Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: adSvxfliKSzWzOyvd7RswIwBxw/Na+VBh4evXth6zUQ=
Subject key identifier: 34:77:B3:1B:8E:0D:35:BD:F8:5B:7E:31:7F:B4:7C:CC:54:BB:2D:EC
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 019D389C515868C64519A3783D4CA7EBE652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 064F
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: PAm1yALS9x-qP_AZ-54W9AnDYy8.roa (hash: GPlRwEDHa/2OENPSASpmCv5lcN0fa6+rmfNybAsq4r0=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: JbAPzxMuhV9O/nWmlh/CzPl5pN6ksaPB8K0ohKc/RlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:51:58:68:c6:45:19:a3:78:3d:4c:a7:eb:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=3477b31b8e0d35bdf85b7e317fb47ccc54bb2dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:00:ef:6b:f1:d9:54:71:48:2b:ea:dd:25:
64:b0:27:92:c6:eb:1b:b2:8e:a5:67:44:fd:aa:a9:
cc:b7:2c:be:be:cb:48:bf:e9:37:7c:d7:e7:80:81:
9b:e8:3a:ec:c1:07:d1:5d:e5:d9:77:2c:a7:da:80:
3b:1b:f8:e8:06:c7:3a:d8:b3:64:4b:aa:b6:5f:7e:
b0:2f:a4:ef:01:fc:35:63:62:07:9f:fa:23:52:f6:
21:0d:b3:7f:e4:9b:0f:a2:09:6d:d5:6a:54:98:21:
49:2e:5a:56:87:ca:8e:bb:36:ff:0f:73:23:57:85:
09:c0:93:f3:00:ec:14:03:bc:b8:bb:19:94:ef:c2:
21:40:a4:53:a0:a0:be:10:4c:82:32:83:00:cc:09:
37:f8:e9:85:c3:04:58:5d:57:7d:84:0b:d9:b2:3a:
18:d8:5d:75:e3:de:3e:4a:fb:1d:d6:a4:b5:21:13:
3f:61:fa:4a:76:14:a0:08:2c:4e:fc:db:b3:b7:65:
64:f7:a4:35:81:27:00:12:87:93:1b:18:7d:5b:fe:
1a:66:e4:cb:6c:d9:f0:d6:53:29:c0:3f:71:0d:48:
82:3c:fd:41:3c:2b:ca:7d:c9:31:b1:7e:c7:1a:ea:
6c:64:4d:9b:09:af:df:15:37:82:93:bb:72:cb:0a:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:77:B3:1B:8E:0D:35:BD:F8:5B:7E:31:7F:B4:7C:CC:54:BB:2D:EC
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:59:1d:6a:57:6c:04:df:97:85:ab:b1:2e:70:39:6d:65:
1e:56:e6:73:de:57:7a:81:d8:87:b1:da:e4:f6:99:9e:0b:75:
a2:c3:99:c8:fb:18:ec:21:f3:4c:55:6f:e4:73:5c:5a:a7:38:
a0:2e:6d:d0:d3:f6:6e:ba:c7:96:c8:a3:d2:87:d1:b4:fd:16:
4e:08:41:75:00:44:84:39:47:ab:0a:89:66:08:c4:81:90:75:
4a:c4:9f:71:d0:f3:e4:19:ad:0e:38:31:cd:f2:b3:94:e4:4b:
3d:ef:08:22:0f:a9:f0:38:4b:ce:31:c0:c4:d4:df:8f:54:23:
56:fb:81:d1:da:0d:cf:50:a0:a9:5f:6e:8b:f1:7f:1e:8d:e1:
fd:58:de:93:35:c3:6c:6e:00:3e:ee:2e:be:57:a8:9f:79:47:
55:26:eb:44:40:13:35:df:3c:cd:e8:da:a8:2a:6a:97:a5:e7:
b8:ee:5a:54:29:d8:01:34:ad:cf:ef:0f:4c:54:20:82:d1:70:
b6:51:d8:ec:50:75:b5:bf:ba:c2:77:bf:23:09:1a:8e:aa:3a:
ae:99:19:ea:57:1a:ec:48:71:5b:87:6c:81:e4:f3:92:a0:af:
05:4c:5e:11:30:28:97:7e:d1:18:ab:2c:b2:3d:fb:f1:8b:a2:
4c:d1:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:55 2026 by rpki-client