Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File: VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier: aLG6XUjNWRBlNoLLfxwu4w2KhyzVaMJ5nvSvp7YvTGE=
Subject key identifier: 3B:FE:4E:03:36:F7:B5:85:1A:DA:A5:0F:EA:35:A7:25:05:DB:2E:5F
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer: /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial: 01A0D5DDA65904D073436B7475ADCEE8075B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number: 0286
Signing time: Fri 25 Sep 2026 00:01:08 +0000
Manifest this update: Fri 25 Sep 2026 00:01:08 +0000
Manifest next update: Sat 26 Sep 2026 00:01:08 +0000
Files and hashes: 1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: aubdQRJwXOLdonfTAyrTn+CtbiYJSwbsZsKHr9k/YYs=)
2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:a6:59:04:d0:73:43:6b:74:75:ad:ce:e8:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Validity
Not Before: Sep 25 00:01:08 2026 GMT
Not After : Sep 26 00:01:08 2026 GMT
Subject: CN=3bfe4e0336f7b5851adaa50fea35a72505db2e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:18:f4:bd:e7:59:e6:83:0e:41:56:05:f6:
d6:3b:40:88:9b:2b:a4:0d:28:53:8d:95:09:e3:a2:
35:56:08:c2:cb:3c:6d:d5:2a:d6:ff:ff:eb:e1:50:
b1:31:fb:0f:2e:7f:7f:e9:31:b0:b4:44:c2:89:e0:
77:08:e9:6f:66:8c:03:94:db:dd:83:ca:c8:e5:ac:
65:af:64:f7:54:1e:8c:e6:66:fc:51:c2:d3:71:40:
d3:07:2f:97:4d:de:30:cc:19:fe:e6:fc:00:0c:b0:
87:fa:58:60:5c:29:66:b1:27:73:ce:7a:f5:24:93:
5e:bd:9b:80:fa:3a:ba:b0:51:a0:b7:c1:77:3c:1f:
6f:71:ee:fa:cc:cf:c0:f8:d1:ec:9e:50:f0:73:4f:
eb:11:63:12:2d:f6:86:17:80:5f:b6:3f:b7:ba:14:
96:dc:a7:76:ff:b2:d0:c3:fc:30:1e:ef:1e:69:d3:
ba:c9:e3:3f:8e:56:ff:58:e3:51:76:bf:cf:44:40:
1a:ac:b1:1c:ad:d2:79:d0:9f:d4:b8:82:9f:c5:eb:
e0:68:cb:9c:2c:5b:fc:de:b3:76:d3:38:f6:a3:ea:
7f:b4:9a:48:64:22:e1:1c:0e:8c:9e:5f:1c:4a:98:
f2:3b:b9:50:81:06:17:21:3e:d3:c6:64:ca:78:25:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:4E:03:36:F7:B5:85:1A:DA:A5:0F:EA:35:A7:25:05:DB:2E:5F
X509v3 Authority Key Identifier:
keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:89:ab:f8:66:ca:9f:ab:30:aa:0a:95:0f:0d:a4:e7:f7:d0:
77:fe:fb:2b:15:99:b6:26:39:2b:8e:59:bf:72:b2:36:c9:70:
0c:b8:85:e6:26:43:ea:d9:63:a8:bb:7e:9a:45:53:68:b7:9d:
a0:01:02:96:82:b8:c5:26:99:b5:42:13:e3:b9:3d:1d:c9:fc:
5b:e9:45:7f:27:0b:31:a3:e7:e7:70:6b:9c:12:3d:69:b6:05:
14:87:92:5f:1e:35:38:f4:b8:35:84:cb:77:b1:b9:0b:11:68:
6b:bd:15:86:9e:29:6d:01:37:9f:df:c9:61:40:72:73:45:80:
05:18:24:13:4e:bf:0a:43:24:1d:64:27:05:96:a2:66:32:fc:
79:1e:8d:ce:3d:8d:a8:5c:d9:b5:1c:13:e3:c5:e6:99:50:cb:
cd:9c:22:a3:37:fd:79:06:5a:68:97:5d:44:df:f4:ec:ae:41:
b0:a6:16:65:b8:56:dd:5b:58:e4:60:40:eb:c1:e0:b8:42:15:
bc:0c:37:65:10:f5:cc:fa:11:13:b3:b4:48:4f:17:fb:39:b9:
3e:61:d2:27:e3:22:74:f0:b2:30:cc:19:1b:06:56:25:b8:89:
ec:81:21:f9:85:dc:8a:7e:6b:f1:1b:35:b8:2e:c6:74:e4:e3:
0a:64:9c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:19 2026 by rpki-client