Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier: 5dtYMkxWZiSbr4YTE4z5D6oQ8jbhvrJVS82H2a4yStY=
Subject key identifier: FF:C5:AB:5F:1D:EA:D9:FA:BE:76:11:CC:F9:21:0C:FC:C4:19:F8:C8
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial: 019D262868415BADF3303EA936C3A831D791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number: 17D6
Signing time: Wed 25 Mar 2026 18:01:15 +0000
Manifest this update: Wed 25 Mar 2026 18:01:15 +0000
Manifest next update: Thu 26 Mar 2026 18:01:15 +0000
Files and hashes: 1: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: H+Z2re848i3F93MctG1BdUddji5OJ/3P3Bu9JFhwnGs=)
2: wFPcFTfLNLeeu52DTqhU-V8PVts.roa (hash: NDGhqeRV7hsYmZ5mOPeghOQaf73uDqp19ZwPDNgT1mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:68:41:5b:ad:f3:30:3e:a9:36:c3:a8:31:d7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Validity
Not Before: Mar 25 18:01:15 2026 GMT
Not After : Mar 26 18:01:15 2026 GMT
Subject: CN=ffc5ab5f1dead9fabe7611ccf9210cfcc419f8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:82:ba:6b:0e:e4:0f:f4:d6:dc:bf:4c:87:
46:09:04:28:c5:f2:98:7e:25:cc:85:51:fc:71:9b:
97:70:9c:b3:47:e0:05:1d:fd:78:dc:b5:0f:cb:4a:
59:2c:78:d1:09:ed:7e:9a:37:af:7b:a0:a5:9b:7e:
29:c4:84:eb:20:b2:50:21:c1:ea:43:60:6d:a6:16:
30:66:e9:28:14:7e:9d:0d:16:bf:31:2b:0d:10:75:
75:55:51:cc:71:bf:c2:d8:16:0a:0b:fb:58:99:85:
c7:4a:d4:51:b9:31:bc:a1:2d:65:6a:02:07:bc:19:
4d:eb:0b:6a:17:a7:f9:03:1e:da:32:63:ad:29:ab:
e8:e4:d3:b8:1e:de:6e:f7:ac:f7:af:af:1b:ea:16:
7b:b6:cc:c7:ab:b7:d6:0b:c9:c8:bc:36:d1:ec:7a:
0c:ae:2d:6a:7a:ab:ea:bd:78:26:eb:08:47:47:a8:
d3:2f:9b:63:b0:59:84:77:77:02:f0:e7:60:f1:38:
21:59:07:0e:0c:1f:94:18:34:91:fb:22:6b:27:f5:
5f:c5:b5:6d:49:c0:bb:cb:8d:7a:fb:d6:3f:ae:7f:
11:c6:e0:8f:ae:3a:37:81:51:e9:b0:b7:79:2a:4b:
75:60:5a:62:6d:1d:31:f9:5a:3e:5c:19:21:bf:6e:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:AB:5F:1D:EA:D9:FA:BE:76:11:CC:F9:21:0C:FC:C4:19:F8:C8
X509v3 Authority Key Identifier:
keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:32:af:aa:d9:76:ba:1d:44:90:6c:c1:15:cb:15:b4:17:d4:
cc:10:68:cb:cb:f6:25:55:30:e4:fd:09:6b:a6:44:d6:9d:b1:
06:ae:0f:92:eb:6e:21:e4:91:d4:97:38:1e:35:5a:ae:f2:0a:
2e:70:cc:e4:4f:02:de:4d:1b:fe:dc:df:fc:83:87:85:28:93:
78:d7:33:4a:70:a0:dd:d9:a6:6b:17:51:93:91:31:b2:69:e4:
93:88:0b:84:44:02:99:16:99:34:4a:6e:a3:20:48:b6:6e:b5:
c5:22:8b:53:79:61:05:53:31:db:de:a1:91:97:37:0f:0b:85:
05:0b:aa:ea:d1:13:c3:71:2e:8a:1c:cf:df:2d:c8:7a:46:17:
b2:3a:e0:ed:e1:88:cd:2f:81:62:c8:b1:8c:09:85:99:1d:24:
88:1a:0c:25:34:42:bc:8d:d7:4e:cf:8c:7a:e4:24:71:d4:b4:
d2:c6:3e:ed:81:96:55:ce:f6:12:97:dd:ce:b3:f1:3c:15:58:
37:fd:cb:96:02:24:f3:9b:f9:07:10:35:64:91:d4:75:b7:2d:
0c:2b:01:e2:18:f7:00:d3:4a:d8:56:08:73:4f:ba:9a:04:92:
ed:97:26:c2:39:5a:47:3d:16:38:e3:3b:f6:0a:66:2b:e5:e5:
a6:99:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:01 2026 by rpki-client