Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: 5n6XXdh9JhrPSggzzYye+LtMTzN1X/L0O6EqN+gXlpA=
Subject key identifier: 7B:99:8B:29:0B:EC:B8:0E:74:6B:B9:54:CA:0C:76:2B:CE:04:D2:3C
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019E211E570F778102A84C1CAA7252DE412D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 0651
Signing time: Wed 13 May 2026 11:34:56 +0000
Manifest this update: Wed 13 May 2026 11:34:56 +0000
Manifest next update: Thu 14 May 2026 11:34:56 +0000
Files and hashes: 1: J3APbr50rVneV9H1qg-HNNc-3lc.roa (hash: NXCP1NiFTqdVA1tneuQk89jFvEWiunEfCtSHBOd2xMY=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: B2R7c9DsfP1ECHF7mIzzj78L5DX700CcerPURDrwTLw=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:1e:57:0f:77:81:02:a8:4c:1c:aa:72:52:de:41:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: May 13 11:34:56 2026 GMT
Not After : May 14 11:34:56 2026 GMT
Subject: CN=7b998b290becb80e746bb954ca0c762bce04d23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:02:90:9a:3b:fe:4c:a9:87:fe:75:12:87:
e6:1c:04:d7:26:6e:c2:41:f8:f2:ee:ab:7b:86:8c:
cd:d5:79:23:ef:52:2b:81:ea:dc:4c:04:18:16:ee:
41:fd:82:7b:6d:1e:81:74:a2:19:3f:80:1d:9b:f8:
9d:a5:15:e6:4b:c6:01:98:09:a4:73:2d:87:9d:76:
bc:aa:54:b8:81:4b:ee:7c:37:12:5c:b7:a6:7b:72:
93:eb:ee:83:44:2a:f0:8a:e9:0c:a0:aa:f2:ad:1a:
7d:0b:cb:32:fd:98:51:83:eb:cf:4b:55:e2:06:90:
2c:ba:2f:25:d1:43:c1:f0:5e:49:b2:2f:dd:37:14:
a9:46:19:60:6d:d4:89:95:b4:33:de:1e:0b:63:a9:
9a:ed:45:40:54:2e:14:5c:52:26:54:92:eb:74:fc:
58:05:49:27:e8:28:87:b0:b7:c7:25:e2:9f:8c:d0:
f1:06:19:83:52:ea:a4:83:4d:bf:a9:06:2e:85:15:
ad:cc:0d:5d:7e:35:a5:8e:94:dd:28:25:0f:44:b6:
54:a1:11:3e:9e:52:3f:c9:17:88:8f:78:aa:f4:67:
54:68:7a:4c:74:91:85:53:f3:3e:ed:a3:3d:c8:3c:
9d:e0:08:2b:c6:de:a8:0a:a8:da:0e:05:c0:b4:c5:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:8B:29:0B:EC:B8:0E:74:6B:B9:54:CA:0C:76:2B:CE:04:D2:3C
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:64:62:cc:39:a4:dc:3a:ac:04:e4:35:35:d3:f5:da:8c:da:
bc:ed:83:50:85:c8:d8:e7:f8:43:9d:48:cb:93:39:d4:7d:37:
5d:5e:ee:d4:79:59:b2:6e:b4:36:c4:2c:ca:fb:8f:b2:ec:92:
cb:8c:2b:38:56:7d:41:8b:de:fe:b1:18:9a:1d:2a:a9:26:b5:
5d:f0:de:17:fc:32:7a:67:94:7d:09:a4:06:75:e0:79:3c:b6:
7c:ee:66:6a:4c:9c:41:26:1e:34:c9:c0:26:b5:a2:b9:4b:71:
08:de:fa:aa:a8:a7:47:15:4a:11:44:b4:c2:9e:a6:87:e7:00:
20:fa:b0:b4:ba:9c:bc:7d:5d:42:67:4d:1d:24:e2:46:df:82:
d7:0d:3f:cf:74:e2:bf:18:2c:48:69:7f:9c:eb:ea:e3:16:4e:
f7:bf:71:1d:37:25:5c:b0:ce:90:50:b1:c1:96:de:85:f9:40:
b4:23:7a:fd:60:22:b2:22:fb:56:43:a9:65:d0:3a:f5:1e:73:
90:12:20:09:af:68:40:2a:f3:ab:5f:5b:97:06:9f:9e:d9:c4:
94:51:9d:22:40:51:05:3d:a2:29:1a:41:5a:0b:13:47:68:2e:
10:3d:56:69:98:da:7c:14:79:33:2c:eb:e3:0c:30:88:eb:d1:
e6:37:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:11 2026 by rpki-client