Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier: QbbgA4acoCF70+Dew2RArgehTEnx7wf7b1WnuO/Myl4=
Subject key identifier: 61:D8:6D:23:3B:C1:3F:4C:6B:C7:4E:45:68:62:04:9D:4B:27:F2:E7
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial: 019D39AEFC0ADF9BA94AE3D3BBDB4D7D2875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 13:01:02 +0000
Manifest this update: Sun 29 Mar 2026 13:01:02 +0000
Manifest next update: Mon 30 Mar 2026 13:01:02 +0000
Files and hashes: 1: pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa (hash: EWBZ2UHTAmxrD1L9UAKAHW/cTFQz9Hh3HcW2rFyIPpw=)
2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: s2m1U+lrlPSt0h0EmsK5RNx7kfeddVZT/PEwzic3VFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:fc:0a:df:9b:a9:4a:e3:d3:bb:db:4d:7d:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
Validity
Not Before: Mar 29 13:01:02 2026 GMT
Not After : Mar 30 13:01:02 2026 GMT
Subject: CN=61d86d233bc13f4c6bc74e456862049d4b27f2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:61:a9:29:4f:95:6f:64:55:fc:21:45:a7:
05:fd:02:b1:e1:bf:29:5e:63:95:a3:6e:6a:a7:f4:
a0:2a:c1:be:29:9b:1f:20:3c:e1:2f:37:dc:9f:2b:
58:4f:ae:e8:ca:c9:e9:41:ef:4f:c9:eb:93:91:74:
4e:60:c6:f7:fc:67:aa:72:cb:90:07:c9:ee:28:bf:
22:55:20:2c:02:a3:b6:1d:e9:5c:92:2f:15:fc:ca:
e0:35:6b:cd:01:c0:7a:01:57:af:f4:6e:7e:01:16:
43:e4:eb:52:e6:4c:fe:2a:07:a2:ec:6f:0b:d7:70:
64:03:ad:50:09:a0:92:3e:5f:ec:07:24:c0:9a:9f:
62:5c:5c:81:1a:7a:dd:57:42:92:5c:8c:66:4d:99:
83:48:17:59:eb:2b:fb:3f:c2:03:8f:11:30:ba:45:
a3:eb:e5:da:74:f3:3a:55:47:5e:5f:7a:d1:73:16:
4a:e2:8e:05:93:fe:0a:b9:ab:29:4c:ce:e2:9c:f2:
dd:7c:13:4b:4d:3a:ba:a7:fe:99:5e:69:cf:c7:ed:
f1:56:0a:ec:ae:9c:ec:54:75:27:bf:b4:28:8a:02:
c1:3d:98:77:09:8d:dd:28:21:8c:18:b5:34:68:05:
d1:ac:a1:6c:74:c9:a2:19:03:ef:49:5b:1a:e2:61:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:6D:23:3B:C1:3F:4C:6B:C7:4E:45:68:62:04:9D:4B:27:F2:E7
X509v3 Authority Key Identifier:
keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:32:a1:bc:2c:dc:00:e0:4a:50:5e:7e:37:ee:bd:13:87:79:
d1:5f:39:5e:96:18:12:df:8f:75:41:11:fc:8a:e1:7b:78:ed:
97:a1:be:69:9c:9f:1d:83:74:8a:f6:7e:02:be:41:8f:5f:61:
66:e4:3a:3b:7c:0e:86:13:d7:92:6e:1c:ac:64:8c:4c:7f:3d:
69:c0:8d:de:ec:f8:aa:21:f8:68:68:6d:37:91:88:37:c3:1b:
97:fc:ac:ea:42:27:b8:59:e9:1a:51:9b:da:35:12:f8:1a:16:
72:a3:78:59:8c:d7:ec:b1:db:b3:6f:f2:a0:37:c1:41:5a:ec:
2f:c5:b7:b9:17:a1:27:44:84:84:ac:b8:5f:f0:78:73:9a:90:
d5:49:a1:1c:6a:ad:7b:16:aa:25:73:0f:da:00:ed:e1:0e:71:
5a:e6:26:f8:0f:61:9e:94:38:63:25:00:25:68:49:24:05:8e:
ea:2b:7c:b5:97:7f:75:30:0a:d6:52:37:9f:9f:9f:ea:17:55:
6e:93:59:ed:a0:1b:90:d6:cc:f9:54:8e:26:88:7d:b4:42:51:
ad:3a:92:30:02:7f:36:dd:89:df:45:03:50:65:5e:3a:87:79:
b1:9f:d2:d9:ed:ea:8e:94:74:df:d1:9b:4c:fd:16:7c:0e:1e:
fa:e8:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:54 2026 by rpki-client