Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File: VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier: iw511gwQKJ2G3/Eb4wgEpWFw0jHHteu8bK+WR2LP8O8=
Subject key identifier: 87:C8:2C:28:1A:81:42:3C:47:9F:F2:C7:8C:59:B3:A7:B9:EA:5C:97
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 019D26CCBDCC8697D569E4EC3ABB519209A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number: 0A60
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: UxOL8IaUSmhBUPOtpGzXZsWn7OI.roa (hash: KmTIoiBP3ZerlQ7vuojSylMU7CMgee4YhAPjdlXS/cE=)
2: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: LRXMJR0H1UAokSslfgN/t5FsNGuAOxHgVF+Xua3ep0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bd:cc:86:97:d5:69:e4:ec:3a:bb:51:92:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=87c82c281a81423c479ff2c78c59b3a7b9ea5c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d4:c0:59:cf:cd:3d:c4:20:22:30:a6:7e:cc:
23:6b:33:24:3d:a6:33:69:77:f9:0a:d7:7c:61:97:
71:8e:03:33:1f:ae:66:19:30:1f:b3:3b:6e:4b:28:
06:52:07:b6:81:d7:b1:74:43:1b:84:3d:1e:eb:7e:
59:0f:6d:b5:c8:bc:f2:00:e4:28:cf:a4:65:06:00:
2c:c0:5e:01:5d:db:ba:ea:98:10:e1:91:a3:ad:21:
f8:51:ef:0f:e5:c8:d9:af:9c:a9:19:9e:5e:ca:7f:
31:3f:4a:72:24:60:f4:6b:2f:4a:dc:1e:6f:19:ee:
ad:e8:85:43:f0:af:33:b8:4e:fe:4b:89:dc:8a:20:
d6:06:84:d5:c1:2b:be:28:ee:80:bd:dc:84:5a:b3:
b5:21:0b:08:32:a7:eb:a3:93:71:7b:20:89:dc:bf:
4d:e3:49:10:b6:ce:ae:22:e1:3e:90:4d:e6:cb:d3:
8c:4c:a5:7e:ef:07:ef:d2:1f:4a:95:f3:dd:17:cf:
0e:f9:c5:91:c7:28:ed:25:00:30:36:c2:26:db:ea:
38:3d:75:2a:08:91:88:bc:a9:94:96:56:e1:01:20:
8c:e1:c0:e6:c3:ca:ab:d8:c7:2c:c1:81:b7:de:ec:
0d:fd:05:6a:bb:8f:32:56:a7:9f:e4:a0:e8:6a:dd:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:2C:28:1A:81:42:3C:47:9F:F2:C7:8C:59:B3:A7:B9:EA:5C:97
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:d1:a9:96:1a:76:49:61:dc:19:0a:fa:c5:04:02:d8:2a:
d0:cb:a4:55:38:74:81:c2:95:ce:d2:7c:f7:a5:1b:ce:dc:46:
16:e6:64:b0:54:19:66:2d:84:eb:5c:1b:f3:71:73:e4:de:b5:
1b:66:e2:02:96:36:b0:cb:71:bb:9c:0b:b7:dc:41:d7:46:69:
1f:64:ed:60:7a:ab:ab:d1:5f:02:fd:71:37:33:75:c7:38:2c:
a9:1c:a8:b5:72:a5:b8:0f:2c:45:89:ed:29:e2:af:38:25:08:
be:0e:2e:fc:7f:c5:a1:bc:70:90:8f:64:f4:ac:01:4f:99:0b:
a7:e6:fd:ce:c7:58:fd:b1:59:6d:bc:fc:04:2b:03:4d:46:d0:
c4:5b:61:c2:70:6a:fb:2f:a7:29:b3:dc:11:d7:7a:0c:e4:a7:
f0:7a:25:ea:89:c5:33:45:38:1c:86:2a:af:05:46:33:3f:ff:
d0:9b:00:cf:76:be:5b:c7:65:29:ee:62:f4:1e:36:ef:04:e1:
a3:63:c2:e6:10:d2:f6:5b:ac:e3:16:cc:f9:77:2d:b4:79:44:
f3:e1:53:73:cf:82:32:12:ab:85:99:49:81:67:76:e3:47:1e:
0b:47:ba:f3:4e:5f:8f:75:d8:9f:84:c9:0e:97:b9:ef:2b:f8:
b6:79:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:25 2026 by rpki-client