Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: G5hrdYv9hqbfBQ3WeokaxoiwC2TkqCnjH8xUhNAtvi0=
Subject key identifier: E5:31:AA:42:78:BA:D6:45:F4:61:80:F6:C6:85:01:76:93:D6:00:75
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 019D3977C84253205327BF048E0EB131D73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 17E0
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: eqoX9CFrRZ7WLj8t6wopGNq7Si38p1ZgHWEBqaAYxU0=)
2: wFPcFTfLNLeeu52DTqhU-V8PVts.roa (hash: NDGhqeRV7hsYmZ5mOPeghOQaf73uDqp19ZwPDNgT1mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c8:42:53:20:53:27:bf:04:8e:0e:b1:31:d7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=e531aa4278bad645f46180f6c685017693d60075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:8c:5e:5a:47:d0:a0:92:5e:87:a0:80:5b:
6d:c0:1f:6e:ed:30:5d:6a:f3:7c:f2:b1:6e:d6:cd:
c7:47:ca:e1:1f:8c:b6:c9:f3:f4:34:2c:4f:53:b2:
b4:7e:5e:7d:b4:31:f0:e8:33:f3:c7:5c:df:66:d3:
3f:09:a4:06:fb:9c:3f:3c:9b:dd:b9:9a:0a:90:35:
5a:81:2d:16:f9:eb:21:40:85:ba:27:7d:b4:94:84:
69:46:09:ec:cb:93:3c:69:5e:db:23:ef:85:17:74:
4d:62:22:b1:90:70:45:2d:42:be:e0:9a:22:98:d8:
84:fc:62:98:9e:2e:87:4b:b9:91:e9:ba:06:92:11:
4a:3c:18:57:4a:74:41:9a:74:f3:ee:fe:ea:57:61:
a4:97:3b:73:c7:15:1d:28:f9:77:14:9c:a7:3b:86:
7d:3a:99:b7:31:7c:8c:42:99:36:99:39:b7:37:8d:
95:c0:c4:06:3f:8b:38:f6:ce:84:9f:ee:98:bf:b7:
57:4c:fc:cd:a0:e0:8a:e8:08:84:2b:f3:37:47:c8:
5c:a7:57:7a:4d:3b:17:3c:eb:29:9b:fb:8b:00:90:
6e:4b:3f:b9:33:78:d1:6d:2b:4d:2c:cd:d0:dc:ab:
8d:51:4d:42:2c:4a:df:c0:cc:c9:d4:cf:2d:95:5c:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:AA:42:78:BA:D6:45:F4:61:80:F6:C6:85:01:76:93:D6:00:75
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c3:eb:ed:dd:82:f5:20:15:79:ca:ed:b7:02:25:dc:ea:dd:
86:4b:9a:27:8c:be:26:60:d7:c8:7c:1d:fd:16:f6:36:a2:d0:
3e:be:f8:11:7a:18:74:51:1e:26:f0:0d:61:86:01:45:12:08:
00:56:d2:e3:64:97:50:ad:b7:be:80:a1:9a:28:b7:c0:be:88:
a1:a9:31:68:74:16:10:0d:3b:c5:ab:4f:d1:bb:1a:73:4d:f0:
4e:7a:99:99:82:29:95:cc:cc:dd:bf:03:c6:1a:91:93:20:fb:
b3:f8:ee:40:cd:a6:24:ea:3e:cd:21:74:f8:98:11:bc:51:18:
64:c8:6a:bb:ae:1a:4a:00:ad:c7:9e:7e:29:93:e2:2e:36:a9:
95:aa:4b:d5:45:3e:8f:0c:10:e6:ae:9f:27:e1:a7:a3:f8:b7:
ff:70:86:73:51:31:db:60:41:e0:72:2e:b7:61:75:c7:a4:a1:
3b:8c:7a:a8:e6:00:85:1d:b7:01:2c:ec:12:fd:8a:cd:73:3d:
fb:9d:2c:f6:44:8a:4d:04:a1:12:7d:27:ed:9f:91:5c:b6:62:
ca:2d:ba:9c:64:95:d5:88:a6:93:b9:55:8e:f4:78:49:6f:99:
79:a1:32:08:1c:b0:24:d4:cc:5f:e4:2b:42:d2:4b:69:d4:a8:
0a:e5:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:43 2026 by rpki-client