCIDbnpHHuIi+BwKYlJB+ML1CSCcM/AkYrqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:10:4f:77:8f:02:b5:71:3b:a8:0f:ef:43:d7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Mar 2 06:01:22 2026 GMT
Not After : Mar 3 06:01:22 2026 GMT
Subject: CN=e5c502511bf005ded53c92a00f8dd6e046a3bfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:cc:85:25:07:15:ad:fb:15:29:cb:a2:8a:
1b:e7:1e:5d:0a:ee:d8:23:b0:7e:88:35:93:83:12:
30:a8:7b:23:3a:d7:6c:53:13:24:1a:fc:37:ac:01:
b3:11:bf:6e:90:e0:26:f1:bb:29:80:bb:85:23:08:
75:2f:b7:29:ef:de:5e:3d:3a:90:74:21:93:b8:1f:
f3:da:9e:54:fa:5b:18:fd:bf:64:34:b2:0a:32:f0:
6c:a4:bd:80:12:0b:cb:28:4b:93:69:0a:62:2d:53:
8e:57:e2:db:ac:e1:01:66:09:73:f4:fe:11:c9:85:
d9:4e:92:0e:10:53:86:68:2b:4e:3e:cf:ae:24:cc:
23:2c:ec:01:98:4d:9f:61:d9:51:e7:85:62:22:64:
52:71:29:9b:13:d5:ef:f4:dd:79:23:a4:b3:b8:6d:
3e:30:ce:10:9e:1d:37:9c:46:c1:2c:d2:22:68:1e:
ee:53:a0:3d:dc:db:3e:f7:ff:5a:98:f6:9d:c9:57:
e7:df:c6:cc:e3:a8:db:e7:ac:cb:69:43:d8:4f:31:
04:3d:e7:61:05:c0:16:cc:10:06:b3:27:37:73:92:
bd:2b:8e:22:79:c6:16:d2:c5:8a:86:5c:91:49:02:
56:b8:7f:20:29:c3:27:dc:26:c3:5e:40:b2:d9:33:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C5:02:51:1B:F0:05:DE:D5:3C:92:A0:0F:8D:D6:E0:46:A3:BF:E0
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bd:09:73:40:bf:66:85:db:f0:b4:9d:1d:bf:4f:6b:a6:c0:
7a:59:b1:b8:0b:38:d1:7a:6c:c2:61:ab:5e:ce:14:36:eb:40:
69:b4:91:9d:19:9c:f3:81:c4:67:6c:01:05:29:54:34:be:75:
2c:ac:95:03:1f:3e:e0:a7:20:27:32:cb:e8:1b:1c:d0:ab:76:
d5:8d:3b:45:14:65:39:83:c3:0f:8e:7c:85:19:25:f2:92:46:
54:f3:f7:8f:07:72:ee:a4:dc:58:82:47:cc:95:ab:a5:99:aa:
36:c1:14:3b:8d:8b:35:b2:b3:c3:79:fc:aa:15:e0:5e:d3:be:
c0:60:f2:c7:91:c4:7d:76:03:05:d5:da:cd:09:43:f9:e8:11:
eb:ec:c0:1e:e0:63:07:5c:b3:f6:ea:18:8b:54:7a:e2:76:a4:
9a:3f:04:2f:71:40:09:f5:ae:3e:18:ff:2c:08:3a:5f:39:ac:
2d:c9:19:88:6b:d5:a8:02:51:67:c1:27:a0:15:fc:1a:69:d8:
81:00:f9:6e:39:5f:ac:7f:15:99:77:74:f9:ca:68:ac:db:3a:
36:de:c8:ad:83:b6:d2:f6:96:4f:83:8d:77:a2:c7:95:aa:5c:
3f:42:ea:75:48:db:96:7f:ce:7f:f6:37:c8:4a:6e:04:7d:d1:
9c:f1:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:51 2026 by rpki-client