Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: ly4YcjqcJIbr2GNq3n1yTDN+nPuWYTp+U8c4N7Znm0U=
Subject key identifier: CE:31:11:73:83:AD:47:52:96:C1:47:1D:D8:64:3A:31:2E:02:64:C0
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019D2A3B9545C97C4711CB9FD7308D6FF9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 051B
Signing time: Thu 26 Mar 2026 13:00:40 +0000
Manifest this update: Thu 26 Mar 2026 13:00:40 +0000
Manifest next update: Fri 27 Mar 2026 13:00:40 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: A1Hk2GKcJmcNYEiuPD/McsjjavGh80RChTGLgEzONb8=)
2: Yuo4raHbuV1AupPWdNm1jMw95T8.roa (hash: lmnKCE9fJdmr7z73updpBxSnhRCLKa9yvUVY95GYbw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:95:45:c9:7c:47:11:cb:9f:d7:30:8d:6f:f9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Mar 26 13:00:40 2026 GMT
Not After : Mar 27 13:00:40 2026 GMT
Subject: CN=ce31117383ad475296c1471dd8643a312e0264c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:42:8b:34:ad:bf:ce:83:6c:51:ab:87:8a:
a2:f8:d4:8e:f6:61:c4:cc:be:8d:f5:16:35:94:51:
75:98:ec:52:c9:86:f6:2c:36:eb:a2:0c:8e:aa:60:
ed:43:54:c8:ac:b7:14:d1:46:8e:02:02:ba:5b:8a:
18:81:66:b7:a5:67:47:1a:78:61:c8:90:ae:0c:50:
75:76:dd:6e:81:f1:8f:70:2c:1d:02:82:b1:ab:07:
1d:bc:cf:e1:00:cc:f4:e7:d7:71:49:84:fd:ee:f2:
2c:02:6b:69:88:c0:be:f4:81:1b:ec:dd:84:9b:32:
a5:76:30:ec:df:cc:7a:d9:13:1f:2f:54:f7:a3:15:
c9:8b:70:01:e0:43:d8:67:75:4d:fa:71:81:16:23:
ce:59:8a:37:4b:9f:84:ba:f5:50:d9:0e:c3:c8:a3:
78:4f:d7:3d:ef:3a:a3:98:6a:f3:09:2b:49:2d:39:
b5:b0:c0:3c:04:c6:c2:b6:5f:66:d2:e7:68:4f:da:
e1:63:a4:1e:8b:64:35:65:8f:af:4c:37:30:c5:74:
1c:5d:be:a4:be:26:81:43:30:92:e5:a7:84:09:b9:
49:3d:32:cf:d9:3d:36:ee:00:83:f7:e5:d8:3e:96:
28:1e:8d:3d:cf:92:27:16:33:05:3a:a8:a4:fa:15:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:31:11:73:83:AD:47:52:96:C1:47:1D:D8:64:3A:31:2E:02:64:C0
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:85:38:10:37:d9:90:f7:ed:8d:a0:dc:fd:71:8e:66:af:
9c:b6:19:b8:68:db:e7:86:7d:82:10:21:8d:5d:c6:a3:60:d8:
46:c4:a1:37:08:a4:a0:b5:3a:9e:3f:84:3e:28:86:c0:b5:e1:
4f:16:68:8c:2e:2c:4e:34:43:b6:7c:e3:7b:29:24:10:a2:26:
73:5e:28:05:a0:03:91:15:a8:55:ff:05:d2:da:55:b0:06:b4:
91:1a:75:ad:0d:8f:9b:eb:69:fb:73:93:31:0d:2b:93:29:21:
23:5a:c0:c7:31:28:41:4c:65:e5:e9:90:c9:76:82:a5:d5:e2:
18:29:f8:f4:aa:5a:dd:83:81:a7:c1:b2:78:95:d5:f0:57:32:
82:18:34:87:3d:1c:3c:ac:4e:e1:8b:74:62:3b:fc:51:ad:05:
9e:04:ff:c9:07:ad:5c:cf:b7:09:59:7d:49:18:02:84:88:4f:
3e:5d:dc:f4:01:92:94:d0:33:9a:98:da:12:a3:d2:28:62:d8:
f9:00:de:37:ee:dd:a9:d4:7e:dc:59:a2:49:c4:36:db:e0:f1:
01:00:d7:aa:e5:07:28:f8:0b:fa:b9:08:35:59:a7:72:c3:d6:
45:16:b8:e0:16:36:53:37:ca:fe:1f:79:ef:85:27:0b:06:14:
14:36:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:58 2026 by rpki-client