Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier: E1uxpwyZU3gZIHuMAfXuRc9n3Lo2LfgX6zIDn/mi/uM=
Subject key identifier: 6C:B2:92:15:6A:52:8F:55:B1:72:01:FA:8F:CA:CB:39:E2:4D:0F:E3
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial: 019CAAC71812935AA220B2C5E53816B7F51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number: 1553
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: EG5G/OZylrbxCQ7GmwcdBV8lX65xBDAtcoNZJ9yxg0o=)
2: a476xuuymM4DWMU4CoIgLsWXR7w.roa (hash: b+lJy211nvU2PKiMrKNYXzy/mvhM9oQWUJhcUzYhcH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:18:12:93:5a:a2:20:b2:c5:e5:38:16:b7:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=6cb292156a528f55b17201fa8fcacb39e24d0fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:f5:26:46:80:7f:92:63:8c:d3:cb:39:a7:
cd:01:ff:d6:43:79:67:f2:38:3e:6b:48:d0:41:79:
98:1e:fc:89:d9:d1:90:a9:11:97:78:b2:96:f4:9e:
22:ad:1d:9c:ad:01:85:8c:0a:be:f8:eb:1a:f2:c4:
8c:0a:32:47:67:4c:58:d7:aa:e4:84:51:a3:d4:8b:
b6:64:e5:92:4b:3d:77:d7:43:b2:d4:5a:4d:b7:7d:
aa:24:5c:c9:2a:3c:d1:d8:0f:8f:ac:9b:16:d1:3c:
46:f4:46:b4:68:5c:aa:e0:48:f0:af:7d:be:82:12:
3a:89:3c:9b:f9:c8:3c:d5:98:fe:f0:40:31:ed:8c:
61:12:68:d9:ef:ef:9a:0e:26:a5:6c:a7:9d:06:90:
12:ad:82:fd:e7:50:b0:29:5c:59:04:54:37:12:f5:
5c:aa:0f:4a:c4:e3:b0:9a:ad:b5:60:b2:cc:73:96:
4f:11:38:c3:08:99:8a:54:1b:72:4b:2e:66:a8:25:
5a:d0:34:ab:83:57:09:5a:b2:56:3f:49:ff:ad:2b:
a5:76:2b:30:59:9f:81:43:a0:2a:a4:70:da:38:e4:
53:e1:45:bd:33:cd:a2:ee:d9:84:6c:18:81:c0:08:
c2:5e:eb:bf:e3:4a:a7:41:57:30:26:a8:95:53:55:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B2:92:15:6A:52:8F:55:B1:72:01:FA:8F:CA:CB:39:E2:4D:0F:E3
X509v3 Authority Key Identifier:
keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2e:86:1e:54:69:ee:fe:44:40:f8:2f:18:42:9a:be:63:6a:
e0:30:bc:b2:7f:bb:ca:e0:a2:d4:56:09:69:2a:b2:c8:75:84:
63:89:95:66:8e:8e:1f:94:20:8b:9c:2e:83:8e:e3:33:69:18:
29:31:6f:21:fd:25:97:22:61:76:3d:f5:11:75:83:94:97:42:
73:c8:41:a7:f2:ae:85:d9:45:df:26:91:6b:e4:1a:3a:fd:a4:
c6:50:7a:be:db:ee:99:8a:b5:0d:cd:ed:8f:64:ef:5b:03:e4:
a6:e8:c1:6a:3c:af:f0:b2:30:01:2d:e5:83:7a:23:98:79:fb:
94:7b:22:22:2e:57:ce:83:0b:08:8a:e6:b1:d6:e7:ff:0a:de:
39:11:f1:c4:ae:d1:bb:28:87:a4:ce:d3:65:1f:41:2c:71:ce:
af:d6:82:e2:56:8d:59:6b:40:96:2e:0d:a5:b2:e0:22:a1:ae:
01:9f:91:41:2c:f0:0b:22:cf:c2:da:d4:bc:a8:b9:4b:00:79:
9a:3d:59:a5:cf:65:3d:d5:20:e8:32:7e:08:e2:f0:2b:b7:b4:
32:80:a0:c4:fd:31:ec:ea:ff:f8:df:20:0b:0b:80:89:fd:e9:
7b:46:71:e0:2d:58:02:72:3d:23:81:d8:2c:42:ca:ac:5f:aa:
65:52:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:41 2026 by rpki-client