Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File: VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier: gi80Q7oEhMJu4gFsEfzWsunqX2eXmoAT2YhKL8dDEgE=
Subject key identifier: DE:2F:72:A1:D8:C8:95:CC:86:C0:3A:F4:9B:4B:8C:27:1B:72:B5:7E
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer: /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial: 01A17BF242661DECAE1FEC962A0F44E65E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number: 02DC
Signing time: Tue 27 Oct 2026 06:00:36 +0000
Manifest this update: Tue 27 Oct 2026 06:00:36 +0000
Manifest next update: Wed 28 Oct 2026 06:00:36 +0000
Files and hashes: 1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: 9kQ1djTbG1cy2YwaJdu9ZVu69FB6bOfN9b5avM2HZxE=)
2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:42:66:1d:ec:ae:1f:ec:96:2a:0f:44:e6:5e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Validity
Not Before: Oct 27 06:00:36 2026 GMT
Not After : Oct 28 06:00:36 2026 GMT
Subject: CN=de2f72a1d8c895cc86c03af49b4b8c271b72b57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:80:0f:7e:8f:ea:34:b0:a8:b7:40:0a:e1:
23:1b:04:7e:98:e0:25:98:c6:6b:75:07:1e:10:c5:
fe:95:b8:43:d0:45:48:a3:dd:90:81:e3:5a:61:2d:
bc:35:01:5d:5e:7b:32:b1:f1:0e:92:d6:39:2b:fb:
03:d7:c2:c7:55:33:7d:a1:92:0d:36:ae:3d:32:60:
79:13:ed:c4:24:cf:3e:3e:0c:cb:d8:77:da:eb:88:
dd:a8:f3:a8:1d:b3:3c:89:4a:bd:02:69:f8:a1:df:
0e:02:d5:30:ad:64:d9:2d:c5:65:14:e2:73:72:1f:
e0:4b:f4:3d:7c:1d:ff:14:4c:66:5a:1a:fe:0c:11:
f8:61:39:d7:b5:32:20:56:b3:ff:8f:e3:14:64:15:
d8:69:2e:85:15:31:30:b8:93:58:b2:c9:2b:b2:17:
f9:4f:29:e1:69:3c:bc:17:58:5c:6a:cd:b4:95:8d:
ee:8b:b4:2a:19:63:92:64:b5:1f:26:b6:4a:75:15:
b8:62:c2:10:cc:0c:7d:0c:a9:dd:19:ef:57:69:67:
6e:bb:28:05:ba:a0:e3:31:29:eb:4b:2b:b1:76:f2:
c8:a2:9a:d9:88:0a:60:6d:24:18:72:17:f4:9c:d7:
fc:21:fe:be:79:c4:c3:11:92:f8:e0:67:8c:72:65:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:72:A1:D8:C8:95:CC:86:C0:3A:F4:9B:4B:8C:27:1B:72:B5:7E
X509v3 Authority Key Identifier:
keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b4:fc:05:06:08:43:08:d2:e2:89:20:98:58:24:7d:96:20:
da:a2:58:25:58:5e:e8:59:63:26:14:4c:65:eb:6a:fb:ad:f2:
86:10:70:a7:6b:c2:6e:9f:75:41:2a:a1:53:34:54:96:88:0a:
f9:7f:e3:ed:fd:ae:bf:ef:14:2a:2e:bc:9d:85:6f:a2:fd:84:
f6:d6:01:3c:96:97:21:d9:df:e2:73:08:6f:2d:38:3f:a2:6e:
88:b4:b2:97:07:10:2d:51:3c:1a:fb:15:ff:65:17:5f:5f:b0:
06:96:a0:79:9c:39:42:8f:90:2b:f5:6c:0f:06:64:50:d3:5f:
53:5a:96:5a:d6:93:fd:c1:70:f7:df:e5:59:1a:0e:73:46:af:
66:90:f5:f7:36:60:8b:0b:8a:17:2a:19:46:d8:5c:e1:b8:ec:
83:9e:20:7b:12:79:63:e1:f5:56:fc:28:f1:b0:8f:e6:6f:66:
66:8c:eb:fd:fb:fe:d9:e9:45:dc:2f:94:52:50:37:a4:e9:74:
c8:71:f3:42:9d:4b:81:fc:1e:a4:f2:34:77:12:6c:29:61:7b:
be:05:38:80:d2:46:0c:28:01:05:c0:ed:38:e3:8c:cc:a9:c1:
fa:0a:ab:bc:e0:b5:ab:d9:62:ae:77:1c:31:7c:81:a1:2d:6a:
2f:50:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:50 2026 by rpki-client