Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: VROfHrOQHKYKDhNJmMbDjX9/YrHZwswVlzEp92BHTSQ=
Subject key identifier: D0:BC:E6:4B:2D:87:48:F3:5B:C3:8A:49:43:E8:41:1B:11:54:22:0E
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019D37C062543FA632F0CD7158529BB0AA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 0522
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: Pp1n6PFVzpUxRRNrsktsQarL4fPTijH1/gBCClXfrig=)
2: Yuo4raHbuV1AupPWdNm1jMw95T8.roa (hash: lmnKCE9fJdmr7z73updpBxSnhRCLKa9yvUVY95GYbw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:62:54:3f:a6:32:f0:cd:71:58:52:9b:b0:aa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=d0bce64b2d8748f35bc38a4943e8411b1154220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:83:94:71:77:cc:ce:ff:52:ba:e0:43:80:
06:df:5a:65:2a:ac:2a:52:78:b8:0b:c1:37:36:d2:
3c:b8:02:18:59:60:90:79:c0:e5:51:37:b4:ce:a8:
b4:96:5c:50:72:64:5b:51:24:a7:ed:ee:9d:03:ec:
cd:36:9d:21:68:8e:91:d1:92:a4:14:ed:40:0a:c3:
36:07:d3:e2:0f:78:26:76:dd:a0:e8:3a:17:d8:4c:
cf:2f:93:1b:f6:3a:e5:df:1e:8b:e2:b2:b6:37:e9:
b3:7c:4d:d5:e7:47:87:05:73:96:ec:84:9f:9f:cc:
3d:08:02:83:13:96:20:53:a5:64:1b:33:17:d1:ac:
33:ac:36:81:5e:a0:f4:27:ca:91:0f:3c:cd:bc:c5:
47:58:09:69:c6:fc:78:90:a4:ae:ab:f0:39:0b:12:
a2:b6:a0:b9:7c:ec:0c:d0:b6:fa:23:7f:14:53:31:
27:b3:50:a2:77:a4:da:fa:eb:7d:c1:cd:82:a0:de:
6c:ab:6b:38:63:fe:e0:5f:ea:27:4a:e6:17:2d:1f:
99:f6:83:8b:6a:bf:eb:48:13:75:af:9c:5a:41:4e:
76:ee:85:01:81:1c:8f:cc:84:82:68:b9:fa:d7:82:
e3:48:1f:96:1d:51:61:a1:5c:15:60:eb:c8:18:b2:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:E6:4B:2D:87:48:F3:5B:C3:8A:49:43:E8:41:1B:11:54:22:0E
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:2f:20:b3:4d:37:f8:39:30:81:ed:93:40:5f:36:58:06:
09:f0:cf:fb:fb:37:3f:ce:0d:be:07:15:5f:08:f9:23:49:7f:
4a:15:1c:ad:32:ed:04:02:21:04:2d:eb:01:5d:36:3c:65:df:
10:ef:ca:4e:0d:18:fd:0e:f6:c6:26:43:e0:47:d1:84:ef:4b:
c5:ce:94:9f:84:0b:b6:c6:79:e4:c9:df:0a:e0:b6:31:c9:4a:
93:ca:0e:60:4c:3c:27:ff:0e:7e:42:3f:d6:78:73:11:c7:4e:
f0:ab:8e:e0:cc:2e:7c:4a:29:a8:b7:be:34:be:f0:47:08:2a:
c6:99:5e:2e:86:b3:13:e5:01:17:a5:11:b0:06:0c:0a:3b:08:
f5:a0:a7:36:48:6f:46:26:01:d4:bb:b3:1a:90:bd:3d:c4:cf:
71:3e:85:15:fd:47:13:4c:45:41:3c:74:cd:80:05:33:04:74:
71:12:5f:69:5e:70:bb:4a:d4:65:60:70:81:ea:d9:ff:81:9e:
95:5d:7f:23:80:77:7b:f5:33:a4:03:92:8a:5c:09:9d:4d:4d:
76:2b:ad:9c:1a:da:78:5d:33:f7:f0:68:56:06:4e:30:d1:9b:
79:62:a0:1d:c5:1a:88:28:f2:d6:91:35:21:51:dd:c7:f6:88:
2d:73:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:16 2026 by rpki-client