Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
File: VHd3rO-MSS5QEb3ewSmviuyXS3c.mft (raw, json)
Hash identifier: H1CVMc3xU0VfM+PJYys7qoR3LaRRtCFUcCnQqA5kkzc=
Subject key identifier: 37:9E:FC:C9:B7:61:24:ED:AB:22:EC:60:19:08:23:D1:F9:EB:DD:F7
Authority key identifier: 54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77
Certificate issuer: /CN=547777acef8c492e5011bddec129af8aec974b77
Certificate serial: 019DCD197FFB73CFE33BCBCECE4238C3F406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 04:01:33 +0000
Manifest this update: Mon 27 Apr 2026 04:01:33 +0000
Manifest next update: Tue 28 Apr 2026 04:01:33 +0000
Files and hashes: 1: H5HaxNWVOqxU799AVgPxEXn01qU.roa (hash: mWDQsDbJvuwqHmN/2vnE3qUbbfA/iapxxfRizly7drk=)
2: VHd3rO-MSS5QEb3ewSmviuyXS3c.crl (hash: QQMY/cEe9POMht/jsN1g/fiJW5GP9N3kC56dJOPL7rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:7f:fb:73:cf:e3:3b:cb:ce:ce:42:38:c3:f4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547777acef8c492e5011bddec129af8aec974b77
Validity
Not Before: Apr 27 04:01:33 2026 GMT
Not After : Apr 28 04:01:33 2026 GMT
Subject: CN=379efcc9b76124edab22ec60190823d1f9ebddf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:0c:14:8f:ce:14:51:f2:15:85:a2:8f:24:
1c:bd:51:2c:8b:e5:4b:f2:c7:25:8d:30:8a:11:2d:
76:54:30:a9:63:65:ac:92:1d:14:64:91:4e:94:27:
6c:11:db:bd:db:d1:cf:58:a1:af:94:73:81:4a:08:
28:29:e3:8e:50:0c:f5:95:16:7c:49:1a:e7:a9:58:
33:58:95:8b:0e:ba:2b:d0:f6:d1:32:8b:90:98:e1:
c9:01:51:07:20:e1:f4:12:58:a2:38:18:ed:a3:30:
16:c3:8a:4c:5e:01:75:e7:d3:6f:0b:c3:db:04:ff:
94:c0:5e:fa:20:57:28:07:fb:6e:36:b9:bb:47:79:
e8:70:67:95:73:14:38:61:e3:56:dc:f0:62:2e:17:
ee:4b:37:d8:21:5c:b8:b8:4e:85:1d:0a:d3:93:a6:
24:08:67:81:4d:06:58:d4:b2:cb:c0:15:4f:95:1c:
ad:82:ab:f9:bb:19:43:b0:d0:35:ce:61:02:b5:76:
9e:ab:50:d4:03:75:d9:0f:c7:d2:a6:ae:9f:59:d3:
f5:c5:52:ea:d0:2e:72:76:02:c4:74:25:06:4b:1c:
b8:27:16:a2:ef:9d:b0:68:c3:20:d7:f2:98:7d:12:
4c:12:19:76:01:3c:98:ee:98:6c:50:61:e7:02:f7:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9E:FC:C9:B7:61:24:ED:AB:22:EC:60:19:08:23:D1:F9:EB:DD:F7
X509v3 Authority Key Identifier:
keyid:54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:31:b9:f0:0a:2b:0e:f2:a8:4d:bc:e8:04:f0:b0:d2:c9:fe:
69:c9:57:bf:be:17:ed:13:e4:32:c4:81:36:ec:24:ef:a6:fe:
1d:bd:f1:02:55:7f:16:12:8b:c5:c3:8c:47:e3:a5:49:59:1e:
0d:ca:8d:b3:dc:fa:4c:19:5d:5b:48:2c:d6:a1:61:c3:fd:80:
1e:6d:3e:68:0f:64:e5:2d:88:c5:79:59:b1:fc:53:58:e7:08:
c7:72:d5:ce:06:5f:71:0e:63:69:79:65:ae:b9:b4:c9:45:b9:
58:33:16:19:12:85:c8:79:ee:5c:1a:7f:bb:25:18:a7:f2:14:
ca:bf:02:cb:1b:26:ef:2a:e2:4a:2e:df:53:6a:68:bf:2c:cd:
7f:d7:1f:af:95:91:f6:d6:fb:32:f9:8c:ee:2f:5b:f6:10:c1:
13:80:15:dd:ae:98:03:60:e3:3e:b7:b5:cc:4d:a1:94:a3:67:
d0:d9:e9:85:b9:13:04:2b:cc:d0:e8:b9:27:ce:9e:6f:e7:57:
b1:78:81:10:49:82:be:70:62:23:32:04:c5:84:11:fe:7b:c3:
31:d2:94:97:15:aa:cc:8a:90:96:ed:4d:a4:e0:78:69:15:cd:
5a:23:88:5a:e0:b1:a6:03:83:3e:4f:ac:e5:37:e1:eb:92:a5:
bc:07:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:14 2026 by rpki-client