Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
File: VlIv9fvKiFRLh6NC_veNHJH8_ds.mft (raw, json)
Hash identifier: 3J7SYxq7X6k/GBkvNASEFuR5a2zLpYLzMFkqDso532M=
Subject key identifier: EC:41:2B:FA:88:45:04:68:4C:CA:F7:86:A7:D4:C8:15:3A:3E:69:39
Authority key identifier: 56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
Certificate issuer: /CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Certificate serial: 019D26284D3456751E44DFF5DB0D33BE2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
Manifest number: 6F
Signing time: Wed 25 Mar 2026 18:01:08 +0000
Manifest this update: Wed 25 Mar 2026 18:01:08 +0000
Manifest next update: Thu 26 Mar 2026 18:01:08 +0000
Files and hashes: 1: LCWWGgiEkfv8IQFbDtZx-krsGxo.roa (hash: h0XnQpGh2D7sxxvTcL/GJXSaEJwSVHnwUOU+xwPMPZI=)
2: TrfwfhcY8GGswLkgJrkJWsWSAlc.asa (hash: zmO01xmmzNKQw6cPo8ZkDqbcz8cu3YAmuN8CJGkozWA=)
3: VlIv9fvKiFRLh6NC_veNHJH8_ds.crl (hash: Ddi4Y1YqIrgAURX6eY9TrbxqiI2oT4P4ctH5mJwd/JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:4d:34:56:75:1e:44:df:f5:db:0d:33:be:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Validity
Not Before: Mar 25 18:01:08 2026 GMT
Not After : Mar 26 18:01:08 2026 GMT
Subject: CN=ec412bfa884504684ccaf786a7d4c8153a3e6939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:2f:a0:ca:65:d3:d3:db:62:6e:77:3d:2d:
d0:3e:a4:87:1d:27:64:27:64:75:fa:34:c4:fa:98:
47:5b:f2:26:a0:5c:e8:7f:e7:49:cc:c9:9e:36:69:
03:5b:9e:1d:07:07:cf:3c:a9:4e:be:ae:db:d9:ef:
4a:af:a5:fb:9c:1b:ef:c8:79:5a:bb:6b:3c:cf:ae:
e1:ac:55:02:fa:2e:ce:ab:ee:8a:5f:5b:f5:d4:22:
2e:19:bb:e6:83:e7:ff:5d:52:d5:7e:3b:96:25:15:
cc:3b:e9:04:01:80:73:3e:7a:54:e2:bf:74:bd:81:
9d:52:ba:f3:49:88:88:0d:06:82:48:a8:9d:3a:d6:
a0:68:95:70:14:03:20:83:07:20:3e:07:e6:68:52:
08:21:2a:1e:d4:1d:33:47:ad:c0:15:69:f3:76:88:
ab:05:c0:e8:d6:be:da:2b:08:93:03:64:80:26:7f:
4a:f3:f1:88:c9:47:6f:84:30:4f:bb:8c:55:7c:15:
4a:0b:8a:80:b8:b5:14:c9:b9:6f:a6:7c:ca:eb:4b:
25:cb:c1:f3:58:a2:db:e8:05:c0:0a:09:01:e1:eb:
5e:87:57:ee:40:e0:f2:3b:02:fd:dd:b8:96:c6:ba:
06:a3:d1:69:02:f0:56:32:25:a4:07:7f:7e:a6:5e:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:2B:FA:88:45:04:68:4C:CA:F7:86:A7:D4:C8:15:3A:3E:69:39
X509v3 Authority Key Identifier:
keyid:56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1b:7d:e6:95:bc:49:6a:b5:8c:45:4c:e2:a6:60:c3:b8:82:
66:88:84:70:6b:29:e5:a2:50:d9:d3:1b:c5:b2:08:f6:a3:d6:
ae:5a:65:23:fc:dc:ca:2a:24:fb:ec:47:08:bb:3d:a7:cf:65:
ef:8c:53:6a:48:df:2a:83:e5:e5:67:ec:82:1f:c1:d5:15:4d:
72:fe:0b:24:81:2c:ff:f1:5d:02:28:11:de:7a:67:02:26:55:
90:45:97:ad:34:08:b7:98:71:01:01:6f:ed:4b:65:84:b1:50:
06:76:27:72:ad:87:2e:29:31:d3:5e:2e:33:d3:56:16:dc:74:
ae:21:e3:ae:3f:da:c0:5d:5a:89:95:15:08:32:45:d1:ee:b3:
32:31:2a:ae:08:22:d9:db:df:66:59:51:fa:21:1c:17:71:68:
c2:5d:ee:f2:12:a1:e9:9c:14:83:fe:cf:a8:f3:26:ef:11:62:
e7:35:47:65:c9:42:47:90:e8:0a:09:5c:6b:ac:ab:13:36:ce:
1d:59:e8:10:41:e4:b6:00:cd:d5:04:e1:92:33:2f:75:03:cd:
e2:d1:af:35:9d:7d:df:38:7d:3d:73:4d:9b:f5:78:7d:1a:92:
d3:e6:90:f7:3c:0a:2d:c7:f5:a0:d4:06:ec:30:d0:0f:7c:36:
32:24:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:17 2026 by rpki-client