Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: lp2a24KMMaU3C+h0VhPCM7J0dqLhQH3Po/vr+USAq98=
Subject key identifier: D0:70:C4:8D:D9:3B:C4:52:D2:21:38:7D:47:84:3C:F6:4A:C8:4E:E5
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019CE5917D6E04D4578A449F6670D966126C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 071D
Signing time: Fri 13 Mar 2026 05:00:43 +0000
Manifest this update: Fri 13 Mar 2026 05:00:43 +0000
Manifest next update: Sat 14 Mar 2026 05:00:43 +0000
Files and hashes: 1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: H0B0cMtreM8JgTR+nT8rGvi6jR62BcULSJQoKUJuAWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:7d:6e:04:d4:57:8a:44:9f:66:70:d9:66:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Mar 13 05:00:43 2026 GMT
Not After : Mar 14 05:00:43 2026 GMT
Subject: CN=d070c48dd93bc452d221387d47843cf64ac84ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:fb:6b:39:fc:55:7a:58:56:e2:59:53:52:
d5:d1:5c:c5:20:b2:03:76:1e:0f:b2:c8:f3:58:9a:
e6:75:8e:dd:94:a0:27:72:17:f9:16:41:79:ef:6f:
99:f0:9c:b3:c2:ae:ce:5a:30:85:31:8e:51:0d:e2:
6c:76:c9:a6:8b:ef:63:45:6d:10:3e:51:ef:b9:dd:
cb:1d:2c:1c:b0:fa:53:81:ec:ed:e0:32:f1:37:21:
07:90:70:67:b4:7f:08:90:07:0e:7b:87:01:70:e9:
22:5f:91:3b:c3:8c:ba:1c:e5:0b:f6:0f:cc:8d:9d:
44:57:a1:91:db:db:40:6b:6c:19:c3:b0:dd:b7:55:
c3:04:b5:30:02:6e:d6:b6:28:3d:b4:7e:78:65:74:
94:63:5c:4a:63:27:41:26:24:79:88:43:fe:07:75:
27:30:29:e9:b2:b4:72:24:fe:b8:5b:ec:30:1c:47:
a8:66:0b:c5:b2:99:e0:51:fc:ad:a1:76:ac:f9:11:
5a:a2:76:98:33:8b:1a:c6:2d:9a:d0:59:8a:03:51:
ac:cc:15:80:c6:63:81:bb:30:7f:94:2e:d3:1c:6a:
5b:6a:48:51:85:36:37:b3:46:36:35:a8:40:f5:51:
71:50:28:b8:8e:53:8e:fe:97:8f:83:11:9c:fb:0e:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:C4:8D:D9:3B:C4:52:D2:21:38:7D:47:84:3C:F6:4A:C8:4E:E5
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fe:bf:9d:2c:ca:f3:cc:21:e0:ab:07:ec:1d:ee:9d:c7:7a:
61:42:61:37:c9:c2:77:f0:d9:e1:2b:5a:75:a6:06:5f:61:11:
15:45:e4:ef:b5:cd:7e:bd:d1:39:ce:31:f8:6f:10:3c:48:f9:
fc:41:b2:3e:19:56:ec:b2:2f:5c:03:03:0a:19:bb:aa:00:c3:
a7:d1:be:60:78:da:fe:e2:d2:44:65:ee:ce:2f:9e:77:52:c9:
10:90:a8:d7:58:a8:68:a2:05:0d:4c:20:68:9e:e1:73:9c:d8:
0b:bb:6e:d2:df:78:b8:f3:96:e5:4d:9f:56:e3:41:bf:f4:6c:
27:02:7b:f5:98:6d:10:18:79:e3:a2:13:3e:91:85:cb:7b:f1:
3a:8f:99:5a:99:6c:74:76:19:35:6c:21:f6:bd:c0:92:e7:94:
9e:83:ab:ec:eb:1d:a3:3e:49:54:d3:64:de:27:c1:02:ef:19:
f2:e0:d2:28:b3:ad:29:6d:cb:65:9b:01:66:9d:49:cd:02:0d:
51:e1:5c:46:05:14:31:2d:3b:33:6b:e7:8b:b5:4b:e4:08:4d:
0e:be:48:84:3a:e5:a9:fa:6f:c9:8e:fa:b5:1f:42:e6:64:df:
6d:ea:2f:45:d2:68:23:8e:dd:8a:0e:5d:9d:d6:87:21:f1:c0:
f2:50:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:51 2026 by rpki-client