Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: QAe/HOVE7Nhm9q4g5daDh+kNYSX7RjNyl18FRukIVaw=
Subject key identifier: 89:CC:F2:07:C6:1E:EA:A7:91:EF:5A:8D:11:01:64:20:7E:CB:B5:99
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 019E4F8FC44BE4710EC43F530DC65440C210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0DDB
Signing time: Fri 22 May 2026 12:01:22 +0000
Manifest this update: Fri 22 May 2026 12:01:22 +0000
Manifest next update: Sat 23 May 2026 12:01:22 +0000
Files and hashes: 1: 7fwFotLEQHdJWGzsI9E3uv_kDSI.roa (hash: 84Fm9PCPXM8NFDP3Raox3dv53czMLCLj+wQeuu2bYvg=)
2: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: ZAywncUwhUE4CBpMCgNqQNlXWUtVBPJvXJ7rcWfhHGY=)
3: _fFHluteB5aYpSrt5zAnfawBLdE.roa (hash: EeR8KZELGbbgEkegmnhlrAdS7lppXQ4MZh3aU7YBvVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:8f:c4:4b:e4:71:0e:c4:3f:53:0d:c6:54:40:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: May 22 12:01:22 2026 GMT
Not After : May 23 12:01:22 2026 GMT
Subject: CN=89ccf207c61eeaa791ef5a8d110164207ecbb599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:93:a0:3a:52:ea:b6:8c:56:d2:c4:85:9c:
21:06:82:61:61:24:79:56:e9:99:f7:c1:ba:29:92:
a5:11:a6:de:e5:c3:ac:3c:27:51:d8:81:21:b0:8c:
9d:f4:17:de:ae:a4:16:04:2a:b6:d7:a4:de:b0:32:
68:15:01:ff:9a:c6:1c:a0:71:ce:fa:34:37:15:03:
4c:1a:c8:79:d7:82:56:a9:99:1a:18:f7:d3:88:ee:
0a:ce:b1:ff:a8:26:b6:fc:8a:3e:cf:1f:43:71:fe:
ee:62:97:a6:8e:c0:3c:2f:b4:78:37:bb:3e:96:77:
4d:03:74:c5:62:d6:6a:c2:89:df:48:b9:08:14:b8:
44:94:07:de:9f:d7:70:65:0f:9e:45:1f:fd:91:66:
49:1d:04:34:4e:f4:1d:ab:1f:8e:b3:f3:cc:dc:48:
bd:1c:da:2c:fb:46:a7:15:dc:d8:dd:fa:11:1b:35:
fc:03:17:b2:9f:c8:5b:9b:e3:3c:73:17:84:f9:62:
87:2b:c1:2a:86:30:bf:93:16:58:01:17:89:b2:20:
7d:79:85:d0:c8:3a:11:f8:a5:12:b6:37:ae:13:92:
68:3f:f8:2e:8f:ca:37:71:fa:44:cd:6b:12:75:f8:
63:4f:92:6f:55:5e:a8:83:e7:96:7b:8c:83:dd:2b:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CC:F2:07:C6:1E:EA:A7:91:EF:5A:8D:11:01:64:20:7E:CB:B5:99
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:57:5b:81:16:4b:38:7c:67:1e:7f:fc:90:23:71:4a:df:56:
d7:32:b2:44:35:e5:e1:e1:de:16:c3:d4:db:a0:fc:9b:f4:78:
6d:31:74:fb:65:38:3d:a1:6e:3a:27:5c:9f:e4:1c:db:1d:71:
5b:54:27:06:23:10:bf:b8:68:fa:02:c7:e5:2e:a6:fe:19:36:
73:fd:ae:3c:52:85:67:15:58:4a:9b:c6:2a:56:13:ca:f5:28:
79:4d:97:c3:b1:bf:68:b8:aa:30:e9:71:a8:16:21:7b:ae:e1:
8a:42:aa:ec:fc:5e:a9:80:f1:21:e2:21:82:a7:c7:7e:1a:34:
d0:fd:90:51:f6:c0:f8:42:0d:ee:a5:15:fd:a0:0f:3d:ee:71:
b7:8f:b0:08:3d:f1:92:e3:e7:c4:19:ac:2d:2d:a8:6b:4c:a4:
b0:65:84:01:2a:de:b6:c5:ad:b0:69:e7:8b:26:dd:d3:15:9f:
ca:49:5f:d7:ea:a1:cc:97:89:4a:21:1a:88:04:69:d6:2b:4d:
89:17:be:35:4e:b2:97:45:55:96:4f:e3:be:69:c7:36:3f:d9:
34:ca:02:f6:4c:02:a1:e1:08:95:e3:3a:ee:e6:01:94:b0:42:
af:73:b2:9c:4e:c9:87:2d:41:8f:33:e2:1b:48:5c:2a:61:33:
e2:b8:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:12 2026 by rpki-client