Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: o8DptSn01hM25CCCSoGOpoZHnaDZEF2YkPYwyqQnGv0=
Subject key identifier: 58:7B:48:50:6C:75:06:D0:C3:D4:59:73:54:E9:F7:D4:C7:CE:69:7C
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019D269627F1EADAC90C40B31AC18ADCBFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 11B1
Signing time: Wed 25 Mar 2026 20:01:07 +0000
Manifest this update: Wed 25 Mar 2026 20:01:07 +0000
Manifest next update: Thu 26 Mar 2026 20:01:07 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: RrS79NT+qBdhw6OgGAqApp0DAFNq56paAEQ3NYy5ZLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:27:f1:ea:da:c9:0c:40:b3:1a:c1:8a:dc:bf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Mar 25 20:01:07 2026 GMT
Not After : Mar 26 20:01:07 2026 GMT
Subject: CN=587b48506c7506d0c3d4597354e9f7d4c7ce697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:b4:f7:a5:d2:3a:11:c4:1e:3d:fb:36:0f:
7c:3e:61:ea:b2:fb:ea:2c:bb:96:57:90:f3:fb:38:
45:2b:f8:17:9e:9f:87:73:68:21:6f:24:66:31:c8:
15:e6:f1:3d:14:19:3a:e1:d1:2f:b9:cd:3c:77:3e:
60:b6:a2:85:01:3d:ed:57:ac:ad:d7:d4:8e:5e:97:
e6:09:cf:79:83:b2:4b:91:91:ff:79:2d:83:93:88:
6e:00:c7:28:6e:12:2f:bf:ee:1c:1c:33:70:e4:cc:
9a:41:5c:1d:51:75:eb:a9:10:a8:b4:8e:65:4e:4e:
99:b7:b7:75:af:f1:80:a0:aa:a5:5d:45:99:47:d7:
e8:10:aa:3c:80:84:95:bc:61:aa:0c:7b:9e:56:7f:
d4:7d:be:6d:24:a2:e5:90:b3:c3:d3:84:64:1a:d6:
9f:bb:2c:e7:25:b1:ad:a1:62:0a:f2:3f:78:36:97:
03:47:17:7e:90:07:31:95:b0:f6:b9:31:8d:5e:6c:
72:99:b4:42:17:1b:55:0a:44:b7:f3:08:46:00:46:
4e:68:22:79:1d:a8:f1:2b:cd:1a:3e:ee:b9:10:67:
6c:e9:b9:4c:a5:32:1f:ae:dd:41:5e:52:44:f1:c8:
24:dd:3a:a6:a8:97:de:14:1d:95:5b:eb:59:da:25:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:48:50:6C:75:06:D0:C3:D4:59:73:54:E9:F7:D4:C7:CE:69:7C
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d7:6c:95:bf:da:c5:22:d7:7a:49:d2:73:9c:6e:3d:09:52:
51:09:d7:28:e9:88:fd:c0:e1:1e:21:07:71:a8:7e:39:1d:c0:
43:08:08:5a:02:07:d5:fb:74:94:dd:56:a5:ed:66:1b:ea:fd:
7c:1e:ab:d6:55:52:27:0d:31:a1:42:ee:6c:c4:2d:aa:30:7a:
53:d4:bc:d7:f5:d6:cc:1f:e8:97:07:b4:86:58:19:f3:c4:56:
59:26:a0:e8:14:f5:9e:5d:e6:90:94:ee:95:17:89:58:7c:a3:
ad:f5:74:07:3a:81:10:12:ec:a4:a0:bf:17:e4:d8:2b:f2:24:
29:ab:aa:d8:a1:38:0f:ad:a4:42:03:a5:3f:7d:50:62:b5:29:
2e:c6:d5:d4:67:98:f5:7d:3e:85:89:a3:fa:1d:38:9c:40:a1:
3f:0c:89:ef:b3:cd:3f:e7:7e:e7:75:49:9e:5e:08:3d:19:83:
ad:85:8c:44:6e:2f:15:8b:3d:a4:42:a9:f6:33:4e:46:87:47:
3d:a0:96:6e:0e:83:99:29:f3:b8:3d:b8:23:06:54:52:09:fb:
d2:2f:a5:b0:e7:c3:7e:33:50:00:a0:9e:1a:a8:48:b7:4b:b5:
53:53:13:0e:4d:aa:37:8e:b3:75:3b:38:92:0c:98:b4:46:ac:
3e:6f:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:15 2026 by rpki-client