Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier: WGKcYj0gyqhQdckxjG95x00dS27cvJyk79Vk4g+pBkU=
Subject key identifier: 63:4F:1D:06:AF:AE:BB:0C:D6:82:3F:F2:1F:6C:83:8A:29:A0:EB:9B
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial: 019CA9B3951154604E168C5D080F78FB0FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number: 0679
Signing time: Sun 01 Mar 2026 14:00:44 +0000
Manifest this update: Sun 01 Mar 2026 14:00:44 +0000
Manifest next update: Mon 02 Mar 2026 14:00:44 +0000
Files and hashes: 1: APCVsNpvhqWeQcqweSvgt5Wftok.roa (hash: c6yMfxg6aqbcbGYpnlzDdHyhq9WGqsNthHIttzMp2bY=)
2: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: mZABips+s7eHZgAHxsOuf4t7GQSuLS6RMnkUEIbfqPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:95:11:54:60:4e:16:8c:5d:08:0f:78:fb:0f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
Validity
Not Before: Mar 1 14:00:44 2026 GMT
Not After : Mar 2 14:00:44 2026 GMT
Subject: CN=634f1d06afaebb0cd6823ff21f6c838a29a0eb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:d7:d7:31:c9:ae:73:df:23:ac:fe:4e:cd:
6e:ba:c0:7c:48:8e:68:d1:fe:ab:b4:c3:14:71:a6:
05:6f:e5:19:45:56:49:a7:6b:7f:db:ea:5e:c3:3a:
0a:a1:df:3d:68:b7:a1:c6:38:ca:43:b6:d4:12:f3:
c3:1e:bc:ec:ef:30:0b:89:9b:a3:ce:68:c7:9d:dc:
d9:59:d8:e2:71:0b:34:e9:87:ce:fc:e1:3e:dd:b1:
c6:80:b6:73:b0:7b:91:dd:cd:58:18:17:1a:af:79:
41:fd:9f:48:cc:1e:03:a2:01:30:4a:21:8d:1a:94:
64:5c:45:fc:8a:06:df:98:9c:26:47:1e:d8:42:ad:
ed:cb:07:84:2e:2c:e2:cd:bc:f3:c2:ba:d4:42:89:
e4:1a:a4:04:ba:4d:99:a7:1c:97:39:29:57:0f:84:
63:de:12:d7:2e:77:05:14:00:cd:b6:48:25:60:6a:
3d:e8:8d:76:ae:dc:78:89:53:55:9f:a5:2b:c9:56:
7c:e9:70:78:34:ef:be:84:7e:4a:0b:33:be:ba:b5:
b9:3e:0f:04:25:95:8f:ab:d6:c5:93:27:23:fd:d7:
02:ef:72:a9:df:2e:c9:c6:8b:f1:45:f9:ac:70:e1:
c8:52:01:07:75:bf:18:97:0a:ea:25:d5:2c:6d:20:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:1D:06:AF:AE:BB:0C:D6:82:3F:F2:1F:6C:83:8A:29:A0:EB:9B
X509v3 Authority Key Identifier:
keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:95:e2:0a:8f:4b:c6:2e:65:96:5a:69:64:01:9d:94:5c:
58:5f:f4:36:22:cd:bb:4b:9a:78:5b:44:9c:8f:02:33:7d:34:
55:c0:73:96:27:11:c5:af:0a:eb:b3:c0:1b:a7:93:9b:47:ae:
ce:f3:c9:21:fa:0e:43:15:49:16:d4:0f:a2:ba:35:46:ae:a6:
c3:05:6d:1d:1f:8a:23:45:10:b7:96:47:65:25:11:a2:0f:5a:
2c:bd:75:f6:d5:2a:45:18:a9:6b:a4:be:1b:77:94:c1:a3:7f:
9f:ec:0a:7d:2f:eb:c1:0c:d4:af:8b:c2:bc:41:22:f8:70:f8:
28:4d:66:7e:81:7b:a7:99:b5:13:15:cd:0b:87:07:d5:4e:1b:
d5:99:c1:96:07:76:6d:9f:79:53:be:73:1c:9b:21:eb:a8:30:
1b:f7:46:3c:bd:b3:36:0b:b5:d3:63:f8:eb:09:b2:2e:bc:67:
9a:e4:e8:a8:8d:bc:e9:d9:37:e6:16:14:91:32:c7:48:f0:ed:
d1:52:a1:61:9e:fd:d8:55:19:37:61:8f:54:06:0f:bb:36:95:
f2:16:e1:0a:24:94:63:e2:56:3e:98:60:f3:91:ce:ce:37:d0:
74:66:d0:cc:2f:77:e3:e9:73:38:24:93:d1:28:75:cb:fd:57:
72:cc:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:45 2026 by rpki-client