Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: Vgfu9MLl0Sj9ayU3X0CLdZoShs7JGEjwDxFRSbaEbZU=
Subject key identifier: DD:4B:56:A7:C6:B6:40:6D:AC:F1:AA:37:BF:CD:18:FA:9C:28:7D:D8
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 019D28F262F37A3C30D258325C6D6B0186D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:06 +0000
Manifest this update: Thu 26 Mar 2026 07:01:06 +0000
Manifest next update: Fri 27 Mar 2026 07:01:06 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: KP162ojduw6Izk1nuP/i+t+pF9zddQDXOpDO9HMeTEM=)
2: mzMqmoVSIFuCLCPTGJNgkppjofc.roa (hash: wetUFpoO1LIZACM6xLS3nZwdIp4jjp+fdNMN2abBvwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:62:f3:7a:3c:30:d2:58:32:5c:6d:6b:01:86:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Mar 26 07:01:06 2026 GMT
Not After : Mar 27 07:01:06 2026 GMT
Subject: CN=dd4b56a7c6b6406dacf1aa37bfcd18fa9c287dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:2a:0d:a4:c8:4c:de:e1:a3:07:ed:ce:84:
6a:64:b1:8a:01:d8:f9:97:14:2b:19:18:7e:77:28:
4b:24:d8:6b:95:7c:c4:48:0e:93:bb:3d:40:69:7a:
ee:47:04:9b:da:4c:b4:d6:33:16:c9:c9:8d:22:e6:
97:87:57:1f:33:45:17:0a:9b:50:0d:ac:cd:4d:71:
f9:2b:34:b1:a1:2a:fb:d5:c9:cb:f0:df:ab:f7:f1:
0b:7a:2c:fe:70:b7:6e:ae:33:d6:57:5c:52:a8:47:
ef:6b:e4:bc:a3:c1:14:6a:41:6d:3c:1f:0f:a3:14:
be:27:8d:8f:56:90:75:8a:74:88:9c:ff:61:ec:f6:
e3:55:71:fc:08:c0:cf:bf:8d:9b:3d:a4:41:25:2f:
49:2a:92:b0:27:a4:15:2b:15:b3:92:6d:70:28:e2:
8a:c1:aa:e1:b9:cc:78:64:d1:16:a3:49:69:f6:11:
6b:61:d2:81:0f:15:14:19:ab:54:2f:c7:34:d9:00:
6b:d4:83:f8:e8:c9:b5:90:6f:10:4f:ea:fe:c5:8d:
3f:91:34:b8:f5:5e:f4:4c:d1:d9:92:1b:16:79:38:
68:ce:81:ac:83:98:fd:04:e1:34:7b:b1:7c:c0:37:
7d:45:45:8b:6e:b9:a4:58:41:1b:cf:2b:9f:75:41:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:56:A7:C6:B6:40:6D:AC:F1:AA:37:BF:CD:18:FA:9C:28:7D:D8
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:69:3b:ae:84:99:7f:96:ed:89:0d:a4:b8:d2:86:d2:9b:9d:
f9:f8:c1:5a:ff:02:c9:1a:ee:aa:7f:b3:d4:44:e6:1c:2e:ef:
15:fc:12:6b:68:64:75:67:9f:2b:26:25:c2:bf:6a:38:56:d2:
50:26:a6:5c:da:6d:fb:07:16:6d:3a:47:11:01:fc:3f:a9:4c:
29:55:50:59:41:97:6b:93:ba:2f:7d:f6:72:07:62:cc:c5:5a:
26:ce:bf:0e:ab:45:30:c8:46:d3:e9:5b:a0:4d:31:bb:73:92:
81:88:b2:64:57:65:e1:06:eb:3a:92:b8:38:7a:f3:58:d0:95:
6b:14:99:c5:ab:0e:60:49:f8:2c:d5:51:7e:10:65:3e:ac:da:
cf:65:27:09:36:b2:5d:f7:65:a0:66:38:2f:a7:1e:2d:d2:9a:
73:63:c6:a4:a4:fb:78:f8:10:20:dd:60:51:c2:b4:35:8b:55:
f7:3f:96:85:80:29:6f:e8:56:2a:c4:e1:9c:f2:10:9a:85:5f:
4d:f4:0c:7c:e3:59:82:7e:16:85:0d:67:bf:d0:50:6a:eb:68:
51:43:ea:9e:17:b7:e9:ca:15:54:f4:f6:35:ac:b3:ff:3c:30:
b2:81:89:49:cd:25:c9:0b:40:91:e7:11:33:55:c5:04:ef:a8:
fe:40:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:10 2026 by rpki-client