Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier: rVv8sztxbv6y5qrFyy1zyRN5A9hcRuT+8g+s6gZUwAQ=
Subject key identifier: 1E:EB:DD:9E:88:5C:9F:E0:20:12:55:CF:0B:3A:9B:AA:1D:A6:EF:5D
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial: 019D39AEF4749E3A7C5CE6C2FD6E123A96FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number: 159D
Signing time: Sun 29 Mar 2026 13:01:00 +0000
Manifest this update: Sun 29 Mar 2026 13:01:00 +0000
Manifest next update: Mon 30 Mar 2026 13:01:00 +0000
Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: NNUFlfj4ewccNjFn9/zsYwElMsrmzf7bLKhXd2A6Qjg=)
2: a476xuuymM4DWMU4CoIgLsWXR7w.roa (hash: b+lJy211nvU2PKiMrKNYXzy/mvhM9oQWUJhcUzYhcH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f4:74:9e:3a:7c:5c:e6:c2:fd:6e:12:3a:96:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Validity
Not Before: Mar 29 13:01:00 2026 GMT
Not After : Mar 30 13:01:00 2026 GMT
Subject: CN=1eebdd9e885c9fe0201255cf0b3a9baa1da6ef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:54:b5:49:1c:41:6f:66:d9:bb:6a:af:a7:
e7:27:bd:14:c1:2b:94:15:0e:f1:45:52:ea:d4:be:
6b:52:92:af:87:d1:bd:c7:9a:5d:5a:d8:d7:cc:09:
6b:d7:4b:1a:89:b6:8c:5e:42:d0:27:8a:6a:43:9e:
d4:4a:ac:81:af:66:73:93:d6:6c:54:bd:e3:d4:81:
2e:b4:82:bc:87:16:2c:44:cc:a4:46:1c:f7:b4:53:
78:38:29:38:5e:e0:42:7f:07:09:75:94:7a:7f:9f:
bd:11:05:92:ab:8c:01:2c:d8:a2:bf:ff:49:21:55:
17:37:48:49:f7:ea:ac:0a:fc:68:15:13:5a:82:34:
7d:63:15:f0:3b:27:09:d5:17:f8:b7:0a:98:a0:1d:
d7:9a:99:4f:ec:c5:5b:ac:36:9f:88:90:3b:9e:e2:
ff:36:7d:eb:7d:9c:f4:5d:5c:a7:62:76:8f:b3:d2:
f0:c6:fb:ce:1c:25:55:35:68:07:76:f4:70:8d:eb:
98:da:39:e7:44:c9:fa:57:71:52:0e:cb:b2:f8:3f:
f9:c8:dd:f5:e1:71:b1:b3:fb:1a:73:b9:ae:37:ab:
d0:f3:f5:36:13:50:04:b1:c7:cf:f7:d1:ef:25:23:
cf:48:bb:c3:a8:af:18:25:8a:3c:58:b8:f9:38:48:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EB:DD:9E:88:5C:9F:E0:20:12:55:CF:0B:3A:9B:AA:1D:A6:EF:5D
X509v3 Authority Key Identifier:
keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:35:8e:7f:2f:ed:a0:74:47:1e:ed:55:e2:14:39:d8:1b:b4:
d1:d7:3d:67:3e:d6:30:17:95:23:9e:93:86:53:b4:4b:e1:b2:
d6:82:de:fc:b1:db:ca:e7:77:db:62:4a:fd:38:ae:19:f3:b6:
94:40:d9:d5:5b:c0:6e:bd:c8:e8:61:e1:2b:56:01:a1:e6:a7:
bc:01:5d:5b:de:c9:fb:e7:a9:80:6e:45:d6:08:79:6b:bd:b3:
35:80:ff:35:1e:d6:31:a7:8b:25:08:e3:55:8f:ae:18:31:9f:
a8:f3:7a:63:ae:b0:dc:fb:0e:90:f2:2d:dc:76:65:3d:fa:21:
1b:65:43:96:43:08:2d:97:77:d4:fb:21:a9:a0:e4:05:a4:5e:
2f:cd:b0:23:1c:91:ea:85:3b:a7:d6:c3:ed:a6:25:1d:de:1d:
16:5f:de:5d:d3:f4:89:ea:70:b4:bd:36:aa:2f:be:4b:1a:a8:
b7:f3:dd:33:2e:32:5d:5f:6d:65:49:12:f8:ae:51:87:bb:4f:
a2:83:5d:0d:4d:7e:c9:50:22:9a:10:80:12:1e:40:ad:ad:cf:
c3:1a:38:33:6a:af:49:61:68:6a:20:b9:09:91:9f:c8:eb:39:
b3:28:2d:59:08:87:47:6b:bb:77:a1:f5:81:8a:7c:ca:8d:ba:
fd:4a:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:17 2026 by rpki-client