Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: 2KD8UvgFeLFpBm5vdPI+PP6C7io7UjClxkEOjYPuRck=
Subject key identifier: 3D:4A:F7:A3:1B:F4:F9:DF:80:CC:E3:2F:48:2D:F7:FC:43:09:B9:93
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 019CAE6C100BAA0B853C853B93BB7A1E2221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 12D0
Signing time: Mon 02 Mar 2026 12:00:43 +0000
Manifest this update: Mon 02 Mar 2026 12:00:43 +0000
Manifest next update: Tue 03 Mar 2026 12:00:43 +0000
Files and hashes: 1: dlqROMdfCCOUh5UHb5fE0VDhtw4.roa (hash: HsyhNJLABKhY0BJRKl4WOTqYOZ/p/2IS1Tc+avRiuXo=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: 9Q9RmdLE7z8JLxx1pTPQCuQQo9/07NiXxQCVuIYUHXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:10:0b:aa:0b:85:3c:85:3b:93:bb:7a:1e:22:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Mar 2 12:00:43 2026 GMT
Not After : Mar 3 12:00:43 2026 GMT
Subject: CN=3d4af7a31bf4f9df80cce32f482df7fc4309b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:ee:1d:d5:1a:0e:ca:58:c1:c8:95:7a:8b:
b4:31:c7:5a:76:41:1c:3a:5a:4a:eb:63:26:9c:65:
5f:ed:aa:c0:de:ab:b2:ff:f3:6d:60:12:8b:1d:0b:
23:80:2d:35:00:b0:7f:30:af:8f:5c:10:e0:2c:4a:
04:c3:bc:41:50:dd:5e:f7:0a:12:49:30:eb:98:f8:
0c:1f:01:d9:70:36:80:76:27:e5:75:c4:1c:b2:5d:
fd:7a:62:07:a0:62:91:73:4f:65:fd:9c:eb:28:0e:
59:d2:7b:b9:43:bc:b9:9f:38:19:65:b2:dc:77:3a:
2b:af:66:db:02:51:f7:21:74:fe:30:53:d1:08:58:
de:ee:31:49:f8:8e:a2:0a:46:67:ec:73:67:6c:72:
41:ad:59:c9:e2:8b:7b:b1:93:cc:b1:73:42:d8:d6:
d9:60:b2:44:73:c4:85:0e:34:1d:0d:ab:9e:f2:c9:
a4:61:78:65:81:4b:07:36:03:ad:9e:85:dd:1f:6b:
87:b5:6f:ea:cd:95:21:b2:89:4d:8b:e3:7c:27:91:
44:b7:bb:77:8d:3e:04:a1:ba:bd:7b:a0:ba:b6:16:
58:85:5d:21:02:04:9c:6a:76:69:e9:71:8b:f6:eb:
6c:a9:ef:ec:ce:21:fc:e2:3d:82:97:a0:38:39:4e:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:F7:A3:1B:F4:F9:DF:80:CC:E3:2F:48:2D:F7:FC:43:09:B9:93
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a8:ac:31:d8:d1:3f:a5:ce:44:c2:a3:ac:2c:08:c6:4b:93:
48:91:f0:96:3d:f2:0b:0c:23:3f:60:56:c8:b0:4d:1a:57:4a:
96:75:55:6f:bd:e0:3f:b3:f8:eb:4b:54:0c:76:13:26:3a:36:
54:f7:a0:8e:88:8b:2a:29:11:8f:d1:61:3e:bb:3a:fe:73:87:
35:4f:19:25:a6:07:dc:d4:ff:ad:97:70:1e:51:15:37:14:35:
a3:36:84:5f:f1:80:12:dd:ba:05:75:ba:ec:fe:0d:21:05:48:
6d:a9:dc:df:55:d8:71:63:5a:96:84:aa:ec:79:47:38:0d:28:
35:9d:dd:c6:8f:1d:dd:ca:26:9c:70:13:81:48:ee:84:d8:ae:
ab:f6:4c:e2:73:ec:e3:ac:e5:20:a2:4a:35:46:09:63:41:bf:
78:4a:cb:8a:11:0a:fc:2a:2a:48:35:93:c8:7c:7a:2b:d5:1b:
1c:e5:f9:fd:4a:3f:ec:9a:2f:97:75:7e:b8:4e:99:28:cf:80:
89:bb:08:61:cf:ef:44:98:b0:be:dc:5b:4c:a4:d7:95:3c:d5:
c0:1e:ba:3d:08:d2:51:da:c6:fb:c4:db:d2:2f:cf:e6:b8:f0:
fc:af:35:69:5a:bb:a0:5a:cf:37:ce:50:80:41:d9:e7:27:49:
64:be:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:26 2026 by rpki-client