Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier: yducBiL0eRIA3DRoLcOjD+Z5mtGMQZlYLbOVD1eri18=
Subject key identifier: 5D:E6:85:C5:B3:73:C2:45:EE:60:B8:C6:18:74:89:60:08:3E:24:29
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 019CAAFD2C2696A3FFA5CEA69B8BC6A95F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: Mqxt2etpZJyBYnxyohpjKxFn3pFSy9hko2x2kcvO9LM=)
2: b5RJOv7qZAeN9fC5WkVRpB4SgFc.roa (hash: Wt8WdKPtW4g2V/ELjbMd7aeJz0MptjN56nKh7aTTs9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2c:26:96:a3:ff:a5:ce:a6:9b:8b:c6:a9:5f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=5de685c5b373c245ee60b8c618748960083e2429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:f8:a2:b6:05:0b:88:dd:1f:9a:0d:2c:cd:
60:c6:6f:75:de:f8:74:5d:82:08:da:5c:ef:1a:84:
4a:8b:50:e5:bd:81:63:90:fc:ed:e7:fe:e2:4d:0e:
48:c1:93:5c:da:a9:d5:59:c4:8f:47:70:36:8e:d8:
80:f2:a6:96:b2:ce:ad:36:65:f0:d5:1a:fa:1a:88:
79:6e:58:77:28:82:43:2c:cf:92:c1:16:2e:c4:1c:
25:96:6c:88:d2:0c:24:e8:83:16:8f:65:b9:14:f8:
b9:6d:89:fc:b7:91:6d:34:56:45:9b:1c:13:d8:b4:
36:2b:7b:21:72:27:3a:ca:3b:42:f1:d6:94:c9:d5:
fc:86:d3:51:54:3e:8f:99:06:7f:87:69:ad:26:8c:
c1:66:d2:f4:2e:ce:37:85:a0:20:3d:d3:be:95:e0:
52:49:da:c8:90:fd:60:cc:af:4f:6f:ef:29:46:cf:
ac:4c:b6:15:13:f9:6a:fc:db:7b:26:3c:0c:0c:35:
60:ba:52:7a:66:f2:88:05:42:e2:07:93:69:2e:79:
18:a2:8a:d5:dc:ae:a1:46:7f:fe:ae:5e:e6:c8:3d:
3d:15:cc:6a:b9:bc:53:82:fc:3d:a4:10:f9:ed:c4:
1f:6b:b0:0f:b5:46:3e:4b:26:24:bf:41:b1:e1:6b:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:85:C5:B3:73:C2:45:EE:60:B8:C6:18:74:89:60:08:3E:24:29
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6f:b8:17:e4:8c:b2:d5:ef:1f:b5:6e:19:12:d8:29:49:84:
50:7a:90:76:43:47:4d:60:cd:c0:b6:22:a0:92:e6:d5:ca:e8:
ec:3c:8f:32:05:74:f4:b5:a4:27:c7:d3:a9:b2:bd:00:ab:95:
47:78:50:1b:76:0d:dc:12:87:33:a0:b1:05:88:6e:b4:c3:74:
b9:a2:40:9e:2c:88:bb:25:c3:04:02:f6:a6:93:9b:2d:a4:7a:
bb:cf:25:0b:c2:47:54:66:52:84:1a:17:98:58:69:5d:90:16:
f4:de:4d:af:8e:1e:33:8c:d2:08:d6:b9:78:17:d5:72:f3:32:
ab:3a:83:6e:46:bf:c1:05:61:a2:60:4e:9c:ed:77:b9:08:de:
b1:98:d4:f0:90:75:06:ae:82:2d:86:bf:e0:1b:ee:c5:05:91:
a2:de:d5:f7:42:8e:5e:19:51:f5:eb:ce:4f:11:3f:8d:24:e1:
f9:20:75:01:91:af:1b:db:34:91:a3:a1:b6:b2:b9:53:b0:49:
c0:12:aa:15:c2:b8:b6:27:eb:8d:14:02:c6:ba:2e:40:1a:6a:
7e:42:57:9e:fa:62:35:b6:dc:61:6d:fe:be:97:1d:e8:3a:7a:
ec:13:01:86:a2:94:e8:6b:fb:b7:55:5c:ed:b9:0f:cc:5d:36:
c1:c4:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:07 2026 by rpki-client