Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier: DpOJUXIpdxKAUKPBC/elU1KpW9uSClfLGo8cH5dX4Z0=
Subject key identifier: 35:61:5C:93:25:59:F2:9C:1F:56:E3:76:F5:4D:CB:AD:CF:F2:54:D8
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial: 019D389C21F4146BDC300490F6862DC977C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number: 06C3
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: APCVsNpvhqWeQcqweSvgt5Wftok.roa (hash: c6yMfxg6aqbcbGYpnlzDdHyhq9WGqsNthHIttzMp2bY=)
2: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: kMA+LbDLJWqBvr17NvreahFcUcUXrpyp3y017AwPpH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:f4:14:6b:dc:30:04:90:f6:86:2d:c9:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=35615c932559f29c1f56e376f54dcbadcff254d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:26:4d:eb:3d:64:f6:e6:56:92:e2:3c:bd:
82:14:68:ae:d4:79:82:f3:67:8e:ce:91:ca:a3:2f:
91:34:4a:83:c4:ae:d2:94:98:ba:f4:a2:b2:4d:7b:
6e:b9:fd:da:c3:c6:d5:97:70:0f:54:89:20:c2:f2:
b7:48:09:70:01:aa:f2:ed:a9:d4:a1:0b:a3:f2:bc:
9f:05:08:7f:21:ec:3d:18:ff:a0:d2:48:79:52:e7:
bf:49:8d:9f:bd:77:9c:fd:1d:b3:30:3b:65:10:83:
44:3e:35:ce:72:14:3d:23:31:46:3f:e8:59:28:c5:
f1:27:ea:d7:89:72:46:64:b1:33:2a:d7:57:a9:e4:
43:0a:21:dc:80:e4:72:1a:81:cc:5f:ed:44:ac:6c:
01:fc:6f:bb:7e:d6:9d:cd:52:88:2c:8f:d2:de:8e:
e3:9b:a9:02:ac:cc:71:80:06:50:b8:e9:24:5a:98:
35:71:98:c7:6c:52:48:52:1b:59:a1:b9:dc:8b:fa:
66:80:85:08:d4:59:38:0b:fd:c7:3a:8e:11:0c:01:
93:30:b5:6b:30:ed:87:d0:5c:8b:6d:b7:43:c0:42:
90:d4:e5:92:01:85:86:fa:59:69:58:ff:5b:8a:9e:
d4:7d:68:cf:4b:07:7e:a8:c7:b8:ea:ab:7d:12:c8:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:5C:93:25:59:F2:9C:1F:56:E3:76:F5:4D:CB:AD:CF:F2:54:D8
X509v3 Authority Key Identifier:
keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e6:36:5d:a6:96:9e:b1:45:f4:17:a0:12:9d:f2:78:28:fa:
51:b1:fe:a4:a8:aa:41:80:e7:75:a9:09:d7:3e:2d:c4:9e:ec:
69:b8:3a:7e:aa:9a:c5:ab:48:08:d4:9e:1a:8d:16:aa:d4:91:
c3:ca:2d:3d:ec:c9:34:4e:81:5c:29:cf:bf:ae:6c:76:73:09:
b6:f4:12:60:a4:63:3a:c3:08:ad:ff:7d:19:db:62:da:7c:b2:
77:73:c6:76:d3:fa:e4:a1:1c:c5:de:1b:9b:5d:92:3a:07:47:
63:54:3b:2b:09:e6:5b:85:f6:71:55:ad:e5:01:a3:23:51:4f:
f6:76:cd:05:6f:bf:a7:8e:78:ae:d7:65:00:c6:4d:db:f1:86:
8f:82:60:c1:89:a5:e4:04:eb:65:5f:4c:59:69:f8:4e:35:40:
78:9e:36:55:ab:6d:4b:01:72:00:0a:d6:15:54:bd:c0:c8:80:
59:de:95:ea:89:db:68:23:dd:81:4a:64:2e:dc:ec:2c:2a:7e:
36:7c:84:be:d7:f4:ac:9c:b6:c0:4f:5a:de:d8:6b:18:85:84:
45:88:b5:12:5d:f4:d3:40:3d:f3:51:89:f5:b1:9d:4c:7e:32:
95:b6:f6:6f:5f:0f:e4:7e:b8:f3:3f:52:f2:b5:4e:10:57:52:
d4:8d:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:47 2026 by rpki-client