Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
File: VlIv9fvKiFRLh6NC_veNHJH8_ds.mft (raw, json)
Hash identifier: 3VMgtcIIeBjMVf7Trz6b3ZWfyiQ3bFjYqx+KGObof6w=
Subject key identifier: AB:F6:E6:63:43:40:CD:93:94:8A:BF:92:10:4E:74:CA:42:68:07:06
Authority key identifier: 56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
Certificate issuer: /CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Certificate serial: 019DDD9F22ED56651E076D24A5AC6F5EE9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
Manifest number: CE
Signing time: Thu 30 Apr 2026 09:01:27 +0000
Manifest this update: Thu 30 Apr 2026 09:01:27 +0000
Manifest next update: Fri 01 May 2026 09:01:27 +0000
Files and hashes: 1: LCWWGgiEkfv8IQFbDtZx-krsGxo.roa (hash: h0XnQpGh2D7sxxvTcL/GJXSaEJwSVHnwUOU+xwPMPZI=)
2: TrfwfhcY8GGswLkgJrkJWsWSAlc.asa (hash: zmO01xmmzNKQw6cPo8ZkDqbcz8cu3YAmuN8CJGkozWA=)
3: VlIv9fvKiFRLh6NC_veNHJH8_ds.crl (hash: qkzhpxitZjnQM2RAPiY5pq+4WCUbXU3HlOhmwrFEVLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:22:ed:56:65:1e:07:6d:24:a5:ac:6f:5e:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Validity
Not Before: Apr 30 09:01:27 2026 GMT
Not After : May 1 09:01:27 2026 GMT
Subject: CN=abf6e6634340cd93948abf92104e74ca42680706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:4d:63:af:cc:94:a7:05:ef:43:60:11:1b:
af:4c:42:d4:2f:d7:b8:87:92:09:a8:d5:aa:1e:67:
5f:de:f8:d3:7e:2f:59:c3:89:e9:db:1b:e5:9b:15:
2e:24:24:53:c8:45:bb:c6:38:aa:3e:2f:88:9f:3e:
a0:7f:cc:95:de:83:5c:10:9a:7d:de:d1:43:cd:53:
c4:a6:81:ae:0d:8f:7f:5f:3a:37:15:d5:80:70:5f:
ba:e6:78:9d:03:72:ae:5c:0d:b9:e6:d4:c7:31:7f:
1b:c8:56:ea:5a:31:36:08:d0:57:0f:7b:f7:ee:a3:
52:da:95:44:7e:01:a6:e8:68:21:72:01:a7:5a:6f:
30:56:4d:7a:03:87:a5:a8:45:32:c3:9a:aa:26:4e:
47:d8:a4:18:d6:a3:b2:a9:6b:83:03:52:1e:30:cc:
a2:0f:24:87:b9:0b:0c:35:05:54:00:20:a6:4d:0c:
93:cc:ac:ca:6e:df:06:ae:9e:43:07:c6:aa:83:28:
fa:24:58:a2:80:96:19:a2:00:a8:e7:46:bf:09:31:
05:88:26:48:a3:bb:4e:94:fa:73:b3:3b:06:da:58:
a6:4d:16:8c:d9:8b:29:ea:49:19:5c:7f:ab:61:4a:
34:96:92:8f:83:dd:50:1a:60:11:06:78:7d:bf:2a:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F6:E6:63:43:40:CD:93:94:8A:BF:92:10:4E:74:CA:42:68:07:06
X509v3 Authority Key Identifier:
keyid:56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:18:c4:3e:8d:3b:58:6b:57:fa:75:3c:3f:b8:da:eb:11:
46:d8:34:f1:55:76:e6:66:f7:48:91:c0:f0:cb:da:bc:5e:30:
3e:1b:e1:54:1c:96:b2:93:5a:3e:ed:ca:ad:12:15:58:9a:fa:
bf:7f:68:c2:16:3e:3f:d6:27:dd:dc:a8:02:3d:c9:3d:f6:40:
61:68:65:1b:60:34:91:ce:87:78:83:38:b2:d3:6d:da:1d:03:
6a:70:b9:3a:c4:9e:15:ab:ee:6f:fa:bb:8a:5b:0d:f8:fc:3d:
09:79:95:90:14:50:9c:2f:9a:7f:2e:fe:5b:d3:84:1b:41:f2:
73:09:f7:ca:23:37:0a:43:c6:30:b4:2a:1b:19:ac:70:8c:52:
a2:c6:37:5c:41:af:90:b6:ce:47:68:52:8a:41:8d:a4:0e:86:
01:50:d6:40:4f:b0:b6:d2:84:da:ef:e3:7d:99:06:a5:72:06:
97:eb:c9:ed:b6:55:4e:f2:ed:01:17:14:a2:be:43:ff:b7:42:
58:f9:04:c3:be:f5:47:f9:3f:f7:ce:75:97:57:49:b7:a4:43:
ef:00:ce:5d:99:33:95:6c:da:d7:52:94:f8:99:58:6f:8f:14:
d6:aa:96:58:aa:1b:e8:fb:a9:51:e4:64:94:69:f4:1e:cb:dc:
10:71:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:38 2026 by rpki-client