Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: IRtLYAbz4mzuX5knLlAv54013gfndRe188qugbtOFGE=
Subject key identifier: 2F:71:30:9B:77:B8:E8:15:67:ED:F1:3F:D3:15:52:32:F8:59:BC:54
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 01A17B16B1138216226A57F084129FAF62E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 13EF
Signing time: Tue 27 Oct 2026 02:00:47 +0000
Manifest this update: Tue 27 Oct 2026 02:00:47 +0000
Manifest next update: Wed 28 Oct 2026 02:00:47 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: PCkWiKAVbHf6iikzshtQkQQ6UPHzMJz/kZVJ/MA0paw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:b1:13:82:16:22:6a:57:f0:84:12:9f:af:62:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Oct 27 02:00:47 2026 GMT
Not After : Oct 28 02:00:47 2026 GMT
Subject: CN=2f71309b77b8e81567edf13fd3155232f859bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:75:da:6c:c7:d0:a5:ac:8d:8a:da:10:57:
d3:3d:29:6c:92:ff:6a:04:7a:9c:24:4b:23:14:16:
f7:41:be:a8:09:9f:b2:5d:76:23:87:9c:34:00:7f:
4e:b3:c8:0c:aa:9d:48:ba:36:ca:29:c6:2f:c2:fd:
66:f6:aa:84:f8:55:77:00:cc:f5:eb:3c:57:ab:7b:
98:81:a6:25:b4:97:de:6a:c9:a0:6f:7f:ef:7c:63:
58:1a:15:a9:8b:59:93:54:11:05:3f:82:5d:9e:6f:
a3:69:13:df:91:6b:89:fb:e5:b9:25:7f:9c:91:f7:
68:90:6b:4d:de:e4:41:89:9d:c7:ec:30:7e:c1:bf:
2e:2d:ff:96:bd:18:3b:ab:05:1b:15:01:4b:51:b8:
49:46:0f:c4:9c:b2:df:b7:22:e3:e0:1f:8d:60:95:
00:6f:85:ac:01:63:8c:5d:4c:d3:5c:ea:25:c5:18:
0b:f0:bf:f5:24:e0:3d:8d:ca:ca:ce:46:18:4f:9c:
c7:21:42:d6:eb:f6:48:db:be:03:19:e7:59:fb:66:
fb:c1:b3:cc:48:e5:f7:43:ba:f7:eb:46:9c:78:0a:
27:75:07:c9:7c:f4:c9:19:2e:18:f3:fe:33:1f:ce:
a6:07:1e:98:33:6d:8d:5b:95:21:22:13:14:2f:6a:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:30:9B:77:B8:E8:15:67:ED:F1:3F:D3:15:52:32:F8:59:BC:54
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fb:01:c2:8f:1e:e1:4e:e3:a4:5e:5b:48:a8:64:22:30:9d:
9a:00:d0:e3:60:50:c3:9d:d0:68:94:25:33:11:0a:a4:51:5e:
8c:e2:69:29:c7:27:6e:2d:39:1d:1d:77:66:c4:9f:07:99:60:
ec:3d:b1:e8:a0:f4:9f:c0:14:9f:80:10:5d:60:4a:e2:65:ec:
9a:1d:b6:d3:dd:45:18:94:82:1f:b9:e6:5b:af:7c:66:87:6d:
bf:f0:76:01:c9:2b:99:6f:b5:95:52:14:cb:64:aa:83:34:7d:
b6:f7:ad:65:f8:17:9f:e3:f2:37:57:59:d4:75:32:8d:3e:b7:
99:e4:35:c6:b3:87:9c:56:3e:df:8a:28:44:3b:d7:22:8d:ae:
91:4e:c0:0a:fe:78:7e:b6:2b:25:58:fd:e7:f6:2a:ab:5a:2f:
79:15:87:41:15:63:ac:66:a6:65:6e:62:64:1a:74:bb:2f:e4:
b7:db:7f:f3:39:c9:b2:89:9b:6e:c0:95:af:52:ef:56:17:77:
7e:5e:2c:d1:e3:26:1d:6f:3f:78:7b:f2:dd:72:40:18:ab:d8:
01:b7:3d:1c:1f:d6:59:af:3e:7e:21:dd:c5:ed:71:8e:64:0d:
3a:b5:70:49:d3:11:a3:5b:68:dc:26:f8:ee:c2:2f:87:3b:c7:
a5:80:30:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:00 2026 by rpki-client