Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
File: Vxp0VREn6Q1zotOylfGm_1FRn98.mft (raw, json)
Hash identifier: 7O3Uz4sMmuecq4r3f1Ra3oFogxowuzzeucG0NSdqIgQ=
Subject key identifier: C6:70:3F:95:DB:DE:E4:39:7E:C3:E8:50:1E:01:E3:FB:AA:16:94:2C
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Certificate issuer: /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial: 019D27DFBB087AA0C843069D4728FF174C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
Manifest number: 0AC4
Signing time: Thu 26 Mar 2026 02:01:06 +0000
Manifest this update: Thu 26 Mar 2026 02:01:06 +0000
Manifest next update: Fri 27 Mar 2026 02:01:06 +0000
Files and hashes: 1: M42LSua2udU0z-Ed1Owf0hnzc8E.roa (hash: Vh2KORAQuLgb5drD8rWPfjKUMu8mwj0caxltbTREMss=)
2: Vxp0VREn6Q1zotOylfGm_1FRn98.crl (hash: pNiAtIepT0iyzvgfGzuaArV1zqWcQSPmLmWQRRv0xxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bb:08:7a:a0:c8:43:06:9d:47:28:ff:17:4c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Validity
Not Before: Mar 26 02:01:06 2026 GMT
Not After : Mar 27 02:01:06 2026 GMT
Subject: CN=c6703f95dbdee4397ec3e8501e01e3fbaa16942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:4f:ba:20:7b:e4:86:df:61:a3:88:48:86:
2a:d3:c3:b2:1c:98:2f:01:9b:ae:35:09:86:56:69:
5d:71:12:84:67:da:79:a8:e7:a0:8d:5e:10:d9:55:
17:86:33:01:24:98:bd:d9:34:d8:65:49:2b:ff:fb:
a5:b4:93:a6:06:c7:8e:0a:d3:40:c3:51:5d:43:d0:
5c:92:bf:da:58:50:5b:5c:c5:37:8b:b5:5f:67:10:
66:b7:b2:7a:b3:13:ef:62:bb:84:2b:92:d8:ab:d1:
23:d3:da:b6:a0:2f:6d:ef:ac:f5:7c:2a:65:66:3b:
4b:ba:2a:17:f4:72:ff:3d:b6:48:52:8e:93:e8:0f:
51:26:46:ff:51:ce:6b:a0:d7:87:87:41:69:08:e6:
b0:6e:c7:4d:93:61:87:49:88:5c:c6:ba:70:bb:60:
66:31:16:b3:b8:34:7a:ed:d2:f5:cd:37:38:61:af:
92:a8:6a:24:35:08:26:1e:86:21:f8:07:5a:38:fc:
2e:81:4f:86:36:48:dc:ba:cb:7d:2f:e1:9d:04:b2:
e1:0d:6d:d8:a5:8a:f7:fd:e7:63:2b:70:45:05:e6:
c1:5e:aa:6c:9e:70:1e:06:31:ae:19:ea:91:fb:bd:
b4:c6:db:d3:1e:2e:62:c9:a9:e9:c6:1d:e5:e1:ab:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:3F:95:DB:DE:E4:39:7E:C3:E8:50:1E:01:E3:FB:AA:16:94:2C
X509v3 Authority Key Identifier:
keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f8:70:3c:4f:5d:97:ea:a2:77:28:40:a3:5d:0c:e0:61:fa:
1c:f7:73:00:62:2d:f7:f1:c1:7e:96:1d:fb:bd:1a:ec:4a:95:
ca:1f:02:cd:dc:fa:54:e4:f2:9f:57:51:d3:75:8d:61:ec:5e:
de:03:c0:77:23:d9:dc:35:43:ef:c4:9c:db:e8:9f:0b:71:b7:
29:3e:a6:7d:f8:82:da:a2:5b:01:f9:f4:fe:af:ec:77:c8:7a:
34:75:b9:d3:37:6c:dd:e4:bf:57:e2:d6:70:1d:87:8f:c4:a4:
eb:64:b9:12:e8:d6:0f:26:de:83:cf:1c:ed:43:d8:7e:24:93:
45:80:b5:4b:af:2a:11:8a:07:2b:8f:1b:08:86:8f:de:4c:cc:
e9:ce:43:cf:b9:87:16:65:d7:c8:a3:7b:d2:05:2a:bf:d6:90:
b8:47:da:89:00:55:a5:81:cc:64:b0:d1:37:8e:f6:33:59:9e:
1c:b9:d4:30:cb:2d:ef:02:ae:6b:19:88:ba:87:17:f0:71:82:
25:08:7e:2f:9d:fe:03:a2:2f:88:a2:eb:1a:4f:45:64:ef:d6:
ae:aa:19:d8:27:f7:c3:17:bd:d9:d9:ec:c8:70:d3:64:e6:de:
8f:11:6a:99:f3:0c:9e:13:d5:47:5c:52:7c:c6:b7:35:50:72:
1e:bf:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:16 2026 by rpki-client