Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: azsy/5Gcf+qwf91SanIP/oRChWb5VAJysGqMICqBEI4=
Subject key identifier: FD:13:F4:50:AF:52:03:E3:6B:4D:D7:A1:CA:71:42:7E:93:A6:25:AE
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 01A0D8DF5958BFAD51921BCC5BE1EAE561E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 139B
Signing time: Fri 25 Sep 2026 14:01:51 +0000
Manifest this update: Fri 25 Sep 2026 14:01:51 +0000
Manifest next update: Sat 26 Sep 2026 14:01:51 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: VhYlHF2mb0sUyKLA2jvD2pOf+nxB3Fh6Adl6rit9gvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:59:58:bf:ad:51:92:1b:cc:5b:e1:ea:e5:61:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Sep 25 14:01:51 2026 GMT
Not After : Sep 26 14:01:51 2026 GMT
Subject: CN=fd13f450af5203e36b4dd7a1ca71427e93a625ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:0f:5b:89:d0:f3:d4:a1:03:98:de:45:01:
fd:00:d4:b1:a2:85:28:bd:c5:95:a1:f1:d5:9b:05:
ce:a1:43:67:09:54:f3:76:6f:6b:06:97:e7:6b:8e:
b7:fa:73:ed:7f:27:40:4b:88:84:1f:07:86:2f:f6:
cb:55:86:08:1c:08:fe:1f:8d:5e:9b:2c:c3:ed:e4:
d1:7c:86:f7:e5:f7:3c:10:a3:d6:db:f2:bd:0d:7f:
6b:a8:94:1b:76:0a:33:17:b4:c1:8c:de:7a:6d:87:
1c:f0:a6:16:7a:ea:29:d7:2f:da:44:98:f0:f7:1b:
d6:7a:91:47:e6:74:02:c9:0d:42:73:d1:aa:0d:5d:
c0:f5:75:a2:2f:b1:7b:0d:3a:5c:2a:4b:da:95:fc:
67:10:42:12:44:d1:45:cc:05:fd:81:03:33:ef:e5:
2d:55:3b:8f:b3:14:9a:b0:c4:87:a4:09:c5:f8:63:
d5:db:74:99:58:3b:53:4e:3c:cb:a5:1d:cd:a6:21:
0e:a2:14:25:81:ea:9b:d7:17:db:c1:2c:00:f0:20:
aa:a4:59:4c:44:78:ab:81:d7:f1:9b:58:05:92:f6:
ff:98:90:b7:b6:6b:09:d5:96:97:0b:52:de:80:8b:
df:9a:c5:c5:fc:e4:7f:15:45:12:a3:05:73:b7:06:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:13:F4:50:AF:52:03:E3:6B:4D:D7:A1:CA:71:42:7E:93:A6:25:AE
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bc:a3:1d:f0:52:51:f4:cf:1b:9d:18:49:7c:b8:16:f0:6b:
90:29:bc:42:d8:b7:61:84:7b:5d:26:b2:ee:ce:8a:5a:af:02:
2b:4c:53:13:87:30:ba:86:3a:7a:0d:5b:85:05:2f:db:86:e6:
c1:eb:6a:4c:2a:75:1e:99:67:75:53:e8:a9:d0:ec:39:c2:18:
51:7d:15:67:52:a2:fe:bf:af:58:53:70:e8:bd:8d:5a:03:bc:
1e:23:c5:e6:3d:4f:4b:a8:cc:ce:fa:5f:db:93:d8:94:a2:62:
93:d3:63:df:26:27:5f:82:c5:a4:90:de:82:7f:7f:79:65:4a:
3c:40:51:17:d0:d4:94:37:ba:a3:3d:84:cd:8c:be:38:89:00:
a3:8d:88:ac:f2:0c:79:bf:21:f7:29:c7:0a:97:a7:72:ee:37:
32:da:3d:45:93:c9:67:f4:b7:ee:3f:e1:31:9b:fb:67:70:18:
f8:84:9c:1e:ad:16:c1:57:65:1e:71:fc:d5:94:6a:19:69:19:
ed:05:58:cf:3f:3b:d0:e7:b0:41:f5:70:49:67:bd:01:eb:fd:
a8:fd:d1:5a:2e:c8:2e:57:cf:31:d0:f3:b0:f4:14:14:06:85:
eb:43:8d:81:25:3f:f3:54:94:27:90:89:27:0d:1e:a2:6d:7e:
d2:db:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:43:20 2026 by rpki-client