Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: LMShRGmDNUB5iHkvVkvke1dn32iLnMaBxogQs3QQidk=
Subject key identifier: FE:E8:13:1E:14:B9:45:7C:18:6F:CB:84:D4:D4:29:4E:7E:C6:D4:8A
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019F935BA276C13040DE82DBECFD7E9438FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 055D
Signing time: Fri 24 Jul 2026 09:01:23 +0000
Manifest this update: Fri 24 Jul 2026 09:01:23 +0000
Manifest next update: Sat 25 Jul 2026 09:01:23 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: LcIBXXFHb/BfM+DLt0axTIIRSc0VvjwJc/1NU5a9u2E=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a2:76:c1:30:40:de:82:db:ec:fd:7e:94:38:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Jul 24 09:01:23 2026 GMT
Not After : Jul 25 09:01:23 2026 GMT
Subject: CN=fee8131e14b9457c186fcb84d4d4294e7ec6d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:04:d3:e2:bf:79:4f:db:63:ad:c0:0b:9b:31:
27:58:d0:e8:18:95:2d:25:27:13:00:11:7b:bb:24:
1d:e5:44:b5:19:ab:68:0a:98:26:13:8f:34:0c:43:
63:31:ad:da:ce:96:85:1b:fe:07:90:68:1d:40:a0:
17:4b:aa:2d:72:c8:86:55:b3:4d:d7:4e:9a:65:71:
e6:1e:40:7b:f3:77:7e:c3:0b:a0:ae:0f:62:5e:3c:
09:05:12:65:24:0f:44:b6:ab:8a:13:b7:4c:19:ae:
35:6f:c6:2b:ad:14:ed:c2:f4:c4:65:0d:60:f4:f8:
c9:57:10:0e:18:4b:99:ac:24:c6:6e:5e:9c:f3:4f:
8c:7b:b1:72:86:1f:52:4d:36:a8:e5:3a:0c:31:4f:
09:72:0c:cb:7b:83:aa:e9:bc:5e:5f:e0:78:ab:08:
40:5e:01:df:8c:b4:8c:1c:ca:ca:6f:63:8a:18:d3:
3d:50:4c:86:fc:15:71:db:b5:23:50:55:5f:af:cb:
8f:81:d1:0a:8f:ef:92:1e:92:4e:7c:27:80:7d:0c:
ac:36:52:e8:86:7c:fe:b4:3c:21:60:03:4d:5f:06:
6b:00:fb:3e:7a:66:77:44:0b:85:d6:d5:8a:e6:47:
6e:e7:50:bc:7c:42:01:99:cc:9b:76:98:c5:c1:3c:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E8:13:1E:14:B9:45:7C:18:6F:CB:84:D4:D4:29:4E:7E:C6:D4:8A
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:c5:05:eb:9d:5b:58:37:55:6f:1e:72:33:65:ff:c5:48:
a5:e2:5a:df:c9:4a:12:54:2c:2d:b2:09:67:7d:52:b7:8d:7f:
2b:f3:c2:fd:90:ff:1c:f9:e9:5b:04:90:1e:6e:07:82:2b:d4:
86:97:2d:36:85:ff:73:02:b6:43:db:9a:7d:da:dc:41:e6:b7:
6b:eb:1d:e1:40:73:c7:d8:55:c4:c1:a7:45:05:1a:9d:fb:3c:
5c:dd:84:88:b5:5b:33:07:2a:3b:0b:c3:da:14:35:56:23:02:
bd:d7:2d:e2:1a:23:75:40:a0:be:3f:b2:b4:7a:6e:d6:4c:20:
ca:77:4d:ef:a5:df:1a:22:ae:a0:0a:3a:9f:6e:dc:ef:06:b0:
da:1a:2a:8c:bd:8e:0f:d6:2b:81:de:fb:2e:bc:d3:78:6c:d2:
37:01:2b:3c:83:08:b8:4b:3e:60:e3:47:01:9d:ed:03:bd:8f:
2e:3e:c3:49:ef:50:87:a9:2d:75:74:87:5a:0e:75:3e:8f:45:
62:f1:1d:71:7c:d7:9e:2d:44:f9:96:e5:15:7c:a4:14:9f:a0:
ba:bb:54:fa:43:ae:23:cd:a3:11:b1:d7:f2:a9:fe:fe:3d:74:
82:fc:d1:f3:eb:4a:5a:83:17:e6:17:d0:78:5d:1d:11:ad:b9:
b3:14:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:24 2026 by rpki-client