
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: a/DfmhP1cgLpVrGNuZr4SGquTzV2HzNoAup5HjQBlWE=
Subject key identifier: DF:75:F5:D1:F0:C3:85:53:D6:98:94:9A:E5:46:AB:4A:72:B5:5B:84
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 01A17DE20221686BD30313DDF7B6A0F55511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 065B
Signing time: Tue 27 Oct 2026 15:02:05 +0000
Manifest this update: Tue 27 Oct 2026 15:02:05 +0000
Manifest next update: Wed 28 Oct 2026 15:02:05 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: H1GuFu4l9JQyTN6Gw+Q2DQLdkk5Q7ABSsDVfwKoJ3rY=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e2:02:21:68:6b:d3:03:13:dd:f7:b6:a0:f5:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Oct 27 15:02:05 2026 GMT
Not After : Oct 28 15:02:05 2026 GMT
Subject: CN=df75f5d1f0c38553d698949ae546ab4a72b55b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:0e:51:73:f5:77:0c:24:6f:2c:58:46:e9:
8b:0b:81:f9:a6:85:f7:87:65:88:b0:13:13:33:03:
52:b0:87:1d:c0:76:9f:d2:c9:21:0a:7e:00:14:66:
75:df:d9:ec:ea:75:4e:8e:56:df:2c:5b:7d:bf:05:
41:79:44:bb:21:6e:3f:71:d3:56:ff:8a:70:76:36:
93:3d:2a:ba:f0:01:a8:cd:8c:ed:37:96:02:39:89:
ec:c6:fa:7f:17:bd:ad:16:a6:b8:00:df:a8:89:78:
46:ea:d8:b4:09:e0:3b:a0:9b:54:1d:13:c6:13:7f:
cb:f0:ad:f4:03:6a:ac:69:5f:fe:da:1a:08:c3:a4:
08:53:f5:e3:b3:94:03:34:fa:51:7e:83:07:79:18:
94:c1:26:7e:25:3f:91:a8:48:e1:3e:06:df:aa:db:
1a:60:9b:ae:1e:8c:6c:ed:ec:ff:0d:cd:5d:1f:2b:
ce:09:22:0d:72:75:a7:e2:7c:fb:37:01:83:b0:c6:
b3:13:55:cf:b9:b0:ed:12:39:d3:a3:80:34:ec:1e:
ca:b9:f5:67:16:2a:c8:fe:3e:c3:c1:ab:9e:9f:85:
11:a3:8a:e4:9a:a3:be:f8:31:84:7a:6f:67:50:ec:
85:71:be:fb:bd:ce:c3:46:06:5f:0e:72:25:63:67:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:F5:D1:F0:C3:85:53:D6:98:94:9A:E5:46:AB:4A:72:B5:5B:84
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a2:b0:b5:cb:b5:e9:93:47:0d:9f:e3:dd:37:de:72:98:c7:
5e:2d:75:82:ac:f0:e7:7c:5b:db:22:81:70:36:73:cf:de:0b:
6d:57:df:63:bb:e3:a1:96:88:69:7e:b0:c1:39:34:fa:0c:7f:
7a:18:f9:04:d3:af:a3:d1:13:5a:a9:89:00:7e:4e:23:cf:1c:
7e:73:05:95:ac:58:df:fe:0b:84:e2:01:dd:b2:a9:82:de:97:
74:62:1e:bf:70:74:c4:77:84:53:79:e0:34:ae:30:0b:a0:82:
4b:4c:14:98:bf:2b:03:57:52:d8:14:52:88:b8:b3:af:da:77:
7a:d7:a0:7f:e8:0a:fe:a8:00:5f:f6:0f:09:4b:1f:6c:56:6d:
47:3d:ba:9f:cb:af:2e:d3:eb:85:19:1d:50:f0:b7:f4:11:0a:
4a:44:42:36:98:1a:d9:02:5e:17:61:35:49:9d:37:8c:47:10:
d5:21:e1:dd:8d:be:cc:e7:53:b7:57:c4:e9:d1:e2:a3:53:f1:
9c:c8:d9:2f:18:66:5c:44:06:9f:5e:da:50:e7:47:66:c7:d4:
b2:3a:f7:5e:9d:f5:b2:e3:f2:07:49:c5:5d:14:b1:13:db:fd:
06:83:e1:c3:74:52:b3:54:db:e7:2e:ac:c0:6f:00:48:49:f3:
a3:c2:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:35:45 2026 by rpki-client