Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: r0SyZs2A7ohIica5ok52wvyPNIjNrNe6YQ/IWYDH+GA=
Subject key identifier: 9F:7A:97:16:C4:F9:62:B8:13:0C:AE:6A:7B:91:1E:EB:A8:36:67:7B
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019CAE6C85661B8B86835A458F68FD1B8453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 03C9
Signing time: Mon 02 Mar 2026 12:01:13 +0000
Manifest this update: Mon 02 Mar 2026 12:01:13 +0000
Manifest next update: Tue 03 Mar 2026 12:01:13 +0000
Files and hashes: 1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: pvGzzTvQAqinoXYG5k9Q7YsN0oYfooSo65741x7bx6k=)
2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:85:66:1b:8b:86:83:5a:45:8f:68:fd:1b:84:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Mar 2 12:01:13 2026 GMT
Not After : Mar 3 12:01:13 2026 GMT
Subject: CN=9f7a9716c4f962b8130cae6a7b911eeba836677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:a3:27:cd:96:9f:b0:9a:b6:68:87:31:0c:
57:c6:82:3b:f3:21:1d:e0:37:23:b0:95:f9:96:67:
31:d7:9e:f9:47:ed:19:a8:c0:97:16:2c:a3:5d:91:
b6:5b:41:d8:31:2e:ff:7d:8c:e9:c6:d1:24:2a:41:
85:b5:77:30:ae:cc:a7:ab:c2:e5:c7:02:bd:75:e8:
b2:f7:81:7a:e5:1e:30:b4:97:15:f0:16:b8:72:ef:
49:71:fd:ee:8d:2e:d8:3d:a6:71:2c:f6:04:81:b6:
55:a9:33:d8:3e:b1:84:4b:85:86:d8:bf:89:17:93:
4d:49:37:8f:1c:b5:bd:74:ce:29:ec:b1:c8:a8:31:
7f:a9:fb:e8:32:35:8b:fc:98:71:6a:7c:84:25:16:
ea:3d:61:bc:52:aa:35:6e:3a:52:78:5f:0b:5a:60:
c4:32:f8:41:7c:83:2b:d8:08:31:f1:38:bc:bf:fc:
67:ac:bc:9c:9b:18:a8:d6:48:c7:6f:0b:f9:51:9f:
ab:09:92:24:91:29:f4:a5:f2:09:52:fc:b8:ba:08:
2b:5a:79:91:b4:e0:09:b3:23:11:46:b9:48:2b:d2:
4f:de:54:e3:ed:3d:b6:dd:c5:bf:13:ab:53:fc:7d:
0e:d5:cc:ea:88:f0:76:9a:18:ca:88:c3:8e:bf:03:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:97:16:C4:F9:62:B8:13:0C:AE:6A:7B:91:1E:EB:A8:36:67:7B
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:0d:21:d0:c5:9f:09:95:d5:af:68:4f:a1:0a:45:e5:4d:
d3:e4:00:e8:24:ad:c0:fd:de:3a:1a:a1:36:4d:b6:fc:2c:b9:
c7:db:55:70:48:25:3b:b8:e0:4a:e0:44:65:2a:d8:69:2e:af:
46:93:6e:b5:3e:f8:f1:f8:ba:92:19:e5:68:a5:64:c4:8c:ef:
ca:fa:63:f0:83:7e:d4:56:07:08:14:81:f5:b9:22:8e:d1:2e:
a1:f7:7f:72:d2:a9:d0:1b:38:99:46:51:95:39:bf:22:e9:5a:
7a:e3:eb:63:d4:cd:31:50:10:92:40:74:14:c3:65:25:92:99:
05:8f:04:4a:6e:8d:09:21:9a:83:85:8f:6d:47:37:3c:e2:2d:
6f:cc:b3:66:9a:2c:a9:7b:9b:fd:4d:50:4a:18:fc:a9:d2:b1:
d4:ac:ff:95:74:69:91:5b:f6:8c:09:ff:19:70:4e:dd:f3:63:
aa:43:9e:f1:c0:e0:96:9d:48:08:4f:c3:a3:ea:f2:5e:d2:65:
7f:c3:e5:15:33:3e:38:8a:13:19:8b:30:05:cc:09:c3:30:54:
57:d2:8d:ac:ce:45:2e:1d:0a:18:8a:4b:58:87:38:c9:92:62:
c4:d3:22:64:75:00:b0:16:92:f0:19:e2:ad:af:d2:16:c8:99:
c5:20:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:44 2026 by rpki-client