Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: 4qGRygiaCpiAIsCOp9CmN6PU1Jqry1BjaLo8Rc81KEg=
Subject key identifier: FB:C0:F3:BC:BA:2F:D6:D4:22:BE:1E:EF:62:7C:1B:4C:50:8B:8C:06
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019D288497CE492D18492CDEAA93A1719AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 04F0
Signing time: Thu 26 Mar 2026 05:01:11 +0000
Manifest this update: Thu 26 Mar 2026 05:01:11 +0000
Manifest next update: Fri 27 Mar 2026 05:01:11 +0000
Files and hashes: 1: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: z/gHx8jLZoVroygqTmnbNlCSZYw6rd1n7oOZB/vmsyc=)
2: ZHhc0L728ye9C_PaxE7QKIWysf0.roa (hash: IYrJXv7Z8+WyubB49OSinWGa68suJopradNDMs9g9yQ=)
3: mUqS4S5SL9Pvq3yISShuWCb9ZtE.roa (hash: uUcTOLjK+7qjGVmB7WyFwvHdMHjyRZf2FkbrhsEB5pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:97:ce:49:2d:18:49:2c:de:aa:93:a1:71:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Mar 26 05:01:11 2026 GMT
Not After : Mar 27 05:01:11 2026 GMT
Subject: CN=fbc0f3bcba2fd6d422be1eef627c1b4c508b8c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:89:1d:e9:2b:80:6d:bf:2f:80:dd:4e:8e:
5d:47:ff:8e:e3:e3:bb:02:e1:19:47:61:1d:25:bf:
88:89:c3:4c:b8:21:ed:98:39:71:b5:11:01:c2:44:
c1:ab:9d:68:e7:f0:5a:65:80:3d:bc:55:f2:60:0a:
68:48:59:5f:a9:89:75:f9:8d:ef:05:66:8d:a0:e9:
80:05:ff:9f:f1:d7:7f:9b:70:48:3d:72:e5:f0:ad:
17:f2:82:f4:6e:da:fa:5c:10:48:0d:26:ac:02:69:
b0:84:07:a3:64:04:c5:55:24:e7:76:e5:ec:82:53:
30:64:92:66:f1:1a:fb:23:c0:2d:e8:da:70:a7:4b:
8f:3c:5a:a9:aa:01:2c:76:2f:a2:39:79:c4:f2:e2:
4c:bc:72:8f:b2:68:db:42:79:71:b2:ac:70:5f:fd:
b2:81:df:f5:3a:db:a2:0b:8e:79:a0:c0:43:d8:30:
5a:c8:c8:fc:fa:1c:d3:15:73:17:85:ac:d4:96:1e:
ee:61:d6:88:e4:9c:29:82:eb:22:0e:d2:42:f5:52:
a6:51:1f:3b:5c:4c:b7:2d:2b:c2:f4:8f:4e:42:0e:
b0:93:4e:e7:30:df:4b:22:f4:17:9b:db:7f:be:d2:
bf:9e:19:77:fc:10:b2:00:2d:93:10:b3:9b:97:7f:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C0:F3:BC:BA:2F:D6:D4:22:BE:1E:EF:62:7C:1B:4C:50:8B:8C:06
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:85:38:df:30:77:13:34:d8:1a:e4:45:03:fd:c0:c0:ea:44:
48:1a:cb:09:4e:6c:f4:b9:9b:0f:cb:72:60:ea:87:da:33:48:
12:76:41:37:98:0b:98:1c:e5:ae:ab:92:bf:3a:47:7e:e1:90:
4e:8e:b6:b0:0a:01:cb:34:d6:18:b8:ab:3c:7f:9d:55:bf:9b:
1e:4e:9f:54:32:bf:3d:f6:ca:ee:95:86:c7:5c:f9:7d:af:30:
80:f7:93:95:46:cd:4b:fb:29:0c:dd:ed:ca:6e:46:82:20:06:
23:dd:1c:81:8d:99:0c:c5:4f:11:94:36:26:a0:59:41:a7:e8:
a0:db:8f:5e:2a:09:19:7b:d8:33:c3:79:73:72:9c:f1:a2:b2:
c1:83:c3:25:c8:e5:55:92:ec:56:70:06:f4:04:f5:e1:50:2c:
8b:27:ba:f0:79:75:a8:b8:51:be:72:bb:f7:33:10:62:56:61:
98:0f:29:6c:f5:eb:ee:be:ae:3f:29:89:ac:a7:9e:9d:3f:3b:
01:f3:6a:71:c5:21:f3:32:dc:e5:dd:88:be:76:56:62:ca:20:
c3:92:75:72:92:25:51:a7:4d:0a:d1:7c:52:d6:8e:fa:ea:3f:
ec:46:50:38:fc:91:17:90:c3:35:a9:0c:8c:d1:b9:f1:be:f9:
27:ea:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:10 2026 by rpki-client