Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier: Ag5uIxfx8Ct+txkKfZFhLoSdxtUB6gEf1BFS54LLA/0=
Subject key identifier: 91:FE:3B:B5:FC:97:2E:5E:AD:AB:A2:BD:18:85:28:6B:B5:BB:D3:E4
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 019D27A8D74CAE7008A9C650CA8CC125B6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number: 05F4
Signing time: Thu 26 Mar 2026 01:01:09 +0000
Manifest this update: Thu 26 Mar 2026 01:01:09 +0000
Manifest next update: Fri 27 Mar 2026 01:01:09 +0000
Files and hashes: 1: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: U+rbeKehJI0VYbcBxxBFKQFeyT9vy8NY9Y6ic7hYLRI=)
2: vQqnvARNn1FXtEGfZ3CHw5z70o0.roa (hash: +SKN+m/Zy5SnpDyhDQfSEvZM8oK3F3dFeyWqxYSrWok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d7:4c:ae:70:08:a9:c6:50:ca:8c:c1:25:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Mar 26 01:01:09 2026 GMT
Not After : Mar 27 01:01:09 2026 GMT
Subject: CN=91fe3bb5fc972e5eadaba2bd1885286bb5bbd3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:95:79:2b:4c:c6:2b:9b:da:c6:a6:f9:b8:
22:e4:2f:73:42:5e:9a:e8:fb:4a:78:bf:7f:b8:e4:
8f:d8:45:82:38:6a:42:5d:2c:fa:4d:df:43:74:40:
b1:32:03:ba:27:32:8d:26:4d:e4:b8:f3:22:21:fb:
42:a3:32:d9:a4:24:97:6c:f0:30:71:40:b0:67:28:
a6:60:f9:7e:60:b8:55:37:a3:25:41:bf:af:52:f1:
1d:be:f8:4f:47:eb:45:9b:c7:19:f1:d3:80:ee:02:
33:72:72:ee:f0:f6:46:49:cb:1b:e8:79:d5:e5:8b:
63:d5:61:65:89:5b:6b:67:8b:3f:0d:6b:dd:8a:54:
8b:53:7d:11:92:fd:ea:dd:7a:9c:b6:a1:2a:ca:fa:
d8:d3:7a:60:b1:23:f4:00:fe:46:a8:5a:2a:26:dc:
a2:c2:b8:2d:6d:d8:bd:79:ca:04:11:bb:3b:af:e0:
23:ef:34:dd:39:15:a6:2f:d4:47:26:fa:f2:5e:98:
3e:e3:52:04:5a:be:02:39:22:b1:f8:a0:9f:b4:07:
0a:9e:4a:18:cc:07:91:45:93:af:6a:f4:af:13:ed:
ad:84:8d:fc:7f:b6:63:a8:b7:34:56:27:3e:77:dc:
ff:b1:20:4c:bc:c8:15:59:43:a5:bf:1d:8c:33:94:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FE:3B:B5:FC:97:2E:5E:AD:AB:A2:BD:18:85:28:6B:B5:BB:D3:E4
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0d:d5:5f:a8:c4:20:8e:92:61:a7:c2:36:c9:fc:b6:4a:44:
35:f3:3a:7e:51:74:55:c6:6c:08:22:52:f0:c8:7f:dd:dd:52:
1b:ff:88:d2:41:99:58:3f:a4:a3:ce:c0:8a:4f:59:1a:31:ca:
66:d9:f5:6f:f1:f5:77:26:3e:cc:9b:11:eb:46:3e:f9:ed:97:
03:f6:62:3a:94:52:d1:aa:38:7e:cd:4a:dc:3c:a3:70:e8:a7:
28:4a:5e:f0:00:f5:50:31:55:3a:9b:72:dc:71:34:7f:1e:a0:
01:ad:b9:92:d5:84:d3:aa:c8:33:8b:f0:6e:bc:30:da:c6:9c:
91:f1:fc:d9:d7:61:ef:75:3b:bb:07:11:ba:f1:5b:a8:98:d8:
a1:90:2b:b3:07:a4:35:f7:e5:c6:0d:7a:32:a5:21:bb:33:2b:
fb:8c:0b:9f:74:f2:b8:28:1e:19:e1:44:2d:44:34:eb:c1:04:
a7:6b:ca:09:2c:5e:ec:cd:a4:30:51:e5:c1:68:68:10:23:8d:
26:17:64:7a:8f:e6:5e:d5:28:37:d8:d8:a0:b3:50:f1:9c:dc:
ed:6e:81:93:5c:9d:fa:8e:7a:37:87:32:5e:ea:71:52:e8:58:
f2:9a:b9:80:a6:b7:4e:2f:9e:9d:4b:70:94:97:a1:5d:28:7c:
59:16:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:28 2026 by rpki-client