Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: 4+Dj/ok1d7lAptMQFofyhjggglXIlgez9IVjVRp6eLo=
Subject key identifier: 51:06:58:BF:CE:39:EC:0C:DD:FF:E2:FF:39:79:5D:EA:B4:0F:DF:FC
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 019D38D32B8404431C25E67EB0A1E14B74D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0E25
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: 6wW52SOqWXrfAlhosP3ynpLxyA0.roa (hash: FwT8E7oaMMyN8V9+/04Bhii7J8JtbQGmipn/OxYLQDA=)
2: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: QRvc7O5TBX/Dm8I1e7YScvI5MdirK7y/2qNcjsfK7Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2b:84:04:43:1c:25:e6:7e:b0:a1:e1:4b:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=510658bfce39ec0cddffe2ff39795deab40fdffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:53:60:d8:9b:46:4c:34:8a:3e:cf:f4:6b:
21:8f:de:b9:0b:6b:81:a0:7f:3d:a1:91:ce:13:8a:
9a:bc:60:72:1c:fe:23:c6:4f:f4:20:c4:ec:3f:a3:
14:43:58:90:d7:18:6e:4a:1a:e5:44:a2:14:4b:1a:
e0:de:4d:e8:3c:d2:04:6b:41:d9:d6:ea:34:2c:e0:
69:22:8c:03:7f:2c:c0:0d:1b:2b:f3:52:a2:54:bd:
6a:8a:28:6e:88:fc:7d:26:e0:1c:93:f8:39:9b:1d:
b7:79:5b:e2:bd:e3:95:02:51:c3:74:70:53:6a:c3:
92:e8:c2:03:4c:19:3e:d3:4e:88:e2:7f:6b:83:de:
b8:93:b0:ca:8d:98:6f:35:33:d4:e8:0c:24:02:04:
00:d6:90:8f:06:51:e1:8d:0d:54:3d:4c:0d:31:bb:
d2:c4:37:20:71:f8:b8:54:fb:7b:97:20:f7:f0:37:
f9:02:25:f7:cf:9d:ce:39:76:89:1e:7d:6a:c6:22:
03:c8:77:3c:93:9a:32:88:82:90:74:18:d5:ed:d1:
c9:af:c9:5c:b1:8f:7d:19:f3:64:51:ad:0a:ec:fc:
7d:58:7f:56:4b:50:c7:a7:cb:7e:17:0c:1d:6e:12:
a2:05:df:de:dc:cf:db:4d:30:79:7f:86:b6:e5:be:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:58:BF:CE:39:EC:0C:DD:FF:E2:FF:39:79:5D:EA:B4:0F:DF:FC
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:44:ed:8c:fd:20:56:8d:bd:84:58:74:0c:d8:03:47:cd:0b:
30:e1:f4:30:aa:03:7c:e7:6d:10:7b:e7:b6:e2:09:47:b3:d0:
8f:32:be:d5:fd:94:1b:7c:db:c7:f2:9a:6a:f7:0e:be:67:24:
97:c0:71:92:24:a1:3b:d3:1d:5f:79:60:56:42:26:ee:71:cb:
65:a9:be:3d:82:81:d0:fc:b5:de:c0:a5:32:57:8c:2a:95:2e:
a4:56:f4:1b:95:d6:b6:85:29:b6:9d:00:b2:65:a6:4b:2b:9f:
6a:db:2f:a9:d2:92:c3:45:93:d9:3a:09:bc:c0:2b:ee:5a:a5:
25:7f:60:5f:5d:9f:f4:bb:af:72:4e:63:35:e4:d6:bb:42:0f:
20:15:4e:d2:61:0d:92:56:17:7a:77:16:20:38:ba:43:57:0e:
85:01:f3:0f:f4:b7:ce:45:a8:c8:5c:68:9f:cd:b0:1b:1c:ed:
3c:18:a3:b9:9d:64:b9:0b:7b:ce:ee:df:5a:2b:ca:7f:73:04:
4b:46:a8:f9:df:14:8a:37:e4:74:49:fc:0c:bf:91:0d:66:11:
a2:1f:7a:c7:8b:f2:35:1e:41:44:a6:44:e7:e3:9e:80:ce:b2:
08:2b:e9:47:94:cd:0a:c9:dd:5c:f2:46:61:23:5e:6b:98:d5:
c6:8f:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:13 2026 by rpki-client