Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
File: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft (raw, json)
Hash identifier: OE+1mBs/j87aLvLVuznQtdzI5Qjq1pi8EHB5j6pq/ow=
Subject key identifier: 28:3E:A3:65:71:8E:C5:B0:5C:86:81:CC:2F:97:43:41:5C:9A:7E:78
Authority key identifier: 55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
Certificate issuer: /CN=55167557894686ee0c8727b961cc4b9230005f38
Certificate serial: 01A0ED0AF74F728731F571D31884687068A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:01:53 +0000
Manifest this update: Tue 29 Sep 2026 12:01:53 +0000
Manifest next update: Wed 30 Sep 2026 12:01:53 +0000
Files and hashes: 1: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl (hash: LzJuLIQJjYfsWHL/zjbgqLeJH/PBt0SVVuV5OD3sdLI=)
2: qjU3-mg-6plX7NPtZmDw0teXaog.roa (hash: yHPCb3W11kzbNlMZG3Tad2k2N/aaDEDcgs/PQrk8prM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:f7:4f:72:87:31:f5:71:d3:18:84:68:70:68:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55167557894686ee0c8727b961cc4b9230005f38
Validity
Not Before: Sep 29 12:01:53 2026 GMT
Not After : Sep 30 12:01:53 2026 GMT
Subject: CN=283ea365718ec5b05c8681cc2f9743415c9a7e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:85:21:04:53:27:6e:05:02:b3:df:94:fa:
20:49:08:e2:e7:5c:72:2d:b1:2b:fe:be:12:da:f0:
5d:30:7d:8f:f4:6e:f1:67:9b:17:c9:3a:3e:59:27:
d1:08:c3:24:1c:d8:c2:8e:78:11:82:21:93:01:ea:
ca:3a:89:f4:e7:be:f4:97:d5:86:a5:b0:63:b3:31:
05:c2:07:e6:44:9e:9f:1c:16:47:cd:2b:e8:aa:0f:
72:9a:52:4b:eb:15:18:41:7c:7a:9a:81:92:72:50:
59:ce:7f:11:a6:80:24:9e:89:fd:0b:7a:a1:ec:7a:
46:0d:f1:04:12:81:3a:c6:83:5e:b3:42:31:b6:33:
26:c5:7b:af:55:87:80:17:9d:6f:d4:c1:c7:59:88:
c7:7e:92:46:1b:4c:01:ba:32:2b:78:eb:ab:43:5b:
91:a3:92:a2:78:dc:04:3c:db:b7:5b:2e:44:c6:ba:
4f:27:8e:3f:c7:8a:b7:65:42:47:28:39:98:1e:10:
34:83:0f:80:73:60:0f:b6:ba:44:75:d9:68:cc:fe:
9c:49:2d:70:e8:9f:e9:24:87:42:f3:f4:3d:db:59:
e2:6a:b3:a8:3f:d9:64:7c:51:01:fe:0d:68:f1:b1:
0f:b4:28:19:78:0b:26:7e:c7:9f:fd:05:dc:d4:1f:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3E:A3:65:71:8E:C5:B0:5C:86:81:CC:2F:97:43:41:5C:9A:7E:78
X509v3 Authority Key Identifier:
keyid:55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:09:83:81:e4:57:55:55:49:57:c9:fe:3d:c7:74:28:46:
30:31:67:e5:1d:21:e4:2f:e1:94:51:7d:81:1f:37:20:53:86:
34:78:ad:27:02:02:06:cf:32:2d:55:68:07:f7:7a:40:17:9b:
ac:c7:d5:b8:18:2c:e2:46:fc:fe:07:16:14:4e:3d:2a:3b:20:
9c:11:63:e8:79:a6:6b:31:a9:64:40:19:ed:59:4f:e3:01:13:
09:49:5f:9c:dc:d4:f7:21:07:ce:95:5e:e3:0f:51:4c:b6:1e:
8d:4a:e7:43:20:ed:14:3d:37:f1:de:72:24:d1:cc:1e:87:05:
e0:f5:d7:96:79:c2:0c:a2:b6:f0:88:6f:d5:93:19:c5:cb:51:
66:33:91:d2:e6:8d:dd:89:47:68:1c:03:c0:8b:98:fe:ae:94:
45:c1:5a:e2:0b:7d:46:96:c4:1a:b4:ea:88:2a:f3:e2:ac:75:
2e:7f:06:5c:a2:15:53:83:8a:59:22:ae:f8:21:b1:53:0c:c4:
3c:1c:e7:1a:59:f8:d4:17:bc:e9:cc:b5:cb:94:d9:fb:3b:b1:
7b:50:39:f2:15:ea:fe:56:73:0a:bf:e6:6a:a2:4e:9b:51:b2:
55:c2:6e:36:c2:4e:e9:53:96:b9:d8:f4:09:2d:03:84:fe:98:
38:80:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:05:05 2026 by rpki-client