Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier: QOu9bX6GtAI/9z4QicBgNmBdbrvLl/PEaPas6tQtSHo=
Subject key identifier: C1:47:D0:AE:4C:FA:33:CB:7A:29:D1:EC:FF:3D:E2:2D:65:D3:2D:65
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 019D2884A0FBBD1D579645B7C5F3BB483A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number: 0845
Signing time: Thu 26 Mar 2026 05:01:13 +0000
Manifest this update: Thu 26 Mar 2026 05:01:13 +0000
Manifest next update: Fri 27 Mar 2026 05:01:13 +0000
Files and hashes: 1: TiOuXl2Q6wOQFGF7jg66qaSdky8.roa (hash: wT30EzG4ZVMuETn0p/EI2klu+YujqvMu+EM2q0pIlpI=)
2: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: beRKqXjumtddhptKyYS3z+ELEiY9wnv+LAQEnfylAOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a0:fb:bd:1d:57:96:45:b7:c5:f3:bb:48:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Mar 26 05:01:13 2026 GMT
Not After : Mar 27 05:01:13 2026 GMT
Subject: CN=c147d0ae4cfa33cb7a29d1ecff3de22d65d32d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:fe:87:1d:7a:96:82:bc:45:21:36:c7:cd:
46:81:80:a4:0d:9d:63:01:9d:59:3d:6f:73:cc:12:
bf:bc:12:97:8b:aa:24:d2:8c:2d:c9:a7:b1:98:9c:
d7:c8:a6:1d:81:01:0a:d0:74:a8:43:5d:3d:ec:93:
16:f5:2a:de:3f:76:75:d1:a5:44:0f:77:ca:74:f2:
84:3f:07:dd:56:a4:b6:fa:5d:16:78:93:1c:ed:5e:
02:fd:4d:70:26:67:9f:1a:27:e1:66:83:cc:17:45:
5a:15:ca:98:d9:2b:02:d7:2c:45:2d:35:39:93:3a:
bd:30:45:1a:70:b3:93:6f:65:b3:5a:fc:6a:8b:35:
fd:8d:33:9e:68:2c:80:a0:d4:d6:2d:11:88:94:9a:
dc:f0:b1:42:a4:3e:35:c9:91:c3:3b:10:2c:65:35:
12:0a:cd:dd:11:36:58:05:53:fb:77:88:49:54:6e:
bc:47:aa:9d:37:6d:15:14:29:6f:ba:76:53:34:26:
d1:44:40:6b:a7:bf:33:fc:9b:76:a4:32:3b:42:6d:
16:d0:d2:fd:5b:8a:1c:0e:d7:6e:e7:02:32:32:90:
21:05:a0:23:e3:3d:fd:29:77:b0:29:47:59:30:e2:
6d:b8:8b:2d:d7:4b:c0:7a:94:5d:d8:ba:03:ae:c2:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:D0:AE:4C:FA:33:CB:7A:29:D1:EC:FF:3D:E2:2D:65:D3:2D:65
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:33:ed:b0:5d:27:82:1b:5e:90:f9:d3:fd:4d:76:b7:75:51:
25:2f:2b:6a:cf:7b:3a:17:84:2c:c4:6a:76:c0:ed:a7:e6:7d:
56:b2:77:95:f5:4a:5a:04:3f:13:04:f2:05:a0:85:a7:62:52:
f3:1e:fb:4a:9d:c7:09:27:9e:1f:85:ec:b2:bf:0d:0a:50:2b:
8c:45:a5:5e:7b:85:94:40:f3:13:82:8d:76:ed:f9:de:11:ae:
4d:0c:11:d3:b9:98:a3:40:28:27:20:52:81:77:58:97:df:06:
56:0c:a0:30:52:35:c2:21:2b:01:1b:f7:22:f6:92:b0:47:04:
de:8b:98:e7:65:ca:43:11:1f:3d:a2:30:f7:4e:fc:3a:7e:53:
c5:4b:d9:fa:79:95:9b:b2:af:bc:35:97:57:4a:15:e6:fd:84:
b4:f7:33:df:c9:ef:35:41:29:53:2e:61:55:c4:6e:94:6c:68:
b0:c5:06:45:e7:63:5f:c1:60:1a:c3:e4:81:6b:f9:bb:fd:9c:
1c:53:ac:d9:a5:b5:e3:65:df:8b:cd:e0:ec:73:81:5c:57:44:
36:22:07:e6:95:0c:5e:27:f2:ab:f6:87:3f:3c:a2:cb:0a:32:
6e:37:1b:8b:44:59:2f:bd:b9:65:99:93:8d:6e:ac:d8:2e:a9:
39:aa:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:13 2026 by rpki-client