Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: V+jqQjDDEK7LfCQAwWXFAmGmE38KeOwrvM+e0CbJrXo=
Subject key identifier: 86:76:C0:98:4C:C8:92:6F:E0:B6:0D:CC:8E:20:34:40:0B:28:37:9F
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 019D28F21DA9DCC9BEBDB1BEF42A8C13BA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 0702
Signing time: Thu 26 Mar 2026 07:00:49 +0000
Manifest this update: Thu 26 Mar 2026 07:00:49 +0000
Manifest next update: Fri 27 Mar 2026 07:00:49 +0000
Files and hashes: 1: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: 89oV3G8QYATWRdAiSNLzcHfOO91TKQ9+GHq5srxQyPo=)
2: XLYP7p5RdRYcFYlzrcGWJvzM9yA.roa (hash: tHVjpzIZv9hKwBcDf9rhYgJAorYOKfN7gsmTFS3LleQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:1d:a9:dc:c9:be:bd:b1:be:f4:2a:8c:13:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Mar 26 07:00:49 2026 GMT
Not After : Mar 27 07:00:49 2026 GMT
Subject: CN=8676c0984cc8926fe0b60dcc8e2034400b28379f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:02:85:e9:60:93:40:c9:7b:5c:6c:7b:85:
9e:6c:89:2f:63:ac:07:ce:29:58:50:ea:29:10:75:
fa:bf:8c:5d:33:82:a9:c3:79:59:41:de:9f:18:6f:
12:0f:74:7d:24:1d:b6:1e:5a:b3:3e:77:9a:b6:79:
2e:a4:5a:ff:2a:f3:e0:14:68:5e:e9:f0:54:11:f7:
65:51:c3:b2:d8:48:b8:26:1d:08:31:cf:2e:95:61:
b4:07:d5:a4:7f:d9:db:66:81:1d:50:b3:bb:aa:28:
a2:84:87:fa:1b:7a:22:76:9e:43:8c:a2:5b:f3:ac:
42:81:dc:f1:82:a5:8e:3f:b5:5a:57:c0:16:0f:b3:
28:88:6e:01:9e:b2:c0:80:31:ee:a9:00:03:a4:06:
6d:3b:9c:a3:b1:d6:95:26:82:0c:e7:4e:e3:e7:25:
f3:51:8c:b5:f9:f3:63:39:bf:4e:00:7d:3e:ab:9b:
80:aa:8e:3e:2d:6e:1a:eb:4d:13:21:ab:9b:d3:29:
53:28:bc:f9:d0:04:5b:90:d5:41:c9:9e:4c:67:32:
33:ba:87:f1:f0:22:fb:ee:65:14:f5:37:fb:88:aa:
2c:14:2e:1f:2b:06:2e:c9:12:44:f3:7e:e3:dd:96:
43:04:74:8e:25:1d:4c:d7:17:44:df:56:f4:e0:03:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:C0:98:4C:C8:92:6F:E0:B6:0D:CC:8E:20:34:40:0B:28:37:9F
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e4:54:ca:b6:83:e5:ea:18:aa:d8:1e:0d:e8:d2:45:f5:43:
5f:bc:02:3b:99:1a:e7:6a:d5:b8:bb:fb:75:9c:f1:1e:73:38:
6f:4f:ee:cd:83:cd:f3:11:c7:e6:b4:e1:1f:9b:c0:0a:06:d1:
eb:8a:78:10:bf:d6:cb:3d:c8:54:0f:3b:37:52:3e:75:6f:70:
b3:f6:64:d9:cf:86:9e:9e:ff:e8:e0:31:80:eb:89:44:df:38:
cb:b6:11:4c:2c:f1:dc:f8:82:eb:06:ef:5d:e8:20:07:40:9d:
d3:fe:9c:53:1a:b8:08:59:f0:48:42:22:92:93:a3:56:95:e8:
e3:9b:cd:b0:2a:8d:8d:17:e6:aa:9d:71:4f:a4:64:3e:23:3b:
53:82:dd:1d:5a:1c:c6:7f:fd:c5:0e:9b:be:b3:8f:0e:91:45:
e7:56:44:3e:f9:9f:90:9b:88:76:93:c2:b5:27:1d:6b:6a:db:
45:68:a0:a8:48:76:f8:01:50:32:43:93:b3:3d:34:e0:d8:8b:
18:32:2a:ec:a1:48:f1:63:f3:7b:87:ba:51:31:7d:61:a3:8a:
58:1b:90:b8:1f:6c:24:24:5a:42:22:2a:94:e9:bd:0a:26:61:
96:2a:2c:31:4b:bc:2b:0b:48:c3:a3:1f:33:1e:8e:d9:2d:48:
e7:95:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:03 2026 by rpki-client