Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: xVxQ+/HDB1s0irEAHhkv+MRZ43IGbM+eprNGY8Xd3mA=
Subject key identifier: 84:4E:44:9E:5E:E6:1B:1B:4A:A9:7B:B7:9F:D5:54:0D:F4:40:2C:0E
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 019CAAC6D44490BC6F8CFBDA8997D99C2FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0F4F
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: S9kGmLdkpv2ILDDQ-SlcOK9Lj1o.roa (hash: QivYNDVsph6A7kkTjUq1Ljk/FMFPW+uo2Qe8RGmCL8g=)
2: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: 0EcXF9PrEu8hQnoCdjidLZ4cOlr9MWf/+lUKAC3Q1CM=)
3: eMKt2DWZjokC0ieIU1oM30l3M2M.roa (hash: L8Kfu464KFJxNJalzdL9bOwXAKJk3f1Ymgq59SssnCA=)
4: fjBLPKVRL2N3R-A_WZpV7UMJS-E.roa (hash: g43UU/wrTcddspCCnr8Ra6+FoKvZBu/4AB1pQY+Nmvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d4:44:90:bc:6f:8c:fb:da:89:97:d9:9c:2f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=844e449e5ee61b1b4aa97bb79fd5540df4402c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:54:1f:d8:b2:ec:60:37:96:1d:f5:5c:17:
3e:07:f7:13:ea:f3:17:2d:cd:91:92:89:76:fa:01:
24:cb:4d:e1:ac:a7:85:a2:ad:09:64:15:34:89:24:
2d:0f:86:75:09:bd:0f:1a:50:d3:fd:e2:72:b9:21:
58:7b:cf:8b:d6:d1:59:24:62:2d:ec:27:2f:92:80:
95:0a:86:af:79:3f:9c:89:52:34:f8:92:ad:0a:1b:
86:96:cb:23:c1:e8:1f:d7:ab:b0:8f:a3:b9:c4:c1:
cb:47:ff:1c:2c:fc:cd:76:55:7e:3f:b8:05:87:96:
0a:c2:cd:13:5e:76:af:21:ef:ed:e4:07:a1:50:70:
89:77:d5:f1:84:7b:d9:db:27:ad:53:c2:5a:51:af:
19:8c:1d:64:57:28:74:0b:4b:a8:db:cc:6c:1c:5a:
d6:4a:37:97:1c:f3:57:ee:89:8b:16:39:94:d9:0c:
76:a9:49:68:d2:ff:58:f1:c7:4b:ba:0b:49:93:47:
a6:ed:eb:63:d0:df:e7:16:dc:11:9e:39:84:f1:72:
fd:fb:91:9e:2a:0a:96:9d:49:bc:ec:1b:00:14:aa:
bb:19:4a:b6:59:86:5f:63:ac:83:a7:27:7e:98:95:
de:4c:71:4c:32:4c:b9:5f:d3:e6:97:d9:4e:8a:b0:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:44:9E:5E:E6:1B:1B:4A:A9:7B:B7:9F:D5:54:0D:F4:40:2C:0E
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:19:87:55:9f:f7:2b:07:71:b9:bc:1e:e2:41:9e:49:3e:9d:
10:06:a6:52:68:2c:1e:4d:b0:c3:c4:08:10:f5:dc:d9:46:21:
23:17:48:d4:7d:d4:d8:92:f6:42:0c:fe:3b:8f:57:40:d1:c6:
94:c1:fe:89:d2:20:6c:2e:0a:d2:86:f6:f0:d7:d7:39:3d:70:
07:76:c8:9d:f6:97:18:17:f1:69:3e:7f:b4:6e:84:c7:04:cc:
2c:f6:cd:cf:8e:4d:43:be:31:01:d8:ba:5b:5b:84:c6:45:51:
18:13:13:96:d2:5e:82:5c:30:1c:2f:5d:cd:44:62:5a:c6:4b:
52:b8:f5:12:35:b9:5d:4d:f7:d6:43:5c:b4:74:15:b7:98:c8:
d0:b7:ae:1d:36:60:bd:f9:d9:0b:71:2f:80:48:15:ca:8b:3f:
5d:ac:c1:0a:db:ba:af:a5:53:4d:90:b4:24:d3:d9:5e:47:c8:
9b:45:85:90:6b:7b:b2:16:88:24:74:77:45:27:33:f5:6b:61:
c1:d2:db:39:93:aa:e3:85:64:57:5e:37:69:9e:8e:c6:8c:ec:
21:28:1a:dc:c4:0b:76:a4:d2:95:30:08:a1:03:b7:06:7d:76:
73:8f:3a:fe:9d:9e:f5:19:6e:eb:3b:b0:45:8e:59:93:bf:26:
cf:6b:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:00 2026 by rpki-client