Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File: VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier: BPfuPZu2G6M0hBj+Wfk0ozCkPwz9qVqqZuWlSFAALk8=
Subject key identifier: 7D:44:94:A8:B4:4B:50:05:EB:AB:80:C2:61:EA:A0:28:C8:95:BE:93
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 019D382EA1DDFA98350B0A523E5368AEC21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number: 0A69
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: UxOL8IaUSmhBUPOtpGzXZsWn7OI.roa (hash: KmTIoiBP3ZerlQ7vuojSylMU7CMgee4YhAPjdlXS/cE=)
2: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: UrozudVPZ04Pq2Ir/K+26xCdTcrTegiPGv/G57hJ9F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a1:dd:fa:98:35:0b:0a:52:3e:53:68:ae:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=7d4494a8b44b5005ebab80c261eaa028c895be93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:a7:66:94:89:4c:83:a5:a8:39:e6:21:e3:
f7:84:43:07:7f:7f:89:0a:07:4d:51:f4:d0:78:68:
cc:07:eb:aa:a5:f8:70:1a:dc:8d:cd:25:fc:41:31:
41:fc:f4:b2:7b:b5:1f:44:62:25:fb:0b:3d:f9:03:
63:65:08:f9:b2:58:c5:f5:7d:a4:a1:d4:79:1d:e0:
5b:08:1c:3c:f7:3e:83:db:22:d2:5c:13:71:97:fe:
6b:75:fd:45:99:c5:27:95:8d:54:90:cd:09:5a:2f:
87:a1:50:2e:96:4e:4d:3a:05:17:f1:8c:87:79:4a:
c8:91:07:9a:6a:b2:2e:14:4d:5e:fc:9c:1f:9e:29:
88:db:a2:b6:4b:d6:24:90:fe:a8:98:f8:c1:0a:8d:
e4:9c:68:2d:d8:d0:37:71:51:c5:65:25:d9:66:ad:
50:c6:19:6c:3e:36:0d:50:c1:e9:63:4c:34:c4:d0:
0b:4a:dd:2f:44:0d:e2:71:3b:85:fd:70:ad:69:9d:
8a:87:9d:be:8f:00:65:7e:8c:6b:71:11:38:91:23:
2b:a9:80:77:60:8f:9d:6b:e7:3f:9e:f3:97:10:39:
43:bf:a1:47:25:74:8a:18:92:ab:bc:f7:b1:e8:0c:
38:55:4a:35:9b:1d:78:5f:93:36:6a:1d:c8:8b:e1:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:94:A8:B4:4B:50:05:EB:AB:80:C2:61:EA:A0:28:C8:95:BE:93
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:42:6e:52:85:0f:b4:ac:ab:46:14:83:ab:85:8f:ac:cf:1c:
fb:1b:03:5a:1f:68:3f:4c:1d:a5:77:6a:27:25:f0:c4:a0:56:
63:c4:77:d7:a3:09:17:37:cc:87:56:40:c7:f8:17:15:6e:ce:
4e:4a:2a:14:a0:be:d9:aa:9d:77:cd:a6:82:16:14:c1:98:d4:
32:3e:f3:a4:8a:ea:92:3d:83:a4:a0:88:9a:f5:0c:13:43:e9:
31:5d:55:28:26:52:c1:b6:90:c9:77:cf:d0:3a:9f:13:80:cc:
a0:0b:76:f8:64:99:8f:54:d7:42:ba:25:70:1a:ed:5e:57:58:
1e:8d:05:93:01:40:25:f1:cb:90:55:44:85:24:da:ce:39:72:
2f:63:b0:be:4e:77:54:05:a3:08:94:b9:c1:6e:01:4f:01:51:
14:3b:e9:7b:e8:98:e3:d8:25:53:ac:6d:84:d9:9e:5c:8c:c0:
ce:ff:34:3b:f7:9e:5a:1a:29:f2:96:b6:f7:d6:9c:ea:f4:e7:
1b:0b:0f:66:67:9d:91:9f:cf:d1:6c:e5:64:bf:28:23:12:c4:
58:64:65:62:b8:35:ac:1d:37:38:c7:2b:64:3e:78:af:60:3e:
b6:4d:9b:af:c4:83:0b:14:ff:ad:d6:81:9c:34:f7:42:45:ad:
bf:6d:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:14 2026 by rpki-client