
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: PGTBxkgTWL67CYs2FxdFSYxqaN7Nd0R0pUq9cdoWKLE=
Subject key identifier: 73:D3:A3:62:06:C5:5B:E2:1B:2A:68:EB:4B:1C:0B:51:2B:D9:2D:C3
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 01A08E3206D3A5917F64D8233EEFBC86621E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 0902
Signing time: Fri 11 Sep 2026 02:00:38 +0000
Manifest this update: Fri 11 Sep 2026 02:00:38 +0000
Manifest next update: Sat 12 Sep 2026 02:00:38 +0000
Files and hashes: 1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: 9Inmj0ODoWwL9XQDSgk/bruAh//jyl/2AYL0K3dzJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:06:d3:a5:91:7f:64:d8:23:3e:ef:bc:86:62:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Sep 11 02:00:38 2026 GMT
Not After : Sep 12 02:00:38 2026 GMT
Subject: CN=73d3a36206c55be21b2a68eb4b1c0b512bd92dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:de:1f:01:8c:5c:4d:a0:5c:11:99:d8:6f:
3f:7d:0b:73:0d:c9:02:eb:57:32:ff:fe:c4:6b:48:
e2:a9:80:72:b1:37:26:f6:1f:45:48:40:36:e0:17:
bf:85:f9:d7:cc:af:09:38:4d:21:92:61:69:ed:e7:
71:46:5e:9f:60:80:41:15:ca:45:a0:0b:f4:2e:71:
3e:ca:94:13:c7:b9:5e:29:e9:57:9f:a3:85:d7:db:
63:4d:66:45:96:da:a0:c1:77:dd:29:d0:ff:e6:91:
c0:6a:fd:98:36:75:f5:03:81:6c:3f:45:f9:e1:6f:
19:8f:ad:ba:2f:74:8c:13:db:05:78:f3:fe:66:f7:
a2:67:9c:34:f3:6f:12:73:68:7d:88:57:e7:79:78:
47:b5:1b:9c:0a:56:5f:eb:16:1d:da:4d:40:2b:29:
97:b2:e3:68:d1:b5:5e:af:bb:86:70:e6:ed:bd:d2:
70:56:05:e3:f5:b2:0c:67:28:da:20:eb:e0:11:46:
6f:8c:c7:11:09:62:e0:22:9a:bd:de:20:18:a0:9f:
c3:e4:76:20:23:ff:02:29:d1:30:26:d8:a7:b7:d1:
a6:d9:1c:13:a4:12:2e:80:df:07:48:78:fb:60:57:
11:89:d4:92:45:b5:5e:14:0d:54:53:f2:b1:77:67:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:A3:62:06:C5:5B:E2:1B:2A:68:EB:4B:1C:0B:51:2B:D9:2D:C3
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:e5:83:6c:79:82:82:d4:97:f5:dd:c8:b1:3d:f0:58:03:
4c:b8:3d:4c:8b:ed:17:9d:a4:06:3a:30:24:06:86:88:fd:14:
36:84:07:d1:5c:19:c3:da:b5:da:fd:00:92:51:b3:af:ea:b9:
a8:73:9b:89:49:d6:f3:d3:9b:8f:bb:84:98:5c:23:f7:46:e4:
74:cd:db:ee:40:81:5e:b6:11:a5:b2:c0:c8:2d:3d:ee:22:41:
6f:d3:eb:a6:16:b0:c2:23:d3:f4:96:24:96:d0:fe:16:dd:8d:
c3:c1:ad:0c:b4:dc:dc:0a:fe:af:0f:49:5b:3f:1a:ef:40:22:
51:87:9d:c6:e9:91:c0:04:0f:3b:ee:4d:6e:9a:1a:48:c4:df:
ca:b2:be:91:17:24:ec:0c:62:cf:54:bd:89:1f:d9:01:8b:b4:
5b:9c:80:9b:ab:a5:91:6e:53:6f:cc:15:69:32:98:86:88:25:
ab:81:46:ef:f7:f5:72:c1:3f:d2:d6:6e:52:3d:42:12:9f:4f:
3f:2f:52:e9:26:ae:45:92:76:3c:e5:a1:bd:fe:77:65:8d:83:
5d:45:d4:27:b4:70:73:38:61:8b:65:3e:bb:88:7e:22:94:64:
eb:47:86:35:40:93:55:13:61:e2:19:73:a6:05:43:6d:b6:f6:
30:60:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:17 2026 by rpki-client