Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: pCkXrMSdxDpgEhb0HiDIOrgFwN7YGf2kIN/UGn6aOPg=
Subject key identifier: 47:30:9F:B3:94:5F:2B:27:83:09:52:54:F8:1C:57:42:73:D1:BE:34
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019DCF75F6F592F96DB235FA6F0C68158962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 0473
Signing time: Mon 27 Apr 2026 15:01:47 +0000
Manifest this update: Mon 27 Apr 2026 15:01:47 +0000
Manifest next update: Tue 28 Apr 2026 15:01:47 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: RRKDkGQ+QX9iTuunQqy/G7MUVOK6s4zv1DBlm8nyfbA=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:f6:f5:92:f9:6d:b2:35:fa:6f:0c:68:15:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Apr 27 15:01:47 2026 GMT
Not After : Apr 28 15:01:47 2026 GMT
Subject: CN=47309fb3945f2b2783095254f81c574273d1be34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:c7:18:1d:91:a7:a9:a6:66:6b:0a:83:99:
31:80:20:9c:25:25:35:d4:d9:ac:69:b8:d3:99:97:
d9:63:80:ed:e3:9e:1d:5b:3e:42:07:a1:02:0e:ab:
ce:28:0d:38:50:7d:71:3f:d8:d5:8f:d8:4d:2c:a6:
d6:2f:a2:41:f6:bf:14:11:fc:a6:05:9c:cf:25:19:
1c:9f:50:61:33:aa:8d:ce:22:01:ff:8e:7b:45:03:
ec:a3:78:0e:d9:fd:4a:6d:81:f6:10:55:a4:39:c0:
82:96:a2:f5:9a:1b:85:92:a7:cb:42:46:b1:2e:af:
3a:ff:b7:30:9c:d8:be:6b:c2:d2:65:2f:62:b5:c4:
66:6a:55:40:bc:4b:a3:45:28:06:8c:ca:3b:41:02:
c2:a4:43:70:6f:c8:a9:4a:47:3f:38:5e:00:17:b3:
9d:96:7c:40:5e:82:f4:45:09:b2:d5:31:3e:aa:0f:
f9:ab:e3:11:29:fc:76:5e:fb:c4:ff:43:4b:77:28:
9d:18:c0:7e:f7:e6:3f:55:39:68:67:10:9f:47:82:
41:1e:04:d4:75:c5:c9:e4:12:5a:2c:9f:d3:24:d8:
fa:f3:9f:75:0d:67:12:ca:15:b7:14:23:08:a4:55:
76:70:c3:ed:50:9e:87:ec:c9:c2:b1:66:42:80:c0:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:9F:B3:94:5F:2B:27:83:09:52:54:F8:1C:57:42:73:D1:BE:34
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b6:56:68:9f:b9:fd:a0:b4:b0:ed:45:d8:aa:50:78:60:33:
b8:21:3b:04:cc:2e:4f:b3:05:e5:6f:5f:45:c0:54:e0:64:e9:
34:d5:67:8e:39:11:51:a6:87:45:82:80:2a:a9:ad:11:a3:08:
d3:af:46:8f:0f:f2:2f:ce:ca:ac:03:51:c3:79:36:d7:2c:05:
e4:22:0c:50:d5:66:06:ef:ad:6d:52:22:90:05:f3:b7:5e:24:
2a:fb:f2:7a:2d:a1:60:51:3e:5c:58:b7:7c:7d:82:bf:ae:8e:
72:2b:21:b8:67:68:96:3a:7c:7e:8c:a7:82:da:35:d2:a2:f2:
fb:64:55:38:69:73:ac:99:f3:28:35:f9:b3:c3:2a:c0:de:52:
bc:6e:74:3c:53:96:5d:30:39:97:c4:b5:20:f0:83:13:f1:40:
34:b9:4a:81:ee:66:a7:af:57:f7:d3:4a:cf:f1:94:79:1c:21:
85:ec:a1:0e:30:20:c7:4b:e1:cc:7b:06:fc:fd:53:97:bd:fd:
50:da:4e:dc:a1:f1:45:bd:e6:1c:2e:d9:86:bf:8d:6d:ff:4d:
07:a6:36:21:c2:96:50:9b:53:52:df:85:17:ee:64:70:e9:b4:
ed:08:c5:b7:2d:5b:03:93:2a:13:5e:08:43:56:09:b0:ac:20:
87:69:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:26:00 2026 by rpki-client