Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier: nNXhOGalfL49BebC6ZA5FajRIGtVdclXO/HsbTLvRK0=
Subject key identifier: 29:01:01:4E:D9:3F:F7:B2:75:F8:B7:33:0B:6F:6D:DE:1D:40:C3:3E
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 019CABA1B95A15A335DFF9F07D724E004191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number: 0B79
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: NwGC9KclpkdI+xKHEGTk+CQYgLWvrfS8BiOvyjG7Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b9:5a:15:a3:35:df:f9:f0:7d:72:4e:00:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=2901014ed93ff7b275f8b7330b6f6dde1d40c33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:20:52:22:a2:1c:5a:63:26:08:bd:cc:d4:
13:59:60:14:07:12:41:a1:64:4f:18:9a:40:b9:a6:
32:e9:a6:37:27:41:74:7c:a1:bb:95:99:23:2c:e6:
fa:c3:fd:c3:6e:12:9b:17:fa:88:ff:18:74:25:ed:
c9:19:1e:13:00:f0:79:03:b9:da:53:78:2b:83:b5:
9e:a5:b8:99:fc:c9:9b:e4:13:f2:4d:53:ae:ff:9c:
61:4d:15:eb:69:73:e2:e4:46:03:5c:e7:9e:cc:77:
60:34:e7:47:53:55:eb:2b:d7:0f:0c:50:7b:1c:d9:
b4:f0:31:ed:35:db:73:3e:cf:77:ad:25:c7:9a:52:
c3:5f:c4:2d:b4:10:89:09:1d:0b:ea:59:f2:32:cd:
50:53:49:6e:34:e6:ea:47:cd:1e:81:ca:42:e8:07:
26:9d:73:21:c5:4f:7c:48:e3:b4:ff:dd:53:b5:f6:
31:9c:8d:b9:3d:1c:72:98:1a:36:66:30:a9:db:05:
72:37:86:58:65:de:4f:84:f5:e2:47:9a:ca:67:5a:
c2:51:9b:47:b5:b1:d2:9a:13:c9:ee:20:59:12:b7:
67:46:4c:88:76:fe:6f:1b:fe:2c:95:68:95:1b:74:
45:f7:95:62:4b:c5:fc:2e:0a:a6:46:99:f6:6b:b4:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:01:4E:D9:3F:F7:B2:75:F8:B7:33:0B:6F:6D:DE:1D:40:C3:3E
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:61:e3:92:25:6f:c1:07:f4:e9:a9:07:2b:c0:f2:45:c4:
82:bc:b9:a4:b1:75:35:f2:46:2d:6a:18:47:3e:de:e8:68:e6:
4d:c6:9c:f2:9a:98:04:a7:a9:9f:53:a4:53:de:c2:f4:a6:e2:
c3:be:87:d1:9d:6a:71:ee:3d:6d:e8:ec:54:f2:ed:61:b4:42:
90:08:1e:48:00:25:ea:91:81:c3:a6:85:ce:17:aa:e4:7e:54:
ef:9e:7b:53:0a:ef:ba:c0:c8:7a:0a:82:ea:be:cd:e9:39:dc:
c5:30:75:a2:d8:0c:62:86:09:42:ca:a5:92:e7:b9:8a:4a:1d:
23:74:8e:03:94:54:08:f9:f9:77:7e:20:bb:43:20:45:83:65:
e4:69:48:93:ed:37:ae:94:5b:79:ac:06:78:4b:5d:7a:fc:5a:
ba:f4:7d:86:96:dc:25:58:ee:d6:6e:62:e9:33:54:40:83:a5:
d0:70:ac:71:70:00:13:f1:65:81:a7:9e:3e:41:c3:66:11:29:
27:aa:9b:a7:16:bc:e2:f4:0c:40:9e:91:39:77:03:09:ed:ac:
c0:1f:b4:87:d8:ff:ec:4d:25:35:d4:d3:7b:09:a5:9a:4e:e2:
64:04:f8:f2:b8:22:fa:74:3d:b4:9a:4c:be:e0:86:88:60:bc:
c5:77:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:09 2026 by rpki-client