Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File: Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier: GVy8UW31kDZuK45d2oyf786Ic+VLKAM1z3WRxBwHA0g=
Subject key identifier: A8:9F:6F:BA:6B:7F:9A:82:0A:DF:8A:32:FA:86:5A:BE:60:A4:EA:5B
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 019CAC46DC5587454C3FF2DCBD1B44568452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number: 0598
Signing time: Mon 02 Mar 2026 02:00:50 +0000
Manifest this update: Mon 02 Mar 2026 02:00:50 +0000
Manifest next update: Tue 03 Mar 2026 02:00:50 +0000
Files and hashes: 1: PTGFtop819nPl01gzng3ViiDuyQ.roa (hash: MsdxqZiMITKpL1yel8PLmuFTlbpZRDQiLbP60VZOUKg=)
2: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: jhNf9HtjXsck0HHRRkf5JcTCJ/IkP8qzFHLnSh6BXeQ=)
3: uOBfT9dJzAeP5L062tP2bPLjN00.roa (hash: YXcsdR0InWSwo1kicGcvoiEoVtpo1uOcvHTUXcUr4mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:dc:55:87:45:4c:3f:f2:dc:bd:1b:44:56:84:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Mar 2 02:00:50 2026 GMT
Not After : Mar 3 02:00:50 2026 GMT
Subject: CN=a89f6fba6b7f9a820adf8a32fa865abe60a4ea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:18:cf:a8:59:fb:f4:38:44:1e:80:de:cd:
01:63:df:83:c2:55:8d:07:2b:bc:b6:29:d6:a6:db:
d9:97:e2:69:1f:cb:39:b1:b0:d1:f1:26:21:78:e6:
3b:49:23:81:8f:96:24:43:44:23:40:90:ba:01:83:
50:ae:0a:7e:e3:59:ca:79:49:68:3c:ee:e5:5f:5f:
18:08:01:f0:4d:d7:40:11:84:6e:08:8e:8f:b4:19:
9b:ed:6c:22:58:28:f1:e1:67:03:77:91:c9:d8:0e:
34:4e:bb:d3:19:0f:f1:a0:b0:89:65:13:f5:7c:ce:
04:21:f1:4e:26:db:59:cd:df:b6:f8:cd:f7:a1:0d:
83:7d:54:06:0b:0c:57:2f:ce:39:20:ce:9b:bd:ad:
c1:69:10:f1:5e:76:7f:eb:49:6f:bb:7b:dc:b1:56:
67:e4:72:c2:e5:7c:32:5b:b0:92:ae:2d:78:44:81:
04:d8:02:24:ba:68:ae:b8:d9:e4:47:f3:16:dc:ee:
45:76:0e:1e:01:4e:f3:56:ae:79:51:bd:17:90:d0:
cb:8a:c1:89:26:7b:71:15:48:51:57:44:f4:3a:01:
6f:ae:53:d0:a8:5c:c2:d0:89:a6:3d:0f:29:26:0e:
65:53:9a:35:32:a3:23:98:65:2b:11:be:20:99:9c:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:6F:BA:6B:7F:9A:82:0A:DF:8A:32:FA:86:5A:BE:60:A4:EA:5B
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b3:77:2e:97:61:6b:4f:47:e4:ea:f2:18:03:2f:35:05:76:
f9:1b:62:2a:3d:23:b1:48:07:df:fd:1b:30:4c:12:6f:d4:7f:
a2:c2:9c:6e:e1:c3:9f:54:47:d6:5f:fd:c3:a2:d0:22:14:3f:
37:bb:7f:1d:6c:38:9c:93:06:3d:a1:ad:9f:59:95:90:6b:45:
d9:11:2a:90:ba:b3:62:c5:01:1e:7a:bb:ba:2e:13:6a:24:d4:
0c:29:c1:f9:07:7e:c9:3d:8e:63:1b:00:cb:9e:4e:87:2a:6a:
93:c0:14:96:92:a5:81:25:f8:86:61:94:dc:da:97:cb:8b:04:
53:1b:01:ab:44:75:02:0b:cf:24:93:7d:46:58:46:d1:4c:ef:
15:34:7c:48:e3:3f:a0:d4:0e:f4:58:eb:08:d3:95:52:aa:57:
77:18:b0:09:af:44:bf:f4:94:56:8b:e7:82:81:6e:3c:94:46:
f7:78:b0:70:c2:c5:8d:a4:ba:a8:a6:0c:84:1e:b2:b2:22:f9:
44:73:47:3d:26:15:b7:c9:cf:ed:c3:b3:f8:c6:f3:5f:37:30:
1c:9e:0c:b2:65:36:87:06:c8:86:43:ab:74:e1:f1:6a:84:9d:
a4:23:d3:d5:fc:37:d6:3e:a7:90:95:93:6a:ee:25:e2:62:08:
6c:c9:9b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:11 2026 by rpki-client