Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: D2P93d72ENPvWB7GCcnhKMf8G3TaH1P1rufwNy9pbzs=
Subject key identifier: 9A:24:88:B9:13:73:0C:7A:03:FC:31:53:17:F6:DB:07:83:AD:B1:25
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 019D38D2F4B1CA1AF7DA1A13394C930D2710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 04AA
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: YO6kh+W9EbebkALmzPa5B5l1KxV0IJ4UwNlChHbZ+Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f4:b1:ca:1a:f7:da:1a:13:39:4c:93:0d:27:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=9a2488b913730c7a03fc315317f6db0783adb125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:ff:06:59:77:2e:09:db:0b:3a:48:43:73:
8a:b8:3a:03:33:51:e8:b6:66:c0:1e:8e:58:28:fe:
67:c2:48:06:6d:66:7c:3e:ff:d7:12:2e:34:97:49:
d3:8c:e9:b3:ae:90:77:e4:09:f2:d4:8e:c2:e3:01:
5f:30:80:56:f8:14:c0:8d:b1:6d:fc:aa:0d:79:e9:
ac:da:40:62:c4:57:39:65:8c:a2:a4:a3:49:fb:46:
ba:fe:46:c9:14:f7:1f:07:2c:47:e5:a5:a6:ff:57:
94:5b:1a:ea:1f:45:a5:1f:49:2e:fd:5b:52:2d:42:
c9:1e:fa:7f:3f:dc:4e:cf:d6:c9:2a:93:91:96:ba:
bc:90:91:c8:b5:b0:ec:b0:37:b9:fe:f3:2a:b7:5a:
da:9d:83:18:d4:c8:a4:1f:78:d2:40:73:a1:b8:d6:
59:c5:ab:fc:38:c4:4d:e1:a1:da:00:13:7e:51:4c:
43:24:d7:f8:72:0f:32:6e:33:06:d7:b3:57:3f:f8:
d5:66:75:fe:a4:36:10:ce:32:f3:8b:e7:1d:80:f8:
49:9c:f3:f9:48:0e:f9:76:2d:7a:d3:67:f6:53:78:
7a:e7:30:d8:f9:63:49:bf:4e:90:6e:d4:a0:a1:e9:
0f:b1:43:8c:ac:7a:78:04:67:59:91:d2:e2:52:ea:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:24:88:B9:13:73:0C:7A:03:FC:31:53:17:F6:DB:07:83:AD:B1:25
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:a4:e5:5b:fe:1c:f2:1f:23:d8:fb:55:8d:f3:b5:b5:46:
7a:1a:ef:f0:66:97:8d:2f:8c:d4:85:01:01:c3:c0:88:28:7a:
c0:db:e0:fe:ad:f9:0f:db:3b:7b:5f:00:6e:7e:d3:09:ce:22:
30:93:23:c4:90:d0:84:dd:4b:db:d5:c6:60:ea:6d:1d:fd:71:
5e:0c:ce:dd:2a:52:a9:28:18:7e:c3:20:5c:0c:a9:16:1e:eb:
9e:e8:ba:c6:40:bf:f8:76:4e:f6:02:2c:26:45:37:3c:8d:81:
3a:3a:28:f4:c2:af:b5:71:ca:28:35:7a:c1:97:4f:23:9f:ad:
c2:9e:e2:ab:f2:73:2d:da:3e:55:01:50:88:68:99:36:46:ff:
2a:31:15:3f:e6:11:58:1b:d7:20:08:ed:e5:bb:41:e1:bd:4c:
8e:e9:14:09:cb:69:9f:66:32:ea:5d:87:b5:9b:77:34:80:97:
30:d9:82:8b:85:14:3f:52:cf:fb:0e:8e:e4:a6:46:84:b5:48:
0c:84:bf:05:43:ba:da:43:62:04:a2:c1:95:29:24:e3:d1:6f:
21:59:19:cf:14:11:e6:b1:9d:0f:ca:50:04:59:78:86:03:78:
ba:11:a2:e2:d6:98:57:7b:19:06:1b:e0:f5:25:86:af:84:e7:
77:43:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client