Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: xz2PwZ4Pn5GurNjO/0ea3kSVOmxbaNoX6msQtqvZBmI=
Subject key identifier: FD:29:FF:04:97:FD:42:78:0A:31:D9:03:7E:2A:8A:7A:C5:F4:A8:E4
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 019D382E763ABCECDE3FEA9823BFEC8FDE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 04A9
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
2: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
3: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: YTMbr78CMoU6q2CVqf7tgN9J744rh/Vmhgt2+9Blbt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:76:3a:bc:ec:de:3f:ea:98:23:bf:ec:8f:de:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=fd29ff0497fd42780a31d9037e2a8a7ac5f4a8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:c5:9f:e7:2d:7b:ea:25:74:55:9d:3f:df:
bc:82:39:9e:1b:fd:e3:03:5a:c3:12:9e:5c:32:2e:
b2:1a:80:07:7e:37:20:8a:73:84:67:96:37:ab:bd:
7e:b4:3a:0e:08:91:a1:24:2f:bf:47:ab:9b:32:f4:
5a:ff:b0:36:0a:3a:3e:90:54:2c:f6:ea:92:5b:6b:
42:ab:0a:16:6e:27:20:93:99:76:cb:d6:b6:bd:c3:
52:a6:24:60:00:61:a8:0e:1e:df:6d:1b:ba:54:e8:
03:a4:7f:f3:62:6d:d5:59:fb:3a:5e:1a:6e:3f:f1:
bd:e0:3f:e8:04:00:83:bf:50:26:8b:8b:da:cd:25:
a7:f7:5b:d8:9d:23:9f:07:e4:e5:32:bc:b5:9d:40:
77:21:dc:35:fc:c0:b8:8b:53:aa:d8:dd:1b:58:16:
9e:79:92:22:db:7c:5c:f0:de:8e:f2:d3:11:f6:fa:
da:68:57:fa:53:b2:b9:39:8f:b4:ca:a2:bf:96:e0:
03:96:02:f3:fc:e7:96:31:27:bd:e4:ca:e4:e2:8a:
1b:f8:da:14:56:29:b5:00:cc:15:ce:15:8a:8a:db:
8f:d1:a6:ab:be:e9:ac:2f:9b:e3:90:98:87:14:10:
2c:60:b0:72:40:7a:72:15:5c:04:49:63:c0:70:43:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:29:FF:04:97:FD:42:78:0A:31:D9:03:7E:2A:8A:7A:C5:F4:A8:E4
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:48:c5:f1:e6:56:8c:09:2a:db:f5:6e:5b:bd:62:bc:34:
5f:97:b0:71:48:04:5e:88:96:19:a9:ab:7e:ff:0f:d9:16:cc:
f2:1d:2e:b5:0a:28:ed:2a:47:12:33:bc:23:f8:8e:62:70:ab:
be:92:de:1a:8c:f4:f4:8b:52:f0:1c:11:f0:25:a3:2d:e0:fe:
05:e8:77:04:2e:e8:e9:ff:41:eb:0a:46:a9:2b:d3:1a:da:7e:
e9:df:0e:14:c9:d0:30:b3:ad:eb:ca:26:57:e9:3a:58:4c:32:
ac:56:6b:c2:53:3c:37:08:a1:dc:f6:c9:cb:6a:3f:93:83:e5:
90:bd:c5:92:d3:89:1d:0a:9d:80:06:e0:b0:77:27:f7:09:27:
5a:55:dd:ee:f8:fd:7c:7b:be:58:8a:d2:11:e8:2b:e3:b7:fa:
cb:b2:92:03:15:f4:d9:74:06:27:d7:db:3a:10:27:8d:41:a4:
f2:5a:48:9c:9a:c7:19:3f:54:d6:0d:67:94:ad:3b:af:9f:29:
82:ab:88:9f:0e:e6:2a:43:bd:27:69:e4:15:69:f3:cc:6c:6e:
c6:b1:e7:f7:30:46:1e:ab:cf:7d:d4:93:9f:0f:06:83:f8:fb:
24:5f:20:6d:a8:71:45:43:f3:8f:c8:bb:3f:e4:b0:c0:7c:d3:
e1:ba:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:42 2026 by rpki-client