Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: jk1CvmnJuUnNcdSCzhcsc/p0rVjRgw7vdt2PPLjBYao=
Subject key identifier: 66:3D:BD:B9:B0:3C:C9:89:93:13:AF:BF:D4:49:BC:50:FB:E6:39:68
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019CAC46BB58150E119BEC2CA63DBF498FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1325
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: sAC6iFk9z3eZZR6AXt9SqkkZlr5HVPhlDO0H2J00cnw=)
2: oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa (hash: fg5ldvtNVy0GA4pv1zrABZsjmX5v9/M80VbIZSFHe+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bb:58:15:0e:11:9b:ec:2c:a6:3d:bf:49:8f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=663dbdb9b03cc9899313afbfd449bc50fbe63968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:0b:fd:da:c6:09:08:6b:f9:0a:ca:38:4a:
a3:aa:72:ab:b1:85:ea:2f:b2:61:a8:90:99:09:f1:
eb:bb:28:00:30:09:51:c7:42:d4:8c:76:4e:b2:07:
46:e9:bc:62:93:9f:d0:c0:ee:1e:80:0d:42:70:17:
b5:73:7c:3e:22:4f:2e:64:cc:62:5c:c9:62:ed:40:
12:da:e6:16:b4:53:76:72:f2:69:27:69:f5:2f:63:
07:b6:70:00:4f:e5:32:25:57:c9:7f:76:b4:1e:2a:
2b:a9:30:a0:b4:61:64:13:9b:6a:ab:3c:be:9d:a4:
05:5f:fd:05:00:15:ee:2a:70:73:e3:29:69:99:0d:
a0:49:d4:9b:27:b7:94:2f:ce:c0:73:3f:83:c6:60:
9c:61:01:dd:9c:e7:9d:22:ea:12:67:50:42:a7:0c:
60:3b:de:d5:ad:9f:19:bb:c1:36:eb:5b:c3:ce:04:
c0:a1:15:d6:b7:70:ac:6f:88:0c:28:1f:27:88:ef:
80:a0:d4:5e:4d:4f:f8:e9:5d:2b:13:79:6e:91:f4:
94:e9:b2:9c:bf:36:1c:6d:e3:5e:47:61:83:d7:39:
f5:0e:13:f2:5b:f8:e2:6c:62:51:11:98:c0:a8:57:
94:50:27:92:f8:88:ad:d7:e4:c3:48:81:d6:45:f1:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:BD:B9:B0:3C:C9:89:93:13:AF:BF:D4:49:BC:50:FB:E6:39:68
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9c:c1:5a:0a:a3:f7:0d:54:3c:8e:f1:52:f0:8b:10:d4:94:
ee:b9:c0:34:87:3e:29:43:af:be:4e:b5:01:ca:7e:88:77:b0:
d2:fb:48:3f:13:a9:52:56:a0:5b:ce:85:12:85:32:f1:2f:6b:
4c:82:e8:83:51:9e:c4:b3:4e:1f:3e:fd:27:65:62:93:ca:d5:
99:66:19:31:49:0f:5c:7f:7e:00:0a:93:54:f3:07:38:6d:87:
86:e1:ba:04:9f:af:0f:6c:bb:01:ea:ad:98:93:11:1c:63:1e:
c9:d8:f6:22:9e:10:a5:31:24:94:40:35:d6:1b:29:4d:16:de:
31:d1:8d:91:c3:ca:2d:af:a7:5f:46:f9:e4:86:1b:33:35:e4:
ee:9e:7d:2d:9d:b0:18:ac:04:3e:4d:fc:9a:49:ca:85:36:65:
0e:18:28:19:10:d1:8a:4b:7d:c8:b8:07:66:d4:31:f2:7a:f6:
59:0a:c7:b0:6c:e7:aa:c9:83:fd:f0:f4:02:d9:15:e3:7a:b2:
f5:4e:62:86:fc:b4:9c:34:26:68:a5:b3:01:59:01:0b:f3:d7:
33:2c:54:1d:dc:d7:1c:2f:49:03:f5:42:ca:2f:cb:1c:c2:42:
06:3e:57:a0:23:ea:e8:bf:3f:f5:34:10:ce:54:ea:8a:ae:5b:
e0:66:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:33 2026 by rpki-client