
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: HoucEg1BbE3wZt+phfDZydw9rs+QKkqWFDdliYGQhQk=
Subject key identifier: 92:C8:38:76:47:E3:D9:9D:47:B9:7D:8B:83:0B:5A:3B:88:D5:75:D1
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019E1FB57B357647F4E853EADCA7B764A932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 1232
Signing time: Wed 13 May 2026 05:00:47 +0000
Manifest this update: Wed 13 May 2026 05:00:47 +0000
Manifest next update: Thu 14 May 2026 05:00:47 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: a6BWYXO4XVjohQl55tG5/LXkt+AqaZFOqP50lNiUuOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:7b:35:76:47:f4:e8:53:ea:dc:a7:b7:64:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: May 13 05:00:47 2026 GMT
Not After : May 14 05:00:47 2026 GMT
Subject: CN=92c8387647e3d99d47b97d8b830b5a3b88d575d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:22:dc:bc:0a:04:c3:92:25:42:c1:38:f6:
60:2f:ad:36:61:6f:2c:14:6a:61:72:f9:ee:c9:56:
9e:ca:66:5b:3d:13:bd:b1:50:d1:00:dd:f0:d7:9a:
da:bd:81:df:20:14:48:d7:d5:c7:ec:33:6f:90:bc:
89:b4:77:fe:d4:21:ae:ca:c8:71:46:3d:f6:df:4b:
8d:1b:cf:73:1c:24:a5:64:b9:b0:c3:1c:d7:95:2c:
3f:73:3e:e3:d0:ad:42:a6:dc:6e:07:f8:f0:ba:46:
28:d7:d0:c9:51:fc:0c:46:4d:68:97:d8:c6:a6:40:
aa:6b:40:d4:de:43:fe:a1:4a:36:21:cd:d3:02:91:
ce:32:7d:3d:45:4a:85:e2:d2:a7:11:a3:b4:71:78:
92:2c:c6:ba:b8:c5:4f:9a:2f:b1:44:a4:64:4b:bd:
2a:8a:4e:75:c5:71:d5:a4:15:79:f5:83:3f:df:31:
bd:ba:c5:1e:e1:cd:80:5c:a0:b4:25:38:30:e3:af:
a7:6a:68:33:f8:87:00:f0:d9:11:cc:b2:96:7c:75:
09:94:a4:f0:fe:58:d6:ed:34:f6:b6:e9:cb:46:34:
80:04:47:6d:cb:89:9c:ad:49:34:d3:31:63:c4:08:
03:d9:ae:89:2f:f8:c9:f4:ec:c5:7f:05:4f:cf:f9:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:38:76:47:E3:D9:9D:47:B9:7D:8B:83:0B:5A:3B:88:D5:75:D1
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8d:17:cf:b0:0d:17:62:42:10:d3:cb:ff:db:81:c1:5f:d4:
f8:99:f7:db:0b:48:e3:c8:c7:bd:67:e7:2d:3a:0c:c8:7d:95:
c3:48:0d:e2:a8:6c:fd:3c:1b:2a:74:3f:b1:96:90:58:29:43:
fc:9f:02:a3:93:bc:19:5f:0d:36:d3:3f:da:6e:79:f5:91:e8:
b0:a4:47:85:08:4a:01:45:12:36:27:f4:04:5a:0c:a2:47:94:
d3:56:a8:f6:b4:54:82:eb:f9:8a:4c:aa:b9:3b:71:83:83:0a:
4a:4d:6d:14:79:d4:ad:86:92:20:c1:bf:b5:01:2d:66:3b:82:
35:77:fb:08:4f:d4:7a:7d:95:55:ca:b1:8b:fb:2e:14:dc:bb:
d3:a4:62:c6:5c:d7:9d:a5:0c:0c:d5:91:ed:96:ec:b3:f4:81:
5c:a4:b1:52:49:5e:65:f3:1b:c4:42:41:cb:f8:2c:d8:a8:36:
79:56:52:81:e4:d9:46:80:40:52:13:99:c4:ed:75:0d:1e:92:
48:17:f6:a0:09:9c:c8:1a:8c:cd:30:00:49:3c:75:27:e0:ff:
0c:66:70:ea:29:ce:c0:26:1b:5c:64:30:41:29:ab:d0:d1:7e:
61:6c:51:87:41:5c:0d:2e:b1:24:65:13:04:2b:1c:a3:46:ad:
f0:65:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:23 2026 by rpki-client