Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: Cab1bXbcL6HM6Af1CsxIVo+6u137xDxrhRLPMvOIl/8=
Subject key identifier: 97:23:F3:A7:67:21:B7:95:37:AC:70:3F:30:FA:1D:41:5E:12:D0:34
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019CABD9FC746D8951C5141E8E1DE5D850D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0A62
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
4: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=)
5: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
6: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: RA45wQBfBr1lPE1l1KBERQWdTfNZZ67N6niYVQYg+3A=)
7: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
8: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fc:74:6d:89:51:c5:14:1e:8e:1d:e5:d8:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=9723f3a76721b79537ac703f30fa1d415e12d034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:a0:49:08:e7:1c:24:2f:c3:b3:2c:21:c4:
69:45:54:e0:e5:22:76:37:33:21:f8:52:d2:aa:cb:
1b:a7:5b:68:62:11:13:01:d7:7a:f6:03:87:75:f6:
c3:1f:f1:12:d4:77:06:8e:e7:62:5c:17:ad:35:2b:
6e:cb:a0:ed:0c:a4:64:85:92:8f:2e:4d:b7:28:a3:
4b:f7:72:b8:fc:6d:49:59:a1:a0:14:1f:19:d2:35:
9d:63:cd:4c:bc:fe:23:8f:3c:a8:ef:9f:db:57:c2:
66:d7:ea:fc:59:6f:3f:d3:85:08:78:67:46:49:0d:
08:91:5a:d4:59:fb:58:f4:67:67:6e:1f:a5:57:88:
86:1c:68:1b:84:e2:8c:54:f6:e7:29:92:86:ee:4d:
d3:d6:aa:24:64:bb:0f:7f:58:ff:c4:29:2b:b7:c2:
e5:85:25:6c:4b:2e:15:a3:b4:c1:6b:bc:b0:6c:4f:
d1:82:83:2b:83:44:71:b9:2e:11:9a:fa:28:d5:c0:
e4:7b:26:fe:bd:3f:e0:49:bf:62:6d:20:88:48:d5:
e1:f2:76:a1:90:d3:9f:6f:ac:ec:dd:08:19:00:60:
5c:06:65:01:33:6e:67:a9:b9:05:45:9a:4e:63:0c:
e8:6a:4a:dd:86:5a:ee:99:8b:27:87:09:06:2b:39:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:F3:A7:67:21:B7:95:37:AC:70:3F:30:FA:1D:41:5E:12:D0:34
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:76:ad:55:2f:98:4a:af:9c:24:b9:44:6e:fa:a5:ad:a8:3f:
7c:ed:3a:44:73:04:1f:43:03:25:a1:b8:53:f2:ad:29:a0:a6:
24:ef:11:b2:c9:ef:f3:6f:c4:ad:29:a3:41:db:c6:29:03:d4:
57:fe:23:20:75:ba:32:62:00:45:ef:05:3d:cb:b7:6d:57:d3:
02:df:c7:b6:4c:44:e8:c1:73:9d:66:68:b7:3f:38:f3:e0:46:
2c:ac:75:54:0e:db:55:c4:5b:80:dc:c6:8b:25:e6:86:90:84:
e6:61:e1:a6:36:cb:17:68:f5:45:05:85:05:23:4c:c6:85:d0:
67:ce:ba:52:44:38:05:a3:18:4f:20:f1:86:2d:06:66:80:6e:
40:e1:39:eb:2a:73:10:74:4a:09:fe:f0:90:72:d4:d4:0f:62:
f6:bb:c1:30:1c:6f:01:a2:58:cb:b8:96:c2:f4:00:d5:07:fe:
5f:02:ff:ab:31:de:b4:a8:49:55:ee:94:5e:4f:24:e5:92:86:
29:f9:8d:86:5c:bb:54:8c:77:7b:31:09:aa:2b:ab:ad:1f:6a:
7e:e0:8c:d5:20:f5:3f:1a:fc:c1:66:39:90:42:70:e0:e4:28:
95:c0:34:67:33:62:85:d5:2e:4a:57:44:51:e4:29:c8:90:9e:
80:19:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:09 2026 by rpki-client