Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier: CEDxR+vCE4I3ccPRYaTgmdMwHvcBXjN/gkiv6YjRJrs=
Subject key identifier: F8:AD:59:D5:FF:64:32:B4:F7:3B:E7:94:35:3C:D7:D3:C6:23:1C:17
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 019CAAC64CEF0391567529B2C34303E93949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number: 0687
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: Eu41_P7LziP7tbN3y79d5Zld-yA.roa (hash: AfrnyrK9VXdcG7fWfl7gD7MMFiGqvdrIsV969hWJlbc=)
2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: bx5cxT89WPg9rxypTPbD/Im20piaXJNrrZBbdzG0elg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4c:ef:03:91:56:75:29:b2:c3:43:03:e9:39:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=f8ad59d5ff6432b4f73be794353cd7d3c6231c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:60:f6:27:c5:79:ef:f6:b4:cc:3f:da:21:
e7:7d:0c:c3:b2:df:ab:71:9c:36:d9:16:53:f9:69:
f1:0f:30:74:f9:c9:2d:cf:f7:99:83:d0:9b:e7:ca:
9a:34:67:41:0c:a9:ea:7f:51:02:d0:9c:4d:33:45:
40:0e:4a:a4:54:f3:c0:78:6b:a8:11:8e:77:34:57:
56:1f:51:cd:15:ed:c5:c3:c3:8e:3d:df:b2:15:72:
da:1a:54:18:63:01:65:02:a8:94:22:74:c7:f8:ff:
e9:60:5e:62:b6:74:1b:5c:b8:04:f5:8c:26:4a:bc:
cf:9d:89:6a:a9:bd:2d:e4:50:e6:97:91:4e:37:ac:
95:4c:7a:a3:7f:f9:70:ef:0b:9d:13:16:44:26:be:
59:38:a3:17:e2:92:45:4e:e0:fd:c1:52:ba:ac:99:
11:f1:55:69:a0:bf:27:4c:4d:cb:67:ef:87:2a:59:
79:03:1c:00:ea:de:b9:89:bc:54:4b:77:b9:a5:b8:
05:78:ca:de:98:d7:70:ab:41:24:66:17:6f:2d:3f:
61:85:73:c4:5c:fd:13:74:3b:f7:7e:ac:c1:08:24:
ed:dc:08:0d:c5:22:86:df:96:7c:dd:ee:8a:34:d3:
26:7a:6c:82:3d:64:d9:ad:1c:19:3f:11:19:e7:8d:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:59:D5:FF:64:32:B4:F7:3B:E7:94:35:3C:D7:D3:C6:23:1C:17
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2e:be:f0:d8:f5:20:bb:b2:ad:75:fa:6f:a2:ef:20:52:76:
ae:d1:fd:2a:ca:48:80:4d:1d:ef:d0:70:80:09:50:76:b7:c8:
b6:dc:cc:63:07:dd:0c:51:94:58:e2:95:97:f1:ff:03:4a:93:
d0:ea:4b:77:eb:95:87:8d:eb:82:4e:9a:cc:29:31:7e:f0:71:
c5:94:3d:8b:c9:00:7a:7e:34:77:99:5f:e5:b6:08:57:f7:3b:
22:91:86:4b:87:d1:67:a8:34:9d:5f:d1:a0:86:e5:af:b5:3f:
ca:3f:d3:d3:19:ca:e0:de:9c:e8:0f:81:fa:92:78:de:4c:be:
14:87:da:e8:bb:2d:e4:1c:d5:c5:84:d9:8c:a1:74:46:68:bf:
e7:fd:2a:fc:c5:0d:14:6e:fd:a5:f8:1d:73:7b:0b:8b:a9:8b:
2b:54:e8:5a:be:09:be:f8:71:4f:ba:20:fb:0c:10:4d:40:5f:
a7:38:dd:d1:f6:fb:5c:46:10:50:c2:d5:f5:fd:a8:2b:ca:b4:
85:91:e6:03:3c:79:dc:fe:48:33:43:b7:77:40:7e:62:f4:0b:
5b:3c:ff:ba:92:13:90:60:18:75:d0:94:9d:20:28:6f:1c:c9:
b9:e2:c0:c9:04:0d:20:df:b3:32:83:11:77:b2:50:ba:61:2a:
ae:3a:b4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:40 2026 by rpki-client