Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: TOFLErpbU98rali/ss8UHggn8qLv6e+uxvpZrHF6q8I=
Subject key identifier: 13:34:2B:F4:CD:35:92:A0:55:BF:A9:DE:83:D5:9B:58:CD:50:38:9C
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 019CAAC712D9B11D229AE2CF429819D31F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: j1unTrE1CnQcIwwgV2YDC9Bsp78aUEX0L3JTl2dL5Xg=)
2: VdNiyBTNLP0hxdVWgblf808PR6Q.roa (hash: b0TF5folKN7zXjRCmCKkB9rk4cn3L/tdaHd7F0edmTA=)
3: _Ly8wabjTR1vhLqLPK6iVz33UEY.roa (hash: wpw6THVmXZJSjX+YaGWEWwzdrzwOfnuWTEH+2nafh7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:12:d9:b1:1d:22:9a:e2:cf:42:98:19:d3:1f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=13342bf4cd3592a055bfa9de83d59b58cd50389c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:14:c1:34:80:e0:dc:96:eb:3c:ff:03:ff:38:
96:8d:cc:26:99:d3:18:c8:87:71:3b:b7:39:b5:72:
32:12:fe:7b:0e:28:dd:2e:17:be:43:bd:8e:4c:73:
c8:31:49:ba:8c:af:53:6c:0a:2c:2b:a4:9e:92:b2:
83:d7:36:39:85:b6:ea:b7:60:b9:d9:92:b7:4d:be:
9e:57:fd:96:27:7f:07:68:79:76:a9:10:93:42:96:
b5:c2:88:9d:5a:1b:b0:e0:4b:4f:2a:c5:cb:34:42:
90:9d:40:60:94:80:7e:9c:bc:ba:98:2a:05:a2:0a:
70:70:13:f9:a4:fd:22:e2:79:4d:62:f0:b4:03:76:
a9:50:6d:57:5e:53:75:22:a1:e0:1b:64:28:ce:1d:
94:22:89:5c:b9:da:8e:c0:35:48:a0:c1:c5:f7:ab:
d1:36:09:a9:e7:f6:87:b8:ab:5b:17:d9:f1:ad:a5:
0b:cd:2f:16:89:78:07:cd:4f:22:b0:3a:ee:ba:8a:
e1:d1:87:a0:85:34:d4:a8:a5:ea:75:a1:9e:36:a1:
44:3b:8e:32:bb:b0:07:dd:7e:ea:32:dc:d5:27:ce:
be:70:e7:06:5c:4f:18:bf:15:69:77:b1:2f:52:5c:
b1:c8:75:92:d6:bc:35:20:62:6b:a1:2e:79:7c:3d:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:2B:F4:CD:35:92:A0:55:BF:A9:DE:83:D5:9B:58:CD:50:38:9C
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:81:70:00:65:0f:3c:6c:5b:34:93:e4:3b:9b:1c:bd:72:62:
3b:49:06:35:61:bf:11:f0:8a:47:0e:34:b2:f3:e7:db:91:15:
a6:68:ba:9d:fe:6d:ef:10:db:8b:11:60:46:1f:70:f6:f8:c9:
12:52:33:45:cb:6f:2b:34:0d:b8:ee:bf:3e:1a:08:eb:3e:1b:
a5:96:04:06:7d:c0:43:01:64:af:1e:7f:49:97:fc:3e:be:3d:
3d:69:ac:f1:17:d7:0e:f8:ad:92:0d:e7:1a:52:6c:c7:d0:e9:
48:49:35:52:fd:13:59:e1:1d:e1:ac:85:c5:52:e4:f7:b8:60:
f1:30:09:48:46:27:0c:f3:5a:f9:c3:3a:8e:6e:89:13:ad:12:
04:f8:33:b6:02:8f:b1:29:36:75:5f:7d:2a:a0:7f:a3:9f:39:
4f:7e:50:2a:6a:e7:8e:cd:3e:62:54:64:76:60:05:77:ac:0d:
be:1c:f0:97:b3:cf:ae:d2:cb:75:53:c8:ea:5d:37:bd:93:37:
ea:c6:ee:ef:fc:f4:3f:5d:a2:21:6c:6a:d8:f6:d9:0e:bd:ac:
3b:20:13:69:49:71:de:96:fa:c1:2e:5f:82:4a:90:98:13:40:
0e:67:5f:7e:a8:c0:10:90:60:75:a8:ca:dc:d0:5d:da:ae:bf:
bc:85:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:48 2026 by rpki-client