Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: 1jU/JCDoobBeESEgNCTNEO7ErqgEjMTjFtjNvsjVGi0=
Subject key identifier: 0E:F2:3C:E1:A5:4F:3C:3F:4B:1E:38:71:A3:D6:5C:53:CF:2C:D4:82
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 019E1F11273F0AE249D9E8C1E2F317AD9459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 08E5
Signing time: Wed 13 May 2026 02:01:18 +0000
Manifest this update: Wed 13 May 2026 02:01:18 +0000
Manifest next update: Thu 14 May 2026 02:01:18 +0000
Files and hashes: 1: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: mj3HyigMV7/Z22RNdUYHYI/1Sfc8QDnKW7CiAwJFja8=)
2: uH1OFQK-y6nSA9ln1NEz-DHjkYM.roa (hash: gklS8iQwBkuF3RBvorQ4lbNpw7pGXOz/cK6thzC+bvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:27:3f:0a:e2:49:d9:e8:c1:e2:f3:17:ad:94:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: May 13 02:01:18 2026 GMT
Not After : May 14 02:01:18 2026 GMT
Subject: CN=0ef23ce1a54f3c3f4b1e3871a3d65c53cf2cd482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:85:6a:fa:c0:2d:1f:10:d6:6a:12:21:e5:
e5:a6:0f:7c:b8:ec:dc:93:44:1c:66:2a:3a:bf:b6:
d4:ae:b0:08:1c:13:23:33:31:83:18:55:67:16:2b:
a7:b1:47:79:9a:2b:d2:13:50:1c:3b:02:80:c9:e2:
2b:bf:aa:34:3f:4d:00:c9:9a:4e:44:f1:94:11:18:
a1:87:3d:67:c4:56:e2:66:9d:0d:49:6d:04:9e:e2:
c8:a4:3d:27:87:d3:55:06:08:4e:cb:64:dd:75:ce:
65:1e:fe:72:a2:a8:c4:59:41:c5:bb:88:4a:dc:38:
67:c4:cf:cb:e3:fd:0c:c1:5d:e7:e9:8e:1e:11:cc:
40:e7:b8:af:1a:44:34:24:ad:a9:dd:35:77:69:c3:
b9:e1:7e:7a:21:9d:04:df:c3:e5:2e:04:33:52:10:
d3:2e:df:b9:05:b3:47:de:14:0a:f4:25:f9:fa:73:
e4:20:28:53:87:30:3f:04:41:bf:5b:61:d7:89:44:
86:17:54:d3:a6:37:c8:21:fd:35:11:d3:81:ad:fb:
55:9b:a3:0c:ce:f6:1e:d1:d2:91:72:0d:bb:a9:c4:
5e:bc:41:73:90:1e:6d:12:f2:a5:3e:bc:27:2b:cb:
83:d7:5d:c5:83:e9:e1:87:fc:32:0e:f8:8a:33:32:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F2:3C:E1:A5:4F:3C:3F:4B:1E:38:71:A3:D6:5C:53:CF:2C:D4:82
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:c1:a7:32:47:cd:08:70:5b:22:a6:fd:82:49:84:f4:67:
60:97:f8:06:de:f7:19:ab:58:ae:3e:ab:80:24:c1:cc:47:65:
88:00:b6:d8:20:9f:fe:18:63:4a:97:51:a8:38:bf:38:9b:9c:
41:46:b8:90:6c:d4:75:8f:90:54:25:f0:70:27:70:24:36:09:
ed:d8:af:3d:71:0a:cd:33:80:0d:94:53:ba:ee:bf:3c:34:95:
38:c9:fe:76:6a:cb:f9:be:8e:9e:d6:b9:bd:ac:25:27:67:d2:
c7:b9:d6:4c:98:7a:5d:57:2c:89:bd:16:01:e9:1a:9f:7a:ab:
0b:35:7b:49:4e:d0:81:bf:8b:c6:a1:41:58:21:08:09:dd:b5:
d8:e4:a9:92:98:2a:0f:52:7d:bd:d7:1a:42:a2:b2:d5:bf:28:
70:74:58:6b:b7:57:fc:ad:50:16:23:98:7b:83:73:df:21:60:
07:5b:c3:27:9d:ba:78:df:9c:f1:e8:d0:e3:e5:4b:8d:9f:36:
73:63:b5:06:37:6c:2c:40:c0:ec:a4:13:ea:b7:22:ad:51:47:
65:70:ff:92:c7:a7:f5:82:bf:c0:b1:b0:c5:ff:0e:3c:63:2e:
ca:65:8a:cb:2c:57:f7:88:16:94:f5:c3:e9:46:5f:df:46:da:
75:f3:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:07 2026 by rpki-client