Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: cG7HhYexduM+IrPrckCsAXvix9ONDGoq1BTemflvDwg=
Subject key identifier: 98:0B:13:D2:14:D2:4A:C3:E7:7A:09:AF:2F:92:87:88:18:A2:1A:A9
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 019D25F1616F738CD7DA9B1EABC7ABCBC2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 0864
Signing time: Wed 25 Mar 2026 17:01:09 +0000
Manifest this update: Wed 25 Mar 2026 17:01:09 +0000
Manifest next update: Thu 26 Mar 2026 17:01:09 +0000
Files and hashes: 1: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: wQBHOUalFOGaqINArWqqBJbG3vHXtC51d9ApqyAjNY4=)
2: uH1OFQK-y6nSA9ln1NEz-DHjkYM.roa (hash: gklS8iQwBkuF3RBvorQ4lbNpw7pGXOz/cK6thzC+bvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:61:6f:73:8c:d7:da:9b:1e:ab:c7:ab:cb:c2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Mar 25 17:01:09 2026 GMT
Not After : Mar 26 17:01:09 2026 GMT
Subject: CN=980b13d214d24ac3e77a09af2f92878818a21aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a7:62:3a:55:df:81:af:46:74:ef:b4:00:83:
85:22:e0:83:86:c1:02:0c:44:37:a9:0f:91:8a:38:
a2:b0:35:ad:3a:aa:0a:cf:a2:47:d5:fd:1f:37:4b:
54:41:81:7d:d0:b2:f5:75:73:5e:ba:36:c2:74:bb:
68:2c:0e:b1:ae:33:0b:a5:a6:64:57:10:90:9a:1a:
1f:20:3d:40:9f:1d:42:41:53:86:79:f1:57:f6:98:
c0:4a:e6:8f:74:40:96:79:23:88:7e:99:02:65:ee:
24:3c:ce:68:00:c1:03:ce:62:68:55:3c:05:b2:c3:
24:ea:93:c3:0b:46:14:d4:db:82:89:b8:fd:be:1c:
a4:75:e0:48:72:eb:d6:ff:de:b2:14:b5:d8:43:73:
e7:c6:e6:97:8c:11:44:f8:83:8c:f4:ea:2a:94:7b:
ff:2b:e0:a0:a2:5e:b7:75:78:d0:3b:2b:76:97:22:
96:f1:81:c0:1e:6d:1b:cd:59:ed:8d:fe:01:34:d5:
4d:aa:81:f1:5f:05:f4:43:69:af:dc:4f:d6:43:0b:
35:18:22:7f:d0:6c:56:d9:14:9f:20:83:e1:35:19:
e2:09:95:3d:46:c8:59:9d:56:73:77:57:5d:f2:ee:
28:9d:ce:46:19:30:2f:7a:1b:49:48:33:7c:60:4f:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:13:D2:14:D2:4A:C3:E7:7A:09:AF:2F:92:87:88:18:A2:1A:A9
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7c:b4:8d:16:af:63:9e:f1:7d:e4:f9:21:71:70:d6:83:9d:
13:c7:93:3d:5c:ad:21:ed:05:e7:91:7c:24:e3:53:50:ee:5a:
b8:82:0d:e3:97:cd:e4:13:1c:55:51:5d:73:18:00:d5:37:9a:
15:2d:da:0f:a9:1d:33:f5:fa:a4:5c:c2:69:89:da:d3:6a:95:
41:6b:ce:ff:58:69:24:04:01:42:50:33:99:cb:23:c2:63:c9:
90:af:3e:21:ab:7d:98:22:d3:f7:6b:7d:b0:39:cf:96:18:e3:
8d:c3:8f:78:03:9a:4e:b9:2d:70:a4:6f:88:a6:d1:a2:01:ed:
28:b7:01:63:72:fa:cc:da:c8:93:ad:ec:d0:47:fe:b1:5e:a4:
cb:68:59:b6:a3:24:ad:56:d5:d2:d5:49:d8:43:a6:63:13:1a:
22:2f:30:8f:fc:11:37:e1:3d:0f:4b:da:69:89:72:e5:9e:bd:
c5:a1:fb:3c:d1:f6:42:0d:46:d0:59:b9:04:39:f5:c1:c7:76:
48:86:a2:98:53:07:83:4c:d9:e2:5d:3c:ee:c0:48:c7:81:df:
93:0f:de:65:d3:90:ed:92:ea:85:68:c9:9d:d7:e3:31:f4:16:
4f:75:b1:d5:76:de:cb:1c:66:33:39:ee:05:05:28:9a:82:01:
16:d4:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:58 2026 by rpki-client