Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: 5IvZFgxCUTmqOSQfldEV0aCIlzstFGMih2tlYP5qvY8=
Subject key identifier: B2:E9:CB:CA:57:B7:41:FE:65:DB:54:4A:DE:16:98:9F:95:99:AF:7D
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019D397782927A016C0FFCC82BC2A9D57249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0411
Signing time: Sun 29 Mar 2026 12:00:26 +0000
Manifest this update: Sun 29 Mar 2026 12:00:26 +0000
Manifest next update: Mon 30 Mar 2026 12:00:26 +0000
Files and hashes: 1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: Lfun4dfmOrqcZhKNEOGgPUkpK34r63gmZuZsrA8e/Do=)
2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:82:92:7a:01:6c:0f:fc:c8:2b:c2:a9:d5:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Mar 29 12:00:26 2026 GMT
Not After : Mar 30 12:00:26 2026 GMT
Subject: CN=b2e9cbca57b741fe65db544ade16989f9599af7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:e1:77:ad:5a:1c:21:63:32:83:12:3c:de:
26:8a:38:d8:60:bb:91:ff:1c:fb:4a:e6:11:49:2c:
eb:a7:b3:c6:c3:9c:72:3a:69:ab:d4:95:dc:60:a6:
8b:85:73:e1:d2:60:cd:2c:99:1b:d7:ea:5c:46:55:
1f:37:e8:dd:d9:ed:0c:e0:00:04:b1:5e:32:07:aa:
db:5f:6b:03:ea:ee:ff:72:e5:d1:69:a9:2a:04:4a:
91:13:68:48:54:19:6f:72:9a:d1:c5:bb:4b:21:e5:
9e:80:ff:49:cb:f4:1f:44:02:5c:be:c7:e3:02:98:
22:66:20:85:89:35:f7:6a:77:d5:42:11:73:4e:a0:
7d:ef:76:ca:9e:aa:01:47:fb:d9:57:54:93:6f:aa:
72:1c:dc:69:07:ce:c9:d7:36:74:92:80:32:d6:48:
b6:ff:45:0f:37:e4:33:2b:4d:56:4b:79:5c:9e:9d:
9c:39:5d:c9:be:4a:78:bd:b7:02:7f:d1:41:88:2f:
02:b7:4d:10:f8:52:5f:48:87:43:62:a5:c8:67:ed:
31:bf:09:5c:14:44:98:d4:9f:58:54:a8:4f:38:56:
97:60:92:84:cf:23:db:e3:3f:c4:56:d6:18:86:19:
b0:7a:a8:b7:e4:95:d8:1a:68:cd:bb:0a:76:b6:9f:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:CB:CA:57:B7:41:FE:65:DB:54:4A:DE:16:98:9F:95:99:AF:7D
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:70:07:ac:59:1d:c0:0e:27:cb:f5:06:4d:ae:a3:64:47:45:
57:87:ee:39:e5:d8:4c:ee:74:14:37:8a:43:df:96:92:df:f8:
d0:90:bb:ec:e3:f7:61:00:10:d2:50:6e:b0:c1:f2:f8:ff:4d:
93:30:ea:ad:1c:99:54:40:e7:3e:d1:8d:79:93:3f:ee:fb:e4:
5f:8f:34:10:85:4e:6f:cc:a6:96:2b:87:73:98:58:a5:82:34:
7a:d0:ce:34:ca:28:19:ba:65:4f:f3:19:47:68:5e:76:1b:0d:
a4:26:24:87:ed:93:da:71:35:2e:a6:1b:fd:6c:a8:68:c5:44:
97:bd:7d:bc:4a:fd:b6:9c:b0:7d:8d:27:e1:44:09:5c:b9:b7:
d1:0c:ea:1e:bb:73:24:f3:29:33:be:6f:f6:62:d7:4f:f1:fb:
8b:43:9f:ef:87:c2:d9:4d:d3:a9:64:cf:77:c4:ec:11:7e:99:
6a:8c:4b:ba:a6:67:a7:17:1f:49:89:08:9d:c8:d6:85:f9:83:
49:16:41:ec:28:18:9a:48:16:aa:1f:53:03:f7:51:37:e1:57:
88:a3:ee:5e:66:bc:5e:a9:8d:6e:5a:5c:a0:3e:74:4a:44:b0:
cf:7d:6f:3b:0b:ce:61:b8:a7:e8:e7:f5:05:8c:5e:62:36:3e:
e2:e9:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:09 2026 by rpki-client