Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
File: VuQeJgHcL651xob7L5f8EZqZM9U.mft (raw, json)
Hash identifier: Kl+aHXwHT6S8rcJIijGZTkLT5l1VaLm4+2F4VNvi6As=
Subject key identifier: 08:BD:EC:BC:96:D7:3F:CB:94:67:42:41:67:05:BE:CC:32:14:64:F2
Authority key identifier: 56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
Certificate issuer: /CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Certificate serial: 019FA2CE468C5EC0A50F473E443C484AB5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:55 +0000
Manifest this update: Mon 27 Jul 2026 09:00:55 +0000
Manifest next update: Tue 28 Jul 2026 09:00:55 +0000
Files and hashes: 1: GllJhYIQ9j4VpqaoJfCJ_OkyoAA.roa (hash: xbAGqvm/a+w+0UN4pl9t7r3UPR+SnhlaAfKReQWFXeI=)
2: VuQeJgHcL651xob7L5f8EZqZM9U.crl (hash: arvhCCJwkoYCoQ/+lSQVsB6BgZHMSeHsWa4ytlSyxDE=)
3: Z4T7Q0-QJJksCVhVwupiW0UlX7k.roa (hash: CukIOrDxoOKRWrlt6E9jWHNJXojigZFQyEslPspkR3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:46:8c:5e:c0:a5:0f:47:3e:44:3c:48:4a:b5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Validity
Not Before: Jul 27 09:00:55 2026 GMT
Not After : Jul 28 09:00:55 2026 GMT
Subject: CN=08bdecbc96d73fcb946742416705becc321464f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:8c:d4:76:8e:7f:12:a7:ae:cd:a6:8a:53:
d3:df:53:8d:8a:92:3c:99:30:fc:5a:12:8d:24:91:
5e:92:8d:66:41:d1:da:6f:c8:a4:b0:8b:1c:37:5d:
b8:dd:2e:f3:27:76:4f:89:98:61:7b:5a:7a:5f:65:
8e:c0:77:a0:dd:4e:24:b7:6e:16:b1:1c:bc:e0:e5:
a1:5a:ce:91:69:9f:f3:aa:e5:b7:1e:d6:04:13:1b:
df:4a:13:49:94:55:87:13:a5:12:37:0d:10:14:bf:
1c:78:d1:0a:33:9d:d0:9f:a9:81:46:99:53:47:95:
7c:32:65:f8:6f:1b:b3:89:5a:d7:2d:33:63:e8:eb:
71:ad:d8:3d:b8:25:a9:0b:ea:45:0b:78:1d:1d:64:
58:c7:86:7b:0d:ff:af:b9:e5:83:5a:a0:91:9a:bc:
3c:ee:37:9c:1e:25:16:4f:b0:f8:1c:5c:5a:ea:09:
3d:c1:cc:c8:3f:40:95:95:a8:e1:3c:06:b2:7b:7e:
8c:e3:9d:55:65:79:7c:57:d5:6a:e0:67:d3:7a:00:
ed:0b:53:c4:34:b9:fe:ac:a1:d1:b2:b7:1a:1f:18:
d0:70:24:b5:7c:06:fe:77:7d:7e:8c:ec:0b:b1:5c:
10:b5:9f:89:59:32:73:08:ed:9f:55:8d:65:ca:14:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:EC:BC:96:D7:3F:CB:94:67:42:41:67:05:BE:CC:32:14:64:F2
X509v3 Authority Key Identifier:
keyid:56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:cc:bb:f7:9c:fd:dc:d8:19:9e:15:e5:db:c1:65:c1:f9:
6f:c7:62:97:54:6a:1f:11:a4:11:2a:9f:8b:0f:9d:e5:be:a5:
7e:66:7d:b3:45:8a:fb:b4:d6:e9:0e:05:d4:f9:a9:f4:88:21:
c6:e8:c8:5a:d5:a6:e1:8c:d1:83:f7:02:ff:2c:e7:d1:f4:23:
46:28:9b:3f:57:9b:e2:70:c0:97:db:b9:f6:6c:c2:2e:91:99:
95:f7:7e:54:30:0e:df:28:f7:bb:3e:e5:61:f4:f1:82:a0:33:
c4:ff:2a:c2:ee:7a:e4:8c:a2:bb:b0:fe:de:46:06:fc:f6:2d:
53:e2:c6:32:6e:8b:d9:6c:60:b0:d7:4b:b2:4b:9b:7a:d8:0f:
85:9f:d9:cb:59:33:9c:70:77:ef:83:fa:18:30:66:53:db:65:
c9:4a:e7:7f:0d:8c:9a:65:c3:07:ca:12:f9:d8:f4:32:a5:2b:
c0:9c:09:e5:cb:8c:94:3b:37:40:b9:76:82:1f:94:9f:25:a3:
e0:1d:e4:29:b5:44:ed:94:41:bf:23:37:6f:8f:17:ac:25:c8:
99:df:50:75:56:02:8c:e4:6a:42:97:83:32:c8:95:74:d8:c8:
dc:36:21:4b:8d:10:8f:3b:e2:07:ce:0d:0b:f9:62:8f:f7:ec:
d8:04:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:20:25 2026 by rpki-client