Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: pgppKUl6N091LvDixzLYKaz78YsWugHV5b2R4QNoU24=
Subject key identifier: 4D:01:39:19:D4:69:2E:2A:EC:7D:E7:38:77:29:2E:9B:84:A7:7C:E7
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019FAB2C2749ADA888C3A2EB7FEB15327794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0555
Signing time: Wed 29 Jul 2026 00:00:25 +0000
Manifest this update: Wed 29 Jul 2026 00:00:25 +0000
Manifest next update: Thu 30 Jul 2026 00:00:25 +0000
Files and hashes: 1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: NPmmw0ri7SBKMJFAXiyPzz8cNMAps5UDalnjIq7HDvM=)
2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:27:49:ad:a8:88:c3:a2:eb:7f:eb:15:32:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Jul 29 00:00:25 2026 GMT
Not After : Jul 30 00:00:25 2026 GMT
Subject: CN=4d013919d4692e2aec7de73877292e9b84a77ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:09:c6:d1:fc:09:6b:a4:9e:39:13:f8:82:
08:b7:25:94:5b:bd:2e:ab:18:fe:4e:36:e6:9e:57:
4f:30:99:30:0c:c8:0c:a8:cb:96:97:aa:53:a9:e6:
cb:b5:a2:46:0b:c1:7a:90:cc:77:50:85:19:9d:2a:
80:d4:9c:23:ae:d7:81:4e:8a:36:fb:42:f9:8f:40:
b2:de:bd:be:3e:17:1c:9d:1a:2d:01:a5:6b:98:a6:
aa:63:95:b3:db:f4:a5:7b:26:28:aa:02:ce:b8:6c:
b0:45:72:b1:29:58:b5:10:02:28:27:01:1a:75:d9:
9e:ed:af:de:76:4a:cd:e9:7d:ab:8e:d5:b2:a7:01:
b9:bf:9d:23:18:86:4d:73:2d:b5:41:8f:11:2b:4a:
9b:2d:95:ef:58:cd:ba:ef:dc:84:cf:83:14:8c:e5:
e2:b7:e8:7b:4d:2c:84:a7:5e:af:10:8f:ea:c0:c3:
27:ca:05:20:82:f8:08:24:0a:0a:f7:89:2e:9f:4f:
d9:e3:e1:6a:88:d2:18:c3:01:09:3d:66:e0:bf:a8:
5a:71:b2:47:9f:30:bb:6b:f7:24:2e:50:db:d9:7a:
34:f6:61:45:b2:60:9a:d7:d0:9a:9a:da:f2:2f:45:
f2:3e:81:54:4a:8b:95:e6:cb:a9:bd:44:9a:30:d9:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:39:19:D4:69:2E:2A:EC:7D:E7:38:77:29:2E:9B:84:A7:7C:E7
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:18:41:61:df:4a:19:00:7c:ce:c9:a5:f0:6f:46:35:71:
e5:21:51:89:c7:be:b5:d8:57:ed:c0:26:87:1c:9f:4b:15:4d:
aa:de:15:b5:03:77:36:9a:82:62:c3:24:c6:d1:35:b2:b3:e4:
b3:14:2c:23:5b:27:2f:a8:45:f6:97:cb:2f:8e:9b:85:d1:f5:
5d:35:86:c1:67:d5:49:88:41:33:9b:d9:dc:f2:b6:3f:63:34:
8f:dc:7d:50:c4:8d:dc:75:4c:75:c5:a9:87:57:e6:e9:62:33:
ea:b6:47:d9:2e:d8:f9:96:f4:bb:97:4a:43:e0:8f:2a:64:ba:
5d:05:98:9e:a8:48:3a:e4:db:fc:b6:df:3a:75:01:e1:a1:fa:
b6:f4:60:1a:7c:9e:a3:8a:95:3c:98:e2:7c:c9:7d:ef:08:29:
9e:20:36:da:99:8f:54:d5:80:1d:a2:fa:86:6b:2d:5d:88:1f:
c3:dc:4d:e1:46:a4:77:bd:9a:6c:80:4c:92:6c:ea:34:67:0b:
7a:f4:cc:fa:46:62:dd:0f:9b:d6:9e:97:e4:8c:89:d1:ad:9c:
ca:5d:b6:bb:8a:36:6c:ab:86:6a:0e:72:f8:b3:32:74:53:fd:
0c:8b:07:a5:bd:ce:8a:78:79:40:43:c8:75:c7:0f:18:fc:c1:
b5:44:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:22 2026 by rpki-client