Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: oHNzQJ39AewqgEoEfytBoWEJm7Hq0ui4+4+Mi2fqEDg=
Subject key identifier: 2E:38:39:F4:B9:B9:CA:C9:7C:35:BD:84:E9:80:70:88:BA:E7:DE:B1
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019CABD8FCE9EECA7C4B8F3BD87A7881670D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0CD3
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: 2JoGYlTrjYeph3UglUTxbywrBGkZTs4bBxZcoJByL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fc:e9:ee:ca:7c:4b:8f:3b:d8:7a:78:81:67:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=2e3839f4b9b9cac97c35bd84e9807088bae7deb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:28:bc:d6:bd:43:ff:0a:d9:91:f6:16:65:
87:16:b0:f9:20:56:b7:62:a5:a9:bd:fd:4b:32:ae:
5e:22:50:5b:7b:37:82:e9:7a:88:6e:75:0a:77:f2:
a4:bb:3c:a6:55:c5:a8:77:8b:43:ec:32:73:25:75:
eb:41:fc:cd:7d:9f:59:a2:b9:5b:d3:64:82:aa:0b:
39:71:eb:d8:b2:29:97:b9:80:df:d1:7a:35:96:b6:
a3:bb:2c:e2:72:ba:f2:dc:70:13:91:25:52:03:d4:
db:1d:58:05:2b:47:f6:7e:4b:f9:e3:13:26:41:84:
7e:1d:c7:19:fb:e0:d7:32:65:77:2b:31:57:e9:8c:
25:98:f4:4f:73:da:43:12:b8:e4:17:1e:bf:cc:6b:
79:01:74:bb:86:0c:75:53:42:96:42:df:a1:ba:d9:
5b:4e:ad:ba:97:9d:17:65:2d:9c:42:f0:f1:25:29:
9c:29:ad:ce:fa:97:7c:de:e1:9c:02:cf:b6:c7:be:
50:1f:51:86:1d:82:6f:29:f7:bf:95:08:7c:08:8e:
9e:e2:6b:47:18:56:5a:9c:4b:8d:90:55:83:61:ae:
48:44:f8:3d:5f:11:8f:9a:d1:3d:17:e5:5d:f5:c2:
3e:ab:29:6d:0b:21:e3:63:f4:fc:5c:f8:ef:f7:3e:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:38:39:F4:B9:B9:CA:C9:7C:35:BD:84:E9:80:70:88:BA:E7:DE:B1
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:71:9f:3b:05:34:91:a6:4a:29:29:12:e8:e4:82:58:c3:
19:f9:02:40:ee:34:5c:14:71:f0:b8:13:84:60:b6:25:79:a3:
b8:6b:94:93:02:84:8c:9d:e6:c8:3a:b5:50:de:b6:c2:f4:5c:
23:d9:16:3b:9d:8b:55:5d:5a:4d:c2:87:bb:cc:6c:6e:f1:80:
f0:f5:2c:82:45:3a:37:25:34:1b:79:05:6d:8d:cd:fd:7d:35:
39:44:f8:2b:9b:47:a6:76:4d:d4:7c:a6:89:0f:84:36:c9:61:
74:15:e6:65:58:8c:c1:0b:bf:b6:e3:6e:bf:ae:31:ce:7b:4f:
86:f4:f6:af:21:86:80:dc:76:15:bc:e5:03:85:70:7a:ea:80:
f2:0e:c4:29:ab:ac:d0:82:36:7d:be:a8:2d:be:d8:92:18:6d:
37:c5:fd:2f:f7:c9:70:0c:a8:88:68:21:ae:e4:3d:02:d2:bc:
43:d8:1e:58:94:44:3d:5b:89:f4:e8:6b:dc:a5:6a:61:47:38:
2d:04:e1:58:7a:bf:fa:19:45:d9:a8:b8:6a:9f:98:58:5a:f5:
ba:d6:73:eb:04:10:ff:e9:ce:19:b0:bc:3a:17:47:c8:8a:fb:
6f:d9:7f:22:53:99:62:aa:e5:7e:fc:7f:1c:e6:1d:fe:87:91:
28:86:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:46 2026 by rpki-client