Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
File: VrSloWGzuboO6uwqBFYBeGYzlzk.mft (raw, json)
Hash identifier: vkn3SzDnuHoSuIPCCXVTIT6iZaghpkorYxie+qVmDyo=
Subject key identifier: 17:68:ED:78:BB:86:35:D1:51:A2:10:C9:85:3A:A9:4C:6B:26:22:77
Authority key identifier: 56:B4:A5:A1:61:B3:B9:BA:0E:EA:EC:2A:04:56:01:78:66:33:97:39
Certificate issuer: /CN=56b4a5a161b3b9ba0eeaec2a0456017866339739
Certificate serial: 01A132C6AB81A91BD3D55AA2F03B261386A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
Manifest number: F3
Signing time: Tue 13 Oct 2026 01:00:43 +0000
Manifest this update: Tue 13 Oct 2026 01:00:43 +0000
Manifest next update: Wed 14 Oct 2026 01:00:43 +0000
Files and hashes: 1: 1-RnbccGnKU5-85enbKhy1GUdNWY.asa (hash: ajAhHP1aNabiZiqh7tPsRoRbxoy3xnUCzO6ypU4W+4o=)
2: VrSloWGzuboO6uwqBFYBeGYzlzk.crl (hash: 18WhBkGTK5BuSyn4eNUhECoyxkB219pjFw7pb/V6DzA=)
3: vsgn5QJjV5nunN_PCpNGwgV6a9o.roa (hash: wLO8tqv8K/6aZXIfixuUDJ/NV/2S2GgETxQc9LoyLCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c6:ab:81:a9:1b:d3:d5:5a:a2:f0:3b:26:13:86:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b4a5a161b3b9ba0eeaec2a0456017866339739
Validity
Not Before: Oct 13 01:00:43 2026 GMT
Not After : Oct 14 01:00:43 2026 GMT
Subject: CN=1768ed78bb8635d151a210c9853aa94c6b262277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:8a:f2:81:72:86:5d:14:8a:9f:3c:ad:4b:
ec:43:d9:51:90:4a:b3:6f:31:a2:bf:52:54:ee:12:
87:16:10:40:2d:3b:7e:1a:1e:3f:6d:fa:ca:36:06:
88:b6:f1:dc:5c:62:4f:49:05:2a:11:60:b0:e7:98:
91:d6:3e:cb:fe:90:95:24:4e:f5:55:89:cd:e0:65:
3a:aa:c1:94:d2:91:3a:46:8e:c7:9b:e1:1c:e0:1d:
5b:14:50:3b:59:87:6e:1c:bc:8b:c0:9c:ea:ce:be:
70:00:ec:3d:fb:63:e0:d6:b4:1d:4b:54:0d:41:b0:
26:e6:ce:d6:2c:c4:07:e5:3e:de:d0:5c:52:f0:14:
dd:53:74:c8:a5:c7:5a:e4:06:3d:ce:5e:74:07:00:
3d:b5:da:69:d7:fe:bd:d8:61:4a:28:76:3a:12:f1:
b4:66:1c:99:e4:0a:fb:8d:f8:76:73:79:22:77:ea:
30:17:d8:58:70:bd:af:fe:aa:e9:c7:5a:b0:9b:17:
3e:09:ac:c0:26:e7:88:38:a2:c9:80:41:53:a8:ad:
0d:8b:1a:19:ae:01:9b:70:45:ac:0e:e9:8c:ba:22:
49:12:23:7f:22:e3:c6:e4:7e:f2:5a:e0:30:97:34:
f3:29:54:6f:66:5b:10:8e:cc:55:38:c1:41:94:d5:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:ED:78:BB:86:35:D1:51:A2:10:C9:85:3A:A9:4C:6B:26:22:77
X509v3 Authority Key Identifier:
keyid:56:B4:A5:A1:61:B3:B9:BA:0E:EA:EC:2A:04:56:01:78:66:33:97:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bc:a4:58:89:28:4d:4d:fb:58:ce:e9:5d:65:b8:9a:7f:1c:
c4:1f:d8:9d:dd:df:37:cd:06:37:ac:4f:5b:e7:8b:28:dd:04:
cf:3b:0d:a3:c7:3d:7a:ba:4f:36:40:8e:eb:3d:d6:f1:e7:b1:
76:12:3b:60:e3:b5:5f:2e:8d:66:b5:4b:c9:46:6c:96:97:27:
f4:cd:47:74:81:86:4c:b8:5b:51:74:e6:f5:48:da:7d:5f:6b:
49:b2:c4:83:48:c6:f2:3b:59:bd:2e:10:2b:8f:9a:ec:56:aa:
39:12:1c:3e:cf:f8:d4:78:12:21:de:44:dd:9e:a5:85:9d:a0:
e8:4f:f1:fe:66:c9:17:dc:0c:81:62:1e:94:f0:91:48:95:fb:
36:ef:9e:30:89:b9:ff:77:38:c4:fe:52:e9:1b:74:0f:82:36:
d9:65:d9:56:e1:06:55:fc:0d:f0:9c:ab:70:44:3f:ea:56:25:
27:d8:45:6f:6f:4d:13:7c:72:a0:cc:44:ed:74:dd:f1:ed:2c:
fe:72:86:14:db:c6:f0:72:6b:8b:7c:c7:60:71:8a:f3:5f:85:
a5:1c:c7:aa:bd:cc:63:c0:21:62:b5:a2:9c:12:8e:63:d5:d0:
2c:d4:8c:62:ee:a8:90:18:a9:b1:8f:04:6f:2c:03:f2:10:4a:
d1:ba:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:02:34 2026 by rpki-client