Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: Kh7VBxN8eIjRWXb7KZc/sV301xiS+CWILDOd2dwIT5Y=
Subject key identifier: 8F:FB:7B:FD:C3:80:34:8E:5D:A3:2D:6C:29:15:6F:40:5D:E4:F5:5A
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 019CAC7E0741B2908871AA36300C4EBEBBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 12DA
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: FpVW71nyoW-_gJoXR54EYMZoVQE.roa (hash: gZatusuUvr/QTel7Hexm6oiz929ityXKMuJIjfNYW6U=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: d4NO3Zlm30ObKsJ4dy4WVOL3sxGUSKaCLOvYIMMR9Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:07:41:b2:90:88:71:aa:36:30:0c:4e:be:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=8ffb7bfdc380348e5da32d6c29156f405de4f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:9a:92:9c:8b:68:e1:1d:d1:88:ed:1d:c6:
0d:83:28:3e:86:08:b6:9f:14:91:c8:89:03:11:4d:
0e:12:cc:fa:ea:09:3e:9c:91:73:0e:80:a6:28:d6:
65:3b:2d:12:d7:0d:58:88:6e:59:a1:9f:a0:4f:d0:
3d:d9:ef:cf:97:d2:08:fa:c9:ad:f8:25:99:2f:2d:
69:50:f3:16:fd:2b:43:8e:ea:e6:3f:95:47:be:12:
fe:a3:e5:c9:ef:46:da:24:d3:3d:a2:7e:5f:db:9e:
d2:7e:da:f5:03:2b:62:df:d2:81:6c:e7:3c:6b:ab:
41:78:c3:11:3f:18:32:91:e1:72:b1:18:27:31:53:
22:34:ad:9a:da:30:88:89:8f:ac:8b:a9:a4:da:fe:
65:bd:ed:63:ff:b7:ca:71:58:b5:78:80:25:bf:b4:
6a:72:42:bd:07:14:dd:01:29:86:00:82:29:8a:f2:
81:2f:c5:30:9d:4f:e2:58:c3:b9:23:8f:a9:39:c2:
2b:12:90:5b:38:ea:7b:e1:b0:5f:2a:ca:32:f3:64:
2e:95:aa:0c:57:93:49:ce:35:e2:4f:07:00:78:4a:
85:5b:58:7c:07:71:59:95:0a:b8:bc:64:47:d3:fb:
44:3c:ae:72:b2:83:91:25:16:79:24:4d:f6:cb:d4:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:7B:FD:C3:80:34:8E:5D:A3:2D:6C:29:15:6F:40:5D:E4:F5:5A
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:95:08:e6:ac:df:7d:5c:3f:90:3f:c4:b2:a3:03:90:7a:69:
e3:e8:fd:71:7e:27:7b:43:54:51:c3:5c:6b:b1:54:41:8e:0a:
e9:53:94:ae:f6:71:dc:71:bc:fc:18:ce:70:21:0b:8e:69:8c:
58:26:5a:da:6a:90:fb:23:2a:26:95:2d:43:77:86:c6:e8:c5:
cd:fe:76:5d:eb:92:66:8b:29:96:f9:4e:ed:b5:38:2c:10:34:
b4:12:62:2e:4a:e6:7d:44:d0:25:0b:70:f8:68:8f:46:52:b2:
2b:2e:55:7c:94:b9:92:aa:14:53:ea:ed:e8:73:ee:e0:27:bd:
09:e3:c4:9f:da:61:b9:64:0e:b0:6e:fb:04:e2:e0:f6:30:55:
b4:bd:5d:da:1a:c0:ac:f3:00:8d:6c:61:7c:1c:ed:d7:5d:b2:
7f:ed:51:93:7d:ec:8f:b9:a3:7d:05:3f:60:d4:a5:6f:b2:02:
bd:d8:b8:ec:65:43:be:ed:8b:ac:40:8b:58:b0:35:4e:f1:42:
2d:d5:59:91:b0:4b:9c:a1:fb:dd:45:d0:5f:29:0c:2e:57:66:
12:8b:88:98:1a:74:67:8c:b0:ad:46:a2:2f:07:88:1f:2b:69:
c1:66:a8:e6:40:12:8e:36:ef:a9:3b:43:d0:99:56:ac:6f:56:
6f:0f:be:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfgdBspCIcao2MAxOvrvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0
ZmMzZmEwHhcNMjYwMzAyMDMwMTA2WhcNMjYwMzAzMDMwMTA2WjAzMTEwLwYDVQQD
Eyg4ZmZiN2JmZGMzODAzNDhlNWRhMzJkNmMyOTE1NmY0MDVkZTRmNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f+akpyLaOEd0YjtHcYNgyg+hgi2
nxSRyIkDEU0OEsz66gk+nJFzDoCmKNZlOy0S1w1YiG5ZoZ+gT9A92e/Pl9II+smt
+CWZLy1pUPMW/StDjurmP5VHvhL+o+XJ70baJNM9on5f257Sftr1Ayti39KBbOc8
a6tBeMMRPxgykeFysRgnMVMiNK2a2jCIiY+si6mk2v5lve1j/7fKcVi1eIAlv7Rq
ckK9BxTdASmGAIIpivKBL8UwnU/iWMO5I4+pOcIrEpBbOOp74bBfKsoy82QulaoM
V5NJzjXiTwcAeEqFW1h8B3FZlQq4vGRH0/tEPK5ysoORJRZ5JE32y9RBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/7e/3DgDSOXaMtbCkVb0Bd5PVaMB8GA1UdIwQY
MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt
ZTgwOTJkZDY1YzdmLzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm
LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpUI5qzf
fVw/kD/EsqMDkHpp4+j9cX4ne0NUUcNca7FUQY4K6VOUrvZx3HG8/BjOcCELjmmM
WCZa2mqQ+yMqJpUtQ3eGxujFzf52XeuSZosplvlO7bU4LBA0tBJiLkrmfUTQJQtw
+GiPRlKyKy5VfJS5kqoUU+rt6HPu4Ce9CePEn9phuWQOsG77BOLg9jBVtL1d2hrA
rPMAjWxhfBzt112yf+1Rk33sj7mjfQU/YNSlb7ICvdi47GVDvu2LrECLWLA1TvFC
LdVZkbBLnKH73UXQXykMLldmEouImBp0Z4ywrUaiLweIHytpwWao5kASjjbvqTtD
0JlWrG9Wbw++0A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:00 2026 by rpki-client