Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: FFr06fefeEVq44YtJBJw1z++nqImHeVJDc3fbOf+1q8=
Subject key identifier: CE:44:DE:1E:7C:5E:40:30:30:20:DA:2A:7E:43:FE:F1:A6:7F:F9:68
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019DA59D2B4ADB7A0EF02C65F13A9B4A7D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0449
Signing time: Sun 19 Apr 2026 12:00:34 +0000
Manifest this update: Sun 19 Apr 2026 12:00:34 +0000
Manifest next update: Mon 20 Apr 2026 12:00:34 +0000
Files and hashes: 1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: jJNAq3VSwOn7Hta1rJQk7cE13+pjgxockDRy8fIg9nU=)
2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:2b:4a:db:7a:0e:f0:2c:65:f1:3a:9b:4a:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Apr 19 12:00:34 2026 GMT
Not After : Apr 20 12:00:34 2026 GMT
Subject: CN=ce44de1e7c5e40303020da2a7e43fef1a67ff968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:18:41:da:bc:82:fd:96:4b:8c:1d:92:e9:44:
20:8f:af:ae:ff:40:ec:9e:33:a5:61:66:12:ee:b0:
e7:b6:0f:cc:b6:66:56:41:27:71:5a:0f:e2:6a:ce:
a7:36:36:f0:f6:4e:6a:c3:85:a2:4a:f1:ee:44:a7:
61:ac:0c:68:4a:f2:16:a7:e8:6c:57:d7:45:cb:82:
ee:a8:3b:c7:dd:4d:2f:fb:bb:08:50:b5:a9:ae:d1:
5c:06:48:97:96:a7:f0:b6:7c:61:cb:77:6f:3b:ce:
94:ad:e7:55:b9:e0:4b:00:05:3b:24:ac:b7:4b:24:
7c:90:83:af:6e:06:21:3d:f9:12:e4:5f:a3:9c:54:
e7:3d:2a:02:a4:13:6f:8c:ee:94:34:cd:d2:0a:91:
24:e4:b5:dc:5e:c4:6a:22:d3:ef:af:0b:57:49:f9:
d4:76:64:10:71:fc:01:5f:d2:ae:66:e3:ef:7b:6e:
5b:97:54:36:58:3a:66:01:27:f9:8f:21:a2:67:d2:
69:8f:56:cd:ac:d5:da:29:02:25:97:e1:08:c3:3a:
e1:22:df:95:56:02:53:89:d8:b5:6d:c3:da:35:91:
4d:6f:72:8a:b6:be:d7:64:8f:54:d2:cd:e6:8b:7e:
ed:36:40:7d:aa:67:d6:17:49:e2:55:0d:ea:bf:0a:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:DE:1E:7C:5E:40:30:30:20:DA:2A:7E:43:FE:F1:A6:7F:F9:68
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ec:48:2f:9a:30:2d:36:9c:95:ff:4f:17:f1:df:43:82:d7:
51:cb:d4:09:cd:a6:4d:ce:eb:97:0d:f6:cf:14:4a:cf:a8:11:
af:82:4b:d4:2d:14:9f:8c:23:fc:8c:b3:72:53:96:58:f8:b0:
1a:cc:1b:2f:af:bf:1e:57:2b:c5:2c:2f:30:4e:1a:34:7a:b9:
c9:5d:09:e3:90:90:66:d5:68:b3:c2:84:41:c8:db:55:e0:a0:
0e:40:9c:66:a7:2e:39:d5:56:b8:9f:78:c1:57:93:7a:e0:21:
d5:5f:74:16:75:65:bf:9c:32:37:e3:28:67:20:c1:6b:37:2a:
37:88:7b:17:7f:cd:ce:49:43:c7:b2:99:ab:83:e4:5e:3a:b9:
3b:35:5a:44:42:09:9c:7a:5c:fb:e0:9a:36:5f:45:2a:12:4e:
b5:82:44:76:92:2e:f0:a8:9d:ff:7d:51:9e:01:ba:63:1d:16:
cf:41:65:4d:72:18:ed:a7:f8:5c:9b:31:ce:cb:2e:d0:b5:5f:
04:20:dd:11:e9:33:30:49:01:3f:46:a0:38:6a:bd:0c:83:ca:
b4:e5:92:f6:7a:3c:22:72:53:f7:03:06:1a:68:26:3f:00:f7:
bf:49:1a:96:a5:a3:b9:de:2b:02:f5:b6:42:f1:7a:ac:7e:3d:
c7:65:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:47:32 2026 by rpki-client