Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: ijl+Yem2EYQXVsyqp/FNX/ydkDf6notDFWW2+JFj31w=
Subject key identifier: 80:8F:E3:12:F1:49:FC:2B:44:D2:0C:A0:72:37:0C:F8:47:56:40:9E
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019D25842E0151CD930216B356F3E11F10D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0E66
Signing time: Wed 25 Mar 2026 15:01:52 +0000
Manifest this update: Wed 25 Mar 2026 15:01:52 +0000
Manifest next update: Thu 26 Mar 2026 15:01:52 +0000
Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
2: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
3: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
4: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=)
5: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: TultoG1UMw65xBegcYI0qTELx4otbEAK27QYY30PPs0=)
6: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
7: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
8: mrSAnzlDLfun5MHZVJBImrVFqAo.roa (hash: rqUXSHfbdDKPZADppYS48L5JRQ5WmyyUPUXsCOrlNFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2e:01:51:cd:93:02:16:b3:56:f3:e1:1f:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Mar 25 15:01:52 2026 GMT
Not After : Mar 26 15:01:52 2026 GMT
Subject: CN=808fe312f149fc2b44d20ca072370cf84756409e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:ab:7a:dc:26:93:74:68:2f:5c:60:cc:4b:
bf:60:59:71:22:86:e6:99:11:70:ba:c5:df:6b:d3:
fa:42:83:8c:a9:57:b3:f6:58:f2:be:e1:a0:96:72:
93:fc:9d:49:60:c5:ce:4f:eb:39:e3:a6:23:92:60:
ad:f1:db:65:84:05:e2:40:d1:01:18:d2:03:9c:e6:
ec:86:d1:58:3e:cb:29:a2:a3:d5:b4:6a:f4:a9:23:
22:01:c4:f4:c7:8f:3b:e2:b3:d3:09:5e:de:d7:25:
b1:c2:aa:ce:40:e4:3a:0b:a8:b8:37:f3:75:60:d1:
50:71:37:64:a5:93:a6:4f:30:f6:0a:4a:13:7c:ea:
fe:0f:7f:00:0c:ef:7a:69:30:27:f3:e3:d1:7d:a2:
0e:3e:ae:1e:7f:37:14:1f:88:cf:14:0a:cf:70:6b:
9b:9c:e5:dd:83:f5:c8:d2:7c:d0:4e:e1:88:a4:9e:
9a:6d:16:ce:30:10:cc:30:7e:fe:cb:4b:16:d8:2c:
41:91:a0:21:ab:01:48:1c:60:e0:96:ec:c5:00:35:
db:8c:fb:b9:e1:2d:f3:5f:bf:ef:3b:06:b4:b5:fa:
ac:fb:91:e4:bf:71:e9:2b:31:f8:cb:cf:41:5d:1c:
87:ee:87:7d:63:48:16:48:75:84:df:61:e0:4d:cd:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:E3:12:F1:49:FC:2B:44:D2:0C:A0:72:37:0C:F8:47:56:40:9E
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:a8:61:76:aa:d5:6e:2e:9e:b8:d7:26:93:9e:d8:16:39:
37:68:10:4d:57:be:84:17:4b:6a:69:7b:15:6f:f5:d3:a5:24:
18:00:5a:8e:fb:eb:79:77:d1:62:19:2d:bf:56:c5:ac:ad:3e:
08:ab:c0:03:12:12:9d:d5:22:80:04:ff:a4:12:78:71:e4:fd:
ad:e8:0c:51:89:49:5a:8a:4d:39:24:4d:8c:33:49:16:bc:a8:
3e:ad:05:32:e1:fe:d1:90:45:5d:35:b9:7a:c2:a8:d9:47:23:
47:f2:e5:4e:b1:8e:f0:56:95:85:06:1b:00:40:9f:e4:1a:f9:
ed:07:28:9c:0b:81:c8:d9:34:7a:4b:8f:11:ae:30:13:d2:40:
ea:3c:0b:fb:57:76:78:07:c6:28:cc:58:a6:6b:93:a9:ee:48:
e5:a4:16:f1:af:51:31:ea:6c:e1:39:22:53:65:1c:8f:eb:ce:
2e:ae:05:8e:af:3a:ef:87:20:41:e0:b7:14:fe:06:10:a3:1c:
dc:b9:d5:09:87:67:24:30:ea:63:69:f9:3a:f4:25:4a:5c:a6:
5e:57:4f:bf:52:ef:a8:09:f8:21:c8:6e:ef:72:c2:7a:ef:61:
39:34:2b:6a:91:7b:3b:b9:9d:fa:6d:6f:77:77:3f:3e:d5:ae:
3f:12:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:41 2026 by rpki-client