Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: GnOx1cOW3RXffJcbSckCDZF+exlA+LJj6LpdGhATTAQ=
Subject key identifier: 4E:3D:6C:52:AF:27:A1:2D:AD:38:88:32:4C:15:7D:59:6B:EA:BD:1D
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 019D3940ECD8C818168A21BCA567ECEE6EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 086E
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: kHcJtnaBpCivLMqyochvUiDa2QdsOwgaWRw9+6zT4wQ=)
2: uH1OFQK-y6nSA9ln1NEz-DHjkYM.roa (hash: gklS8iQwBkuF3RBvorQ4lbNpw7pGXOz/cK6thzC+bvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ec:d8:c8:18:16:8a:21:bc:a5:67:ec:ee:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=4e3d6c52af27a12dad3888324c157d596beabd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:0b:79:de:1a:0e:31:25:7f:e5:df:98:88:
76:19:7e:d8:a1:fd:d2:b4:6c:a4:14:0c:44:de:59:
74:75:20:cb:4a:f6:80:91:ce:52:c8:91:04:ba:23:
8c:fd:6e:32:9c:6d:33:0f:1c:9d:40:11:2f:16:4a:
df:9a:97:09:98:ed:d6:b4:96:9d:bb:2f:ea:c3:33:
fd:dd:44:0b:00:50:ae:b2:4b:da:ca:34:63:54:b5:
df:ab:25:be:fa:7a:c4:8c:25:e4:fa:1c:b1:d1:ca:
f7:aa:2d:d0:01:42:88:a4:13:c2:c2:79:b3:89:30:
8c:64:55:4d:d4:2b:80:96:2c:25:dd:1e:75:71:ef:
1e:be:9e:31:cf:44:0c:af:74:82:6e:11:4a:69:d7:
6d:28:f5:90:73:64:c3:a0:d1:6f:47:87:9c:6d:34:
11:21:35:bd:7b:28:a1:65:0f:0b:9f:24:65:a9:08:
54:ac:99:95:f0:d6:5d:35:f5:0b:b2:b5:59:cd:b3:
56:db:d6:4a:4e:fc:62:9a:1e:b3:20:93:c7:16:b4:
bc:ec:2d:3e:2e:8a:c4:69:79:e6:3b:ce:e9:ba:4e:
e6:b9:7c:59:12:6e:39:45:92:55:8c:6d:13:1f:a0:
28:4d:6a:5e:6a:ae:22:01:1d:c2:2b:d5:3c:fe:fa:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:6C:52:AF:27:A1:2D:AD:38:88:32:4C:15:7D:59:6B:EA:BD:1D
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8e:47:5a:df:a9:b0:43:92:85:5e:63:2d:21:f6:33:59:fd:
77:aa:b3:c9:14:47:dc:f7:82:c9:ef:10:0b:89:2b:d5:de:c8:
a5:98:54:3e:e2:e0:d3:70:25:ee:d8:f8:12:86:1c:ce:59:48:
66:61:74:dd:e2:ba:61:ab:16:9b:c9:75:b0:9c:b2:b4:ca:82:
be:eb:62:ed:06:74:fc:7f:f7:49:d0:3f:c3:43:a0:cd:9c:25:
e0:4d:8e:c2:c9:d7:17:ee:0f:91:25:fe:bb:4a:44:1a:ca:77:
3c:80:5e:00:bb:db:fc:46:97:1d:e8:74:f5:5e:74:87:5e:df:
bf:d8:41:35:07:ef:20:61:ec:39:43:11:7a:70:01:c8:84:b0:
7e:9b:02:54:08:f7:9d:1a:0d:b1:75:a9:60:3d:ab:87:58:5a:
95:e3:df:18:67:6b:b7:f5:2f:ef:9b:22:25:04:ad:08:a6:ba:
39:08:eb:1b:df:8d:16:9b:a6:be:a7:07:a1:ea:df:d6:58:46:
91:6f:35:32:88:da:fb:03:b0:66:00:18:09:ad:1b:f4:c2:e1:
2b:b0:c5:2f:38:a1:19:b7:d3:1a:47:e1:64:90:b3:dd:f8:e2:
e7:c8:51:d8:a8:ea:00:2f:c1:2c:30:49:99:b2:21:04:ca:af:
8b:a2:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:10 2026 by rpki-client