Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: yjY52vx+QP7asdOHa6Q2Wp1GiZEcZrNgG3vvFUika2M=
Subject key identifier: 30:7D:36:2F:89:48:04:AE:80:B7:4F:D8:CB:29:18:18:64:8B:4C:AA
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019DCF3E67CE491407AC129EF97CDD06E299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 0796
Signing time: Mon 27 Apr 2026 14:01:06 +0000
Manifest this update: Mon 27 Apr 2026 14:01:06 +0000
Manifest next update: Tue 28 Apr 2026 14:01:06 +0000
Files and hashes: 1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: YfUZuuHfHLzpIChkwv3sm2RTAiZJwQJ6JBK+BHRTsy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:67:ce:49:14:07:ac:12:9e:f9:7c:dd:06:e2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Apr 27 14:01:06 2026 GMT
Not After : Apr 28 14:01:06 2026 GMT
Subject: CN=307d362f894804ae80b74fd8cb291818648b4caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:4f:80:8a:be:90:a3:17:36:ba:26:60:51:
77:d4:5b:66:09:0a:45:91:4e:b6:48:9a:48:5c:24:
60:7e:85:f0:2b:06:26:81:84:82:e7:8f:17:6e:06:
85:42:2c:73:ec:0d:f6:c8:e6:c6:d7:88:e7:2c:ad:
9a:53:ef:6a:54:ae:0b:9c:e1:fb:55:56:4a:5e:89:
f2:61:ce:f7:ae:e9:ff:d6:5c:ea:11:b6:43:d8:6c:
72:41:27:c4:26:89:f8:af:68:1b:ee:9c:1a:0c:f4:
c8:7c:bc:79:d7:8f:df:66:8e:74:d3:bd:9e:2d:12:
2b:0c:17:48:99:85:1b:59:01:46:81:a2:59:12:de:
d6:65:17:ac:f3:ea:27:9c:91:0d:6a:3b:d1:b2:7f:
b6:dd:a7:ae:70:8c:53:a2:65:03:ea:b4:40:03:da:
44:22:13:0f:5f:a5:0a:76:42:10:e6:64:6f:1b:74:
6c:cb:f8:e8:df:93:4e:f8:23:5a:fc:70:41:ec:27:
75:65:63:18:12:23:0c:1d:23:72:7e:8e:ef:d5:31:
5a:ed:f3:39:c6:f9:12:e0:ea:7e:5e:18:6d:bb:9c:
ab:45:b9:ef:f5:de:a6:65:b6:d1:f4:57:c3:11:47:
28:02:fe:de:ff:e0:85:05:c4:1a:2f:1e:57:19:07:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7D:36:2F:89:48:04:AE:80:B7:4F:D8:CB:29:18:18:64:8B:4C:AA
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b8:f1:13:09:20:73:c5:ed:f3:87:3f:38:1e:66:3f:a3:d2:
20:f6:c4:43:34:e3:ea:5d:5e:67:c5:e5:26:fb:06:6d:66:d0:
8f:e5:72:38:47:78:0f:08:4a:b1:cc:55:eb:57:c6:5a:51:28:
82:36:a1:22:b7:32:de:77:81:94:e4:55:48:71:50:ea:d4:00:
ee:db:f5:17:82:34:f8:68:c7:50:10:30:06:fe:03:50:fe:9f:
5f:7b:fc:09:c1:2f:66:bd:a7:18:ef:69:8e:fd:9a:fb:89:84:
da:c9:37:0e:4a:4b:ee:43:1a:03:57:0b:c3:df:cc:35:33:91:
16:ff:2f:a5:96:c6:6a:3d:97:84:4a:20:5d:a6:bb:b9:4f:2d:
0b:9f:48:4d:31:86:e1:42:b2:54:c7:cd:7f:85:8e:02:a1:74:
a1:4c:dd:9e:0c:a2:2c:87:6c:d4:e3:68:d4:89:ce:b3:77:d9:
85:26:3f:dd:c3:8a:1e:50:6a:79:ad:ec:19:39:97:9b:81:e7:
07:27:1e:0e:33:22:a5:29:05:76:05:89:a9:69:90:eb:cd:51:
85:5e:8b:17:8e:ed:05:18:10:73:6f:d5:b5:00:c7:1c:5d:72:
b3:20:dc:f7:b8:51:99:56:1a:5c:f0:a6:22:1a:34:01:36:d0:
ea:51:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:32 2026 by rpki-client