Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
File: VuQeJgHcL651xob7L5f8EZqZM9U.mft (raw, json)
Hash identifier: 3fYJo1lU5ycQ+PupzL9qCOPjAdA4cktqmddZ9gBnLDo=
Subject key identifier: EE:47:46:AE:6E:96:BC:94:63:20:46:E9:F7:84:B9:F6:EC:79:7F:BC
Authority key identifier: 56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
Certificate issuer: /CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Certificate serial: 01A08C7B364CAC269FC3D710DE8815770E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:20 +0000
Manifest this update: Thu 10 Sep 2026 18:01:20 +0000
Manifest next update: Fri 11 Sep 2026 18:01:20 +0000
Files and hashes: 1: GllJhYIQ9j4VpqaoJfCJ_OkyoAA.roa (hash: xbAGqvm/a+w+0UN4pl9t7r3UPR+SnhlaAfKReQWFXeI=)
2: VuQeJgHcL651xob7L5f8EZqZM9U.crl (hash: JWhuRvrM84mGuJvA65YSYdD3UadGIzuyMVJCpQxaiBs=)
3: Z4T7Q0-QJJksCVhVwupiW0UlX7k.roa (hash: CukIOrDxoOKRWrlt6E9jWHNJXojigZFQyEslPspkR3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:36:4c:ac:26:9f:c3:d7:10:de:88:15:77:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Validity
Not Before: Sep 10 18:01:20 2026 GMT
Not After : Sep 11 18:01:20 2026 GMT
Subject: CN=ee4746ae6e96bc94632046e9f784b9f6ec797fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:76:d6:0a:0e:fd:80:de:7a:49:47:86:4e:
d2:8a:16:9d:89:22:a3:b6:48:cb:89:f6:bb:7d:30:
23:89:99:14:d4:8e:43:8e:34:3d:72:66:fe:cc:3d:
96:3b:d4:37:9b:14:e3:9e:fc:17:cb:25:0a:0f:d0:
31:e7:f9:48:1d:8c:12:48:e3:c9:c4:5b:ef:03:5d:
dd:20:fc:e9:ba:5c:c4:8c:df:b3:80:3f:31:53:1b:
ad:64:32:d1:80:dc:03:4e:43:99:1d:61:2e:dc:08:
97:b4:8a:41:2c:54:73:18:46:02:f6:47:2a:06:c7:
13:96:f5:7d:3a:e9:a0:2d:90:4a:03:cf:ec:9a:10:
d8:0c:ae:dc:00:51:cc:62:37:81:b9:35:31:4d:87:
68:a8:b4:b5:fb:c5:a3:99:d0:5a:02:a0:e8:3a:04:
bb:68:ac:97:d6:27:80:3e:60:e6:0c:b5:a6:52:7a:
1a:dd:c1:70:b0:ea:e4:a0:65:83:fb:59:f1:ee:1e:
65:ff:5e:ea:c1:58:0e:69:89:8f:87:24:0e:0e:6a:
cb:eb:34:d7:6d:b7:43:d4:d9:d7:27:67:7f:5f:ac:
27:bd:bf:bf:a8:07:bb:77:dd:17:f5:f2:9a:5d:3b:
ca:61:21:a2:23:0e:ff:de:62:97:a6:ba:c1:c6:e3:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:46:AE:6E:96:BC:94:63:20:46:E9:F7:84:B9:F6:EC:79:7F:BC
X509v3 Authority Key Identifier:
keyid:56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:aa:4d:5f:ef:a0:6b:cc:90:22:9b:24:e3:f2:37:a9:51:
34:6e:3d:ce:d1:c9:06:2e:3c:09:7c:3c:96:60:75:9f:79:ad:
83:dd:9d:98:62:56:f4:2f:65:af:e7:ae:c6:5d:ae:7d:1d:01:
84:18:f6:09:9d:42:3c:db:3d:5d:2a:4d:ee:11:67:f2:7a:27:
d6:7e:4e:b3:45:c0:09:05:79:0f:ab:f4:13:57:ee:78:3b:15:
3c:5f:b6:2c:bb:dc:3c:ee:c7:fb:3f:64:a7:0f:20:0c:c2:f0:
af:e5:bb:ab:06:92:de:f8:e0:98:a2:c3:24:2a:b5:71:fd:4b:
b9:8c:5a:88:72:cd:bc:16:fc:4b:9a:3c:46:49:74:5c:65:8b:
a8:3f:11:08:3f:c0:94:df:6a:97:50:98:54:34:1f:66:a3:4a:
75:cf:e0:87:27:c2:14:39:cf:16:96:d4:18:a6:bb:4c:f2:8c:
4a:e8:e8:ca:69:aa:db:7b:a4:53:0b:f7:b7:fc:80:d9:fa:c4:
19:18:37:77:8b:48:11:2c:76:cb:c4:33:aa:53:bd:4f:26:24:
1a:70:d6:90:44:b3:6e:21:43:7d:8d:d8:b1:1c:29:57:8d:be:
e9:75:2d:00:3e:cf:9c:0e:f9:0b:b6:2b:90:59:c2:11:1b:43:
5a:7c:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:52:25 2026 by rpki-client