Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: EzQrg6OcJvmyEjKVf7Wr38wqkKDZuiLAfa4I74PS/B4=
Subject key identifier: B8:8F:99:CF:D7:E0:6B:EC:3A:B9:8B:4D:BC:16:31:E2:10:95:33:E7
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 019D2AA9550EB0AA830FB22F58174E84E896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 04A2
Signing time: Thu 26 Mar 2026 15:00:33 +0000
Manifest this update: Thu 26 Mar 2026 15:00:33 +0000
Manifest next update: Fri 27 Mar 2026 15:00:33 +0000
Files and hashes: 1: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
2: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
3: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: fncDMbtrAm7DZAiNynmqbk2ItzJxFtXZYcXxsdvxjek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:55:0e:b0:aa:83:0f:b2:2f:58:17:4e:84:e8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Mar 26 15:00:33 2026 GMT
Not After : Mar 27 15:00:33 2026 GMT
Subject: CN=b88f99cfd7e06bec3ab98b4dbc1631e2109533e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:d9:00:1e:02:68:58:29:13:0e:57:f7:11:
a8:2b:ea:1e:55:71:73:00:79:d1:29:09:35:6b:be:
a4:28:ad:a1:29:46:e1:df:40:76:ce:a9:d3:15:ce:
64:f7:0b:9e:cd:a6:8e:9d:fa:75:f3:e6:fe:51:83:
8a:ae:84:f3:05:52:0f:f6:28:8a:c7:c6:75:61:10:
7f:b1:5a:de:1a:56:0b:7b:e2:39:22:3e:3a:99:92:
16:c8:24:55:96:35:33:cb:8b:38:3d:0a:5f:77:42:
cc:e6:48:a7:b0:88:43:f2:0d:5b:0e:68:3e:5d:c8:
79:16:1f:b9:cd:6e:de:dc:18:bf:29:ee:ea:06:62:
76:30:57:bf:88:06:bd:c9:55:ec:dd:8d:72:61:56:
f9:a7:cb:1f:75:e2:dd:1c:63:96:da:e6:39:cb:2c:
15:82:a1:b6:a6:33:2f:40:c0:1c:b5:f4:73:40:f8:
89:a7:c8:0b:98:ce:de:0c:62:a6:39:24:1c:d2:77:
c8:24:87:0c:17:85:6f:c5:67:b2:b2:79:98:da:2b:
bc:b1:b9:19:ff:ee:c5:bb:0c:c7:2b:e7:e5:15:41:
e5:19:cf:75:33:d5:e2:1a:70:b1:82:53:3a:3c:8a:
2b:23:41:a4:e2:b5:68:ff:40:da:db:4b:aa:7e:92:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:99:CF:D7:E0:6B:EC:3A:B9:8B:4D:BC:16:31:E2:10:95:33:E7
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:44:5d:d3:c8:a9:16:0b:25:aa:e4:1f:a2:2a:d1:66:3e:02:
8a:69:5b:b6:6f:e4:a4:22:0d:05:7a:ec:2f:04:d9:8d:30:a0:
7a:06:a6:a6:e7:6d:12:e6:08:db:be:9f:6c:06:b2:47:e7:c0:
22:c6:ff:ff:02:1a:73:5c:3d:4e:33:b1:58:39:25:85:96:db:
2c:ed:66:27:3f:10:f6:bf:12:01:c5:be:90:0a:9e:91:af:06:
4d:a7:c2:03:c5:b4:6d:ca:36:67:09:c1:e4:cd:c3:42:62:79:
e5:2c:72:2c:e4:f6:38:c6:52:af:a2:41:72:ac:b2:b0:df:f3:
4d:36:c3:d9:cf:38:b4:61:53:b9:1e:e9:b4:28:2f:d9:ef:65:
75:29:af:fe:86:36:7b:72:67:85:49:b3:fb:67:20:57:5d:aa:
b7:cf:09:bb:3a:14:45:33:9d:90:e1:3c:6d:30:fc:16:46:4d:
a6:1c:11:43:c7:1e:c0:64:5d:59:0f:4c:3f:7a:49:d7:8d:e7:
87:96:51:6a:23:a7:7b:a6:72:51:c5:a5:68:83:09:fe:34:26:
50:b6:bb:bd:ae:d1:9a:65:ad:36:d0:cf:69:bc:91:56:10:e7:
2c:2f:d1:d3:18:d0:26:01:a4:48:f9:e3:e2:00:3c:9e:ee:3e:
f9:02:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:53 2026 by rpki-client