Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: V4Tf0IvCroYxssk7tjixvFQWLFUbAePb5VczgM5PIBo=
Subject key identifier: 60:E7:79:11:FF:18:C4:75:D9:66:9C:05:06:92:A5:FB:9C:D6:36:7C
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 019D39413D4412466408307305E4F92BBE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: JZwbViMKsnxZsYX8USYMxbR-wL8.roa (hash: vC5pgOVEE4V7ZzDJwdhrcdyYAHnBWwtpITNJzaoLZ2M=)
2: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: Ny56SSSfwHjU+uUGclW9A1LIms1nfoV02oFIZmIR8Rs=)
3: wflsbriSGR4xT_g-YEPWsSD1wj4.roa (hash: UqEtL5zzaFTIKkXdbYoSoZY6DLZbmM65716FcJp1NB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3d:44:12:46:64:08:30:73:05:e4:f9:2b:be:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=60e77911ff18c475d9669c050692a5fb9cd6367c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:ad:77:24:3c:1b:a0:bb:df:58:af:35:20:
79:93:d8:bc:8e:7c:93:d1:0b:5f:5e:9f:72:ea:c5:
1e:4f:2b:8a:8f:63:23:a8:29:ba:9a:f2:d2:41:e1:
e5:37:43:54:54:98:3c:44:4b:7a:e0:c5:1a:af:b9:
e9:3d:d8:6b:b4:55:1f:12:6e:aa:34:2b:ef:53:66:
91:93:1b:28:bf:cf:2d:c6:e8:03:f6:ce:fb:ea:10:
48:5f:85:4c:c3:c4:ca:ad:4d:e8:40:ce:6d:d9:08:
3f:f5:75:b2:52:92:ca:df:01:2e:02:d8:77:e5:dc:
23:71:47:1f:96:ec:af:5b:ed:80:3a:47:64:fe:95:
f4:76:4d:a3:a1:c9:47:f0:75:3c:3c:9c:92:d0:8b:
45:98:ed:d4:47:dd:90:17:dd:01:7f:3d:9f:08:77:
10:29:02:c0:e6:3a:95:c2:3e:64:c1:c8:55:bb:21:
8f:5a:1f:cc:51:d6:fc:ac:01:a6:dd:b4:d5:67:c1:
2a:26:18:ad:32:83:e7:a4:78:3b:cb:c7:ec:17:aa:
ad:7b:48:42:b2:48:72:79:a5:f9:d1:a1:e6:3c:73:
45:ae:52:e1:33:11:44:9c:e8:61:21:01:ba:ec:a4:
2e:f8:32:02:c7:8c:5e:76:22:d1:ce:c5:ab:2a:65:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:79:11:FF:18:C4:75:D9:66:9C:05:06:92:A5:FB:9C:D6:36:7C
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:af:b1:5a:54:05:24:49:3a:af:bd:90:9d:28:8d:d5:19:ab:
74:0b:e5:f7:b8:4f:36:c8:f8:06:f1:f2:6f:cb:13:87:69:f9:
50:99:89:39:67:88:a3:32:2b:68:87:2a:dc:61:23:cd:be:11:
25:6e:36:0d:b2:c7:01:f0:44:5c:d6:f6:e8:23:c1:c3:46:f2:
75:ee:a1:2b:25:0b:5f:e1:43:5b:2e:db:0a:af:01:a8:a9:00:
18:53:b9:8d:31:c2:aa:be:5d:97:ab:74:60:00:51:14:35:33:
c2:2e:f0:52:cb:11:9e:54:86:bf:13:0b:8b:c0:63:4e:97:f8:
90:df:7d:06:59:7e:52:8c:aa:a6:40:27:72:ff:a1:8c:3a:48:
4d:f9:cc:4a:f0:8d:e9:5b:b6:99:ba:66:4c:27:51:f5:62:59:
b4:90:89:3c:dd:37:98:96:8f:06:99:b2:b1:ed:1c:ae:07:92:
c8:c6:9c:1d:72:5b:ee:14:75:f8:48:56:1a:3c:6a:6d:7d:91:
23:c0:4c:54:17:49:33:21:b8:53:e1:e6:f5:29:32:96:fb:73:
19:9d:6d:15:45:d0:64:b0:e3:20:2b:45:e3:c3:e9:ac:71:7a:
1b:51:c5:62:23:a3:ad:91:bb:f5:b5:66:55:be:cd:b1:ae:48:
7c:62:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:53 2026 by rpki-client