Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
File: VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft (raw, json)
Hash identifier: Hrxyw+JGuJYhfi+uXPY1lT/pMsNFcvXRlrl3KpfzQS0=
Subject key identifier: C4:E0:90:09:51:60:B1:7F:F0:C9:F9:E5:8B:9C:5F:8A:8E:E3:B1:B5
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 019D2AE0C4688E8FAF1A20D078F4D33BD79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 16:01:06 +0000
Manifest this update: Thu 26 Mar 2026 16:01:06 +0000
Manifest next update: Fri 27 Mar 2026 16:01:06 +0000
Files and hashes: 1: VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl (hash: gkkg5grTdBDsVoHbs9WXdrSKLsH7avBQDO6kD4wKdRo=)
2: WBLbs6kYXGrlEx6T40cioY5X7d0.roa (hash: 4ngnju8c6iA7vz95M3kK1HJp1mfNKhTarXKcGx/UIAU=)
3: g4JFmXRkf3b7M-ZJLQjSsXsM4U8.roa (hash: sbf3UShWaRRxypL6ZmIBhA+ry9qv9zUSU1s+tGR/C5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:c4:68:8e:8f:af:1a:20:d0:78:f4:d3:3b:d7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Mar 26 16:01:06 2026 GMT
Not After : Mar 27 16:01:06 2026 GMT
Subject: CN=c4e090095160b17ff0c9f9e58b9c5f8a8ee3b1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:a3:76:1a:80:d3:36:13:7e:9c:af:06:d2:
65:4c:3a:dc:66:00:04:4a:0a:51:5c:06:51:c1:53:
3c:9d:3e:2f:39:38:08:79:e5:6a:be:71:e8:9a:a7:
a9:1f:4d:6e:ed:2a:e0:5a:fc:29:0d:bc:cd:95:99:
b4:34:63:cd:26:db:48:ea:c4:e7:f0:ff:c4:a8:39:
12:3f:07:af:f5:b4:88:24:b4:c2:9d:9e:93:92:91:
81:34:97:09:bc:16:6d:85:87:9b:63:49:9e:1e:3d:
11:cb:04:b4:ca:19:84:48:27:f5:75:57:6b:53:1f:
6c:08:de:2e:71:6c:65:8a:8d:19:81:3f:53:2c:40:
f1:7e:ef:d8:01:d7:35:2a:8c:b4:c5:3b:50:81:7c:
af:4c:5b:59:e2:ef:90:db:bd:ef:76:e4:94:63:b2:
b6:7d:88:83:ec:1f:f9:a0:f5:21:ad:a7:72:9c:ba:
64:eb:06:d9:4f:52:53:e9:57:64:92:af:bd:79:33:
a5:88:73:21:76:5b:d5:8a:f5:21:2a:14:0e:e9:11:
2b:24:b9:b1:fe:67:f4:97:e5:b3:6f:90:ac:f9:9a:
69:c8:b7:fc:39:42:39:65:3c:47:90:72:7c:e8:10:
41:2f:f8:fb:c0:2c:a8:6b:e4:a7:a9:12:5f:fd:7f:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E0:90:09:51:60:B1:7F:F0:C9:F9:E5:8B:9C:5F:8A:8E:E3:B1:B5
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ac:9b:58:8e:18:45:10:a5:64:c9:76:ae:09:63:25:f7:39:
64:07:6a:d5:4a:fc:39:09:b1:88:d4:47:41:36:fa:17:7e:d0:
23:72:57:8e:40:e0:12:8a:08:e1:29:5c:cd:0c:4e:7f:6b:05:
16:da:93:5d:92:01:38:19:33:1a:ed:3a:19:d0:f7:e7:ba:f5:
fe:9e:9e:05:58:49:75:41:26:4f:4d:52:5f:0d:1a:c1:af:71:
8a:8f:84:04:58:77:67:3c:b7:d0:e5:b2:01:35:e3:ba:21:6c:
eb:66:63:f7:9e:68:78:9d:39:fd:c1:83:cc:68:f4:dc:f7:1e:
51:be:bf:1b:ce:72:0e:13:58:1d:39:91:62:81:86:fd:8f:09:
91:c1:c0:42:b1:88:35:f1:dd:d1:c3:1f:37:0e:93:bd:dc:14:
63:1f:84:22:ea:17:40:7f:21:8a:c3:3d:65:15:28:c7:a2:8f:
ca:ca:56:9b:bd:a1:ec:2c:13:69:48:db:5c:a4:53:5b:03:21:
c3:bf:5c:ad:6d:95:b1:10:dd:61:01:c8:a5:7f:71:3b:44:2e:
66:6b:1b:e5:0b:54:56:4e:5d:67:96:88:ce:77:91:ac:37:49:
32:05:e8:78:93:ae:a9:08:ba:6f:fe:91:db:3c:55:c3:aa:f0:
c6:68:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:51 2026 by rpki-client