Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: fnN20Eztmyz/TjyJALa4wWeZDbT8HXFBh5HxOWUhX64=
Subject key identifier: B3:E4:FC:CA:EF:C1:DA:1C:58:23:97:0A:C8:65:D0:FC:17:32:DC:0A
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019D2A04BAD2A73274D907702D00511F1AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0409
Signing time: Thu 26 Mar 2026 12:00:46 +0000
Manifest this update: Thu 26 Mar 2026 12:00:46 +0000
Manifest next update: Fri 27 Mar 2026 12:00:46 +0000
Files and hashes: 1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: P1pV/MWlQjWlEYgS11pIvMpa7I5yJ+YX4MslwUT+Yd4=)
2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ba:d2:a7:32:74:d9:07:70:2d:00:51:1f:1a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Mar 26 12:00:46 2026 GMT
Not After : Mar 27 12:00:46 2026 GMT
Subject: CN=b3e4fccaefc1da1c5823970ac865d0fc1732dc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:1a:39:1c:c7:4f:2b:e8:f5:f9:08:b7:1a:
a2:50:bf:1f:82:0f:a1:da:6a:e1:c1:03:40:95:27:
46:6b:e1:07:91:2b:91:a3:d6:b6:9a:fd:27:6e:32:
d9:76:2c:59:fe:89:41:80:94:79:d1:58:65:70:aa:
90:cc:7a:4e:66:fb:11:01:c1:01:c4:a3:e8:f3:ed:
ec:3b:65:0e:1d:df:cf:85:e7:95:b0:69:f8:08:6c:
05:99:2b:39:b9:6e:76:c4:dd:14:79:b0:2a:52:bc:
44:0c:b1:7e:c6:d1:a5:18:73:c8:8c:e9:32:cf:7b:
65:9c:91:8c:45:ab:03:20:aa:6b:a7:ec:70:57:2c:
8d:81:83:9f:d0:08:08:9d:32:d6:c5:fe:6f:b0:d3:
16:29:3d:68:f3:77:a2:7f:88:17:a5:30:6b:59:c5:
2b:32:59:a5:f2:ac:fa:40:65:cc:56:66:63:a0:01:
31:e1:1e:7c:57:d7:d7:7f:31:83:80:f7:61:a7:9a:
e3:f6:52:4f:5c:b4:09:c0:a8:bf:c1:14:4d:45:a5:
46:9c:6d:22:db:77:c5:f2:11:db:3b:69:ee:df:b4:
44:2c:ad:4d:63:94:99:9a:da:d6:c0:2f:52:5d:bc:
73:22:3a:7a:a8:df:5e:15:46:da:bb:57:c0:a3:54:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:FC:CA:EF:C1:DA:1C:58:23:97:0A:C8:65:D0:FC:17:32:DC:0A
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:af:fb:7b:3e:79:94:26:c9:66:83:52:8b:50:d5:21:c5:
d0:15:08:e2:ff:18:30:da:d0:75:5c:be:a0:d2:7f:20:2e:af:
5e:af:88:53:d5:5f:c4:cf:c8:60:d4:b5:1c:b7:27:c0:ac:44:
49:82:d9:bd:df:42:fd:f0:ca:b7:49:07:7a:ac:19:2e:5c:7a:
13:6b:95:5b:ff:c7:e9:7d:49:f7:81:c4:50:2b:9c:e4:33:2c:
57:eb:e4:a4:71:6a:3c:33:b3:54:96:de:b0:b8:ff:a2:82:6f:
ad:60:1b:3c:29:09:f4:48:85:06:fb:0a:3e:80:f3:d3:90:8a:
ae:16:ab:31:56:dc:99:f2:d5:3e:9e:18:02:3b:ac:ce:d7:95:
33:3e:2c:01:f5:82:b6:bb:8c:54:7e:e0:fd:62:83:ac:64:1a:
76:3b:33:52:1c:41:f0:6e:50:50:30:e7:ef:eb:a2:e7:c7:03:
3d:83:08:94:d6:e5:0b:b9:94:6c:1d:79:f0:49:55:4c:39:3e:
32:11:2c:0b:67:ea:dd:98:08:20:f2:31:8e:2c:b5:f7:e8:2d:
87:df:18:a4:3c:75:07:fe:42:6f:92:0f:70:a7:b4:a0:45:5c:
ef:cc:8c:ae:cb:5b:cf:03:26:c1:62:b9:a3:d1:19:df:ef:ef:
37:8c:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:25 2026 by rpki-client