Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: CeOMozVmLxxD9FDLOJk7g1VuW/PKSD/oIpn445LzFrg=
Subject key identifier: 23:1D:BA:BB:C2:C8:36:D8:70:CF:67:30:AE:F6:2A:3B:F3:6F:99:6E
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 019E1DFE094B385D9301DD5EFA00DF9FDBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 0520
Signing time: Tue 12 May 2026 21:00:48 +0000
Manifest this update: Tue 12 May 2026 21:00:48 +0000
Manifest next update: Wed 13 May 2026 21:00:48 +0000
Files and hashes: 1: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
2: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
3: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: dEvM15mcKhggkNXevn/oFUBEtP57pdFxmwQHBxHkcNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:09:4b:38:5d:93:01:dd:5e:fa:00:df:9f:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: May 12 21:00:48 2026 GMT
Not After : May 13 21:00:48 2026 GMT
Subject: CN=231dbabbc2c836d870cf6730aef62a3bf36f996e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:ce:4a:60:a4:d8:df:cc:06:0e:91:b7:cd:
fa:8b:93:ea:39:d8:e7:54:03:c5:19:48:b7:3a:ee:
38:00:d3:93:cc:7c:1b:37:e9:68:f7:66:f6:3a:3c:
35:cd:32:39:1a:3d:af:70:22:22:3d:69:3d:34:78:
e1:ca:d7:e7:2e:71:67:8d:b3:13:87:34:4d:19:58:
c5:19:51:c5:90:42:39:52:07:2d:a6:cb:78:86:9d:
0e:25:cb:ca:14:ae:f8:f2:e3:b8:48:fa:cd:ea:0e:
fd:62:41:fa:a1:b9:75:39:b6:4a:32:1d:ca:03:23:
f5:9f:ae:52:90:73:bc:8b:46:a1:26:30:1c:0a:5c:
05:df:7a:11:a7:0c:4e:02:b1:fc:a2:a5:34:43:9f:
c9:1f:8e:26:26:1e:38:86:7e:1f:5a:93:21:27:73:
a7:14:13:e4:5a:93:e7:91:6e:6e:84:6f:31:c8:97:
88:a7:43:52:1d:a6:fa:01:ae:63:35:b6:ad:96:2e:
94:d0:9b:7e:77:b6:15:0c:12:17:79:b5:82:7b:e6:
48:f2:f1:59:6f:b8:df:82:9e:ee:15:4c:63:04:e7:
33:aa:41:85:7f:55:95:84:79:3f:32:76:a0:a3:99:
12:3b:df:3a:14:eb:58:f7:9a:31:fb:11:68:43:66:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:BA:BB:C2:C8:36:D8:70:CF:67:30:AE:F6:2A:3B:F3:6F:99:6E
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e2:33:e4:4c:2d:6e:03:b1:b4:a2:0b:7b:11:f7:19:ff:18:
0b:6b:62:2c:1f:2d:23:00:8b:3b:f3:ce:3f:9e:54:91:f9:b3:
43:11:52:a7:f4:58:7c:f8:c7:fd:07:eb:31:06:c1:53:83:08:
ea:ea:bf:a1:53:6f:f8:58:7b:76:07:24:23:af:e8:5d:1b:1a:
4f:c7:45:a5:66:78:00:ba:af:c8:59:91:1f:09:d8:70:30:38:
68:d3:d5:2e:c2:6f:49:ce:c8:96:c8:d3:1a:7e:98:b8:9a:5f:
76:7c:ac:78:0a:bc:77:c8:45:a8:93:c0:6d:8c:68:d6:fb:33:
c8:8c:3c:fb:96:e6:ab:56:1d:ea:49:1a:5d:58:54:26:fb:82:
4c:ce:93:95:b6:bb:3f:52:68:b2:ac:cc:c4:dd:94:bd:16:03:
94:68:32:04:1f:fa:34:39:91:02:a4:81:25:b9:d0:99:39:6d:
40:cc:23:d4:03:52:60:2b:4d:c6:94:b7:c3:6d:f4:a8:35:c3:
31:d1:33:f4:8a:6d:4b:1d:dc:bf:4c:b9:2a:8a:05:72:0e:fc:
d9:56:25:8f:a8:cd:a3:4f:96:fe:d3:d5:e9:75:c6:03:5f:c3:
e8:69:84:4e:18:9c:bb:9d:3a:a5:ab:0b:54:a6:2a:2f:68:19:
3d:5f:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:49 2026 by rpki-client