Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File: VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier: orK+Dl6MvZySLJozpLVwq8Rn60mX/TVr6hIpU4w+2HY=
Subject key identifier: E4:EE:3E:6D:AF:4F:87:26:79:14:6E:27:C9:DA:6B:C7:2F:5A:F0:E7
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 019D3A1CDFBCFF2641ABBA4F9C05CE20A32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number: 1038
Signing time: Sun 29 Mar 2026 15:01:03 +0000
Manifest this update: Sun 29 Mar 2026 15:01:03 +0000
Manifest next update: Mon 30 Mar 2026 15:01:03 +0000
Files and hashes: 1: Axm6d1alqEnfu0vZueA3GQcIATg.roa (hash: +dNIyPFCVGYMfpVf51l51gN+nP6OIQk6gVR+KK+wc/U=)
2: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: 9VYYbVg9DemRz58wjrl8WmkgSy/WvfNgFyrrwqZmq+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:df:bc:ff:26:41:ab:ba:4f:9c:05:ce:20:a3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Mar 29 15:01:03 2026 GMT
Not After : Mar 30 15:01:03 2026 GMT
Subject: CN=e4ee3e6daf4f872679146e27c9da6bc72f5af0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:8c:cc:e6:67:ce:68:08:11:08:d7:5a:f5:
e6:3f:60:03:ed:60:9b:ab:de:9c:b5:27:72:17:6f:
65:02:f4:03:92:6e:c3:6f:9c:9d:b0:fa:0f:21:1f:
8b:86:23:56:77:aa:f2:9c:59:a9:c3:f1:27:26:14:
87:cf:2e:c2:ce:96:cd:31:c1:4c:12:e4:3d:84:d2:
f3:04:40:41:d5:40:7a:39:b3:a3:cf:e9:03:33:75:
61:92:f5:b1:da:48:ec:e6:0b:03:15:dc:48:3a:28:
80:ee:33:e4:8c:4d:11:b0:ac:73:72:da:38:b8:e3:
b2:d8:e2:14:2a:6b:21:63:27:b8:e0:1c:bc:55:8d:
e0:7f:07:53:99:35:a4:e4:35:53:4a:2d:6b:87:75:
02:d8:e3:0b:d0:38:5c:f0:4d:54:90:eb:3e:36:95:
12:71:b3:6f:1f:38:27:2f:3a:5b:1f:0e:84:79:a7:
44:b7:83:b1:5a:e5:9b:44:6c:bd:41:c0:20:df:72:
47:24:f9:5d:7b:ba:0a:25:ce:c6:b0:45:d4:e0:46:
a2:59:68:ac:0d:07:dc:a5:38:18:70:45:1e:6e:e2:
bb:7d:b8:46:90:ff:4c:31:d9:8a:da:7e:f1:07:0a:
09:17:6e:43:a7:7d:9e:de:00:2c:e4:a6:9f:87:9c:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:3E:6D:AF:4F:87:26:79:14:6E:27:C9:DA:6B:C7:2F:5A:F0:E7
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:d2:03:66:b0:11:45:17:97:d0:c3:f1:18:dc:f6:fb:1b:
d2:04:21:1e:d5:14:1f:d8:85:a2:ab:45:81:4f:00:ec:5f:72:
fb:c5:60:db:c6:97:7d:1b:d6:dd:55:9d:c2:ca:e0:42:7e:fd:
5a:bb:66:cb:8b:19:34:ea:28:21:39:58:da:92:c8:65:ef:38:
02:5f:b9:07:5c:ee:51:94:ae:85:54:86:ed:34:27:80:0f:42:
c2:4d:7c:ad:e9:c4:51:1d:11:85:e1:1b:1d:14:75:cb:1f:ce:
a7:ce:94:ea:8e:3a:d9:8f:44:09:67:ba:00:be:9c:f3:f8:45:
c2:0c:7e:ab:26:0e:0d:cb:f7:e0:4c:33:2b:72:8b:97:78:a4:
df:59:27:7f:99:a6:7f:92:61:8b:c3:bb:a6:b2:21:3b:f5:2c:
8c:08:0e:e2:11:6a:5e:21:92:57:10:8c:5e:4f:02:9b:72:ac:
a4:8e:cc:31:9a:0d:b8:4a:80:71:40:d5:83:31:08:04:8a:7e:
8d:d8:40:71:dd:49:d3:46:38:98:85:3a:f3:d1:ff:6f:70:f7:
b1:c1:94:56:1f:4a:9d:d1:73:73:7f:6d:5d:b0:03:c1:33:68:
01:a6:c7:82:e7:98:07:16:61:62:ce:d8:72:2f:da:98:71:69:
98:97:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:12 2026 by rpki-client