Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: fwgxHBOl185d8q/bSljPTtUptCj2+FDGTAsImqXEhhM=
Subject key identifier: F8:60:6D:DC:93:4A:FD:53:30:B5:AD:44:0E:A2:F1:4C:AF:F2:8F:90
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019CE5C8869476858D7E9C3BE4DCD86CFFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 03FA
Signing time: Fri 13 Mar 2026 06:00:49 +0000
Manifest this update: Fri 13 Mar 2026 06:00:49 +0000
Manifest next update: Sat 14 Mar 2026 06:00:49 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: kQCdu+GB7ByuenXujan8bYJ4831+cHlPO9Syq+7rR6k=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:86:94:76:85:8d:7e:9c:3b:e4:dc:d8:6c:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Mar 13 06:00:49 2026 GMT
Not After : Mar 14 06:00:49 2026 GMT
Subject: CN=f8606ddc934afd5330b5ad440ea2f14caff28f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:4d:8d:ad:5f:a7:c5:84:c0:13:6f:5b:be:
e9:0e:11:31:da:a2:cd:a2:9c:a3:59:0b:27:0a:f1:
80:5e:0a:fe:06:3b:42:d9:a0:ff:da:75:af:3c:06:
ec:d7:ca:e4:3f:05:12:6b:97:23:3a:29:db:8e:23:
7e:08:0c:a8:86:54:26:fd:de:98:9a:9d:0b:81:cb:
ef:c3:3d:3c:76:01:c5:52:1f:af:4e:cd:c6:6b:70:
6d:a1:0a:fd:c6:78:3a:64:62:cd:57:dd:40:2b:e7:
fa:61:61:ba:28:7f:b2:7c:16:7f:d5:1a:44:e4:64:
c3:56:47:f9:d2:89:fc:2d:57:f9:f2:25:a9:25:f5:
44:a6:5f:16:6e:90:ea:9f:7d:ff:66:d1:cc:67:99:
d9:44:60:b5:eb:b9:a3:bc:17:e6:a1:d7:06:13:64:
97:ca:95:3f:bd:a4:f6:f6:b0:b5:fd:3c:e5:ea:e4:
69:c0:ab:af:d5:13:88:08:f1:05:ae:a0:96:1d:0e:
77:b1:47:a7:48:95:66:e5:89:83:4e:1f:98:ac:68:
b1:cd:49:76:1d:a8:0b:8b:6d:c9:25:77:eb:5f:25:
66:67:00:c0:74:ab:db:79:6b:a8:ec:6d:9d:95:5f:
4e:5f:a0:38:8c:99:37:92:1c:53:18:84:5a:dd:ad:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:6D:DC:93:4A:FD:53:30:B5:AD:44:0E:A2:F1:4C:AF:F2:8F:90
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2f:c5:92:94:16:ab:e4:9d:86:c8:b6:04:ba:33:99:65:a8:
4c:36:da:93:2c:67:b1:05:3b:aa:52:81:cf:6b:fe:a0:cc:54:
61:66:ef:7c:39:46:6a:37:ac:31:1f:56:9b:28:29:99:63:33:
dc:26:e8:b5:74:d6:3e:e0:06:d0:5f:aa:f6:5f:d7:07:e1:8b:
f3:0b:a7:66:d2:54:a7:a1:69:2b:d9:c9:16:a9:37:d5:bd:b3:
61:ad:43:85:4e:8a:d3:08:dc:14:31:f3:12:85:f1:f0:5d:86:
d3:35:9e:00:9f:62:6f:e3:95:dd:b0:e0:4e:ed:21:16:e7:59:
5a:86:70:c7:d8:14:04:42:12:07:1f:3a:50:cb:e6:00:61:68:
7f:67:45:d4:53:a4:32:4b:e1:ef:d8:8c:e1:59:23:82:bd:f3:
9d:46:b7:33:6c:cd:a5:61:48:76:c6:ef:26:ba:a5:3c:51:ae:
2a:94:41:b2:88:9c:7f:b8:9a:06:b2:8e:a4:12:19:d5:ac:69:
49:72:f5:5b:3a:47:e6:f1:44:d5:d3:b5:65:a7:b5:89:49:9f:
2d:a1:19:ea:ce:ba:48:08:d8:4e:6d:6c:df:e6:51:70:29:19:
42:aa:0d:2d:5e:0a:82:3b:dd:88:e1:2c:68:48:ec:ca:f4:c0:
8e:da:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:54:15 2026 by rpki-client