Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: EvqnYI8avQZE5zG96LRRZLgn1szchiwquweSxUagId0=
Subject key identifier: 0F:AD:CB:84:3F:1A:4C:DC:E4:48:69:ED:84:E8:40:DD:AA:94:4F:F8
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019FA2CE291DF7BF366FA4EEC779CFF18D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 0565
Signing time: Mon 27 Jul 2026 09:00:47 +0000
Manifest this update: Mon 27 Jul 2026 09:00:47 +0000
Manifest next update: Tue 28 Jul 2026 09:00:47 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: 4ATcRP36kELtufVOwjsXYwyNRIyS31Vt5dsrf5f/vXk=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:29:1d:f7:bf:36:6f:a4:ee:c7:79:cf:f1:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Jul 27 09:00:47 2026 GMT
Not After : Jul 28 09:00:47 2026 GMT
Subject: CN=0fadcb843f1a4cdce44869ed84e840ddaa944ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:ec:2d:a9:46:99:68:9a:df:59:60:c6:fe:
b1:94:e6:f6:f8:74:a4:fb:70:47:86:6b:8c:9d:60:
12:f5:6a:bb:3a:88:d2:df:48:2a:13:61:6b:a7:3b:
59:fc:0e:36:b7:f7:96:23:76:e8:d2:fb:82:7d:d3:
f6:7b:60:2c:ee:c1:3a:dd:db:ef:8e:84:76:7b:69:
02:6d:7b:f0:99:9b:31:72:c4:53:6b:91:09:4c:68:
87:d1:d7:af:86:27:db:55:10:8b:52:fd:98:91:ae:
33:5e:08:c7:51:61:ab:28:f1:7e:c7:b6:7d:bf:c0:
d1:ce:63:b5:32:ef:9f:5a:8f:66:e5:35:55:44:03:
f7:70:e0:02:bb:3c:76:12:1f:3f:5d:3f:ba:e7:ae:
bb:60:a3:ab:0f:49:37:57:31:94:8a:3c:e7:77:3e:
35:65:ff:1d:af:a9:99:e6:00:7e:c4:b2:84:d6:f5:
b1:db:ba:9e:ed:e8:a4:cd:b1:ff:a9:51:fc:e1:df:
78:9e:2f:88:30:96:e8:3d:25:66:66:bb:fe:7c:f5:
35:f2:6d:a1:b3:8a:bd:2c:ee:78:42:bd:99:53:49:
eb:cc:43:94:fa:f1:78:09:15:f8:b7:96:40:bd:bd:
67:77:22:67:30:40:0e:55:f4:6c:80:a9:b5:91:d1:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:CB:84:3F:1A:4C:DC:E4:48:69:ED:84:E8:40:DD:AA:94:4F:F8
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e9:34:08:ab:2e:00:e9:6a:16:e2:6b:6f:ef:bc:ea:c7:bb:
31:fc:82:63:41:69:1f:7f:58:e7:fe:0e:57:4d:ea:eb:27:14:
57:ec:46:23:1b:67:33:0f:9a:32:f7:45:1e:a1:c2:61:3d:63:
45:00:27:d4:a1:e6:38:76:16:ec:ee:7d:3f:1d:8e:44:6c:7a:
98:70:fb:19:87:0c:61:94:2f:2a:3d:21:6b:ee:41:ed:79:63:
57:4e:5b:03:74:da:6e:02:04:b4:b2:ec:69:e1:f1:cc:76:47:
06:87:9e:6c:88:50:8c:98:2c:43:fb:28:47:fb:90:00:ac:c5:
6b:ff:a7:b9:5b:7e:62:8d:68:55:ae:82:48:b4:5f:6d:ef:f6:
2f:80:6e:b0:0d:b9:78:0c:24:2f:7f:7e:c9:00:49:7a:9c:f1:
31:e8:ff:f3:67:56:1f:f3:e0:1d:07:3e:17:8f:72:03:f4:04:
5a:f8:73:d4:02:32:83:8c:48:1f:70:f7:41:f6:3b:fc:3f:0a:
72:83:e4:b6:d0:cd:8d:5d:ab:cd:0b:cc:ae:cf:e2:08:ad:cf:
7a:c9:e7:19:a5:c8:ca:1c:30:9f:1c:78:75:55:f5:ff:eb:20:
71:6c:db:32:01:2e:d7:63:9d:df:c2:78:d0:e4:3c:5f:3c:18:
e4:0d:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:53 2026 by rpki-client