Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File: VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier: 41ve8e0MZOI0hkN0LWmo4uoRaCYOifkOJ0cFRaAfOe8=
Subject key identifier: 5D:0D:3A:9A:55:99:FC:48:E0:EC:6E:1C:1B:44:75:91:71:ED:30:99
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer: /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial: 019D389BD6F4A7F9A82324ADB31BAD0D7AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number: 09A1
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: 8nI5XphuKEFYn2qpBVoD2ClJd40.roa (hash: c3cddBuV2MILIsaSSUtkvwu3f9bCRyo6z910eiwVKSY=)
2: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: lXJemlq+ZhadkyU2r9hTqRRVGTAu4c8p9/vU8FNH0MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d6:f4:a7:f9:a8:23:24:ad:b3:1b:ad:0d:7a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=5d0d3a9a5599fc48e0ec6e1c1b44759171ed3099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:cd:1e:3e:f9:a4:a2:a1:af:a8:79:7b:7b:
8d:25:66:13:31:4a:78:9a:bd:5d:db:23:e9:ab:1c:
ff:d6:7d:e5:98:c3:29:1d:64:76:20:fd:ae:fa:34:
d7:7f:92:7f:00:c9:32:33:1e:90:66:49:1d:3a:9f:
f9:76:92:6d:6d:53:84:94:56:ae:6b:d6:56:44:94:
2a:fe:c0:4b:90:22:ea:df:73:df:c1:84:b3:00:c4:
03:28:82:8a:52:3f:51:31:84:08:3f:75:61:84:30:
7c:44:07:18:54:09:21:7a:61:88:58:c0:39:11:bc:
0a:38:59:18:bb:e8:95:1a:a8:07:ae:48:a2:53:09:
88:fd:e0:1b:7a:99:04:90:82:7c:62:0a:12:e3:89:
1d:3e:e8:80:6a:b3:44:24:36:d0:30:c1:aa:5b:88:
62:7d:d8:17:34:b5:1c:ba:c5:45:0c:19:bc:58:e8:
ad:5d:e2:39:31:ef:9a:2f:83:a3:3d:2d:23:fb:a7:
fd:e7:19:67:b1:c6:6c:b9:28:2d:9f:f7:0b:4e:48:
ba:0e:55:12:4a:3b:3a:42:a4:a4:d0:99:dc:86:f7:
c8:d5:2f:68:61:d9:d3:1e:13:eb:17:bc:8d:47:b4:
14:1f:1a:d1:c2:3f:7c:66:b9:4e:bc:1f:cb:be:2a:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0D:3A:9A:55:99:FC:48:E0:EC:6E:1C:1B:44:75:91:71:ED:30:99
X509v3 Authority Key Identifier:
keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:28:1f:83:8f:e4:f0:af:00:a1:c7:b0:03:50:9d:2d:ec:72:
37:84:8a:4b:ec:4a:f2:7e:2e:bd:6b:24:27:f8:78:f7:71:1a:
84:95:04:b6:1e:6d:ee:3b:cb:f7:ef:81:d0:5a:39:aa:79:24:
94:a2:e5:2a:82:5d:12:43:2f:58:bc:f2:ff:6d:ff:dd:72:af:
8e:44:f3:7c:17:b5:d6:23:31:56:ae:d3:3c:b2:f8:53:cf:c2:
4b:b7:4b:8b:2e:f9:c6:56:f7:96:b1:71:d9:80:cc:ea:08:23:
cf:30:3c:3e:22:4a:a2:0b:d3:40:f3:d3:d9:86:64:55:9c:3e:
fd:19:22:ea:67:1a:1b:5d:f6:32:78:ed:12:cd:69:53:64:a8:
af:68:3b:51:82:9c:b8:15:7b:6f:1e:b6:ea:af:23:40:de:9e:
e3:f1:06:df:d1:b5:c1:b1:c3:c1:93:a1:b9:93:58:6e:27:ec:
ab:07:a7:d0:ca:69:1a:19:34:fc:b4:4f:a5:bf:6d:89:80:11:
a4:39:f7:f9:40:d9:63:39:bf:c6:2c:94:0d:e9:11:61:e6:52:
bf:bf:9e:50:16:18:e4:41:94:36:ca:ae:c1:8e:fb:0f:6f:10:
e9:fd:96:85:ac:7f:c2:e1:38:77:93:3b:dd:81:72:9b:dc:51:
9c:7a:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:16 2026 by rpki-client