
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File: VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier: LyK+J2OKf+0O56pXUpu8oK6Xx2ZbBqWIpM+IEgU0V6I=
Subject key identifier: 1D:EF:0E:32:4D:8F:DD:27:0A:FF:61:EE:D3:48:AB:A2:FA:2A:1C:A9
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer: /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial: 019D97E26E808FDC2CA250F3FF38AE5D63D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number: 0C85
Signing time: Thu 16 Apr 2026 20:01:32 +0000
Manifest this update: Thu 16 Apr 2026 20:01:32 +0000
Manifest next update: Fri 17 Apr 2026 20:01:32 +0000
Files and hashes: 1: 3ySJGpA2URRVVCP24hw2sqWQ61c.roa (hash: iyB6OAaeqvyq/nNbWakBdiv2nFypvgMvutumi0LF9Xk=)
2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: +1h+PgH3usJ9dbgRFRrvTRmMfG0p2vDr0j1ezBYHbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:6e:80:8f:dc:2c:a2:50:f3:ff:38:ae:5d:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Validity
Not Before: Apr 16 20:01:32 2026 GMT
Not After : Apr 17 20:01:32 2026 GMT
Subject: CN=1def0e324d8fdd270aff61eed348aba2fa2a1ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:32:ca:e3:24:62:91:34:4b:a1:42:91:3a:
de:cc:f3:03:6c:c2:8e:40:1f:96:6c:cf:ab:02:2e:
e3:42:ee:5f:82:0e:45:0e:c9:f8:d2:e0:59:3e:22:
d9:83:15:0d:32:3f:25:81:10:af:77:49:50:df:15:
a3:fe:f6:8c:98:49:44:b2:14:c8:82:7e:19:ce:17:
a0:54:71:8e:9c:36:82:5a:ae:00:1b:d8:b1:64:7a:
ca:ad:c2:45:8c:18:0e:77:3c:78:63:9a:8f:3f:ce:
45:ee:22:9d:7c:c4:11:ac:51:94:08:b5:10:85:a3:
40:0f:96:d8:11:53:9b:17:bc:f2:80:4d:8b:3f:60:
88:07:bc:8f:ac:4f:bc:a1:92:bc:0c:a6:51:68:33:
af:e8:cb:f7:79:bb:18:e5:aa:ee:25:59:c3:45:5d:
ca:cb:7e:1c:33:67:71:f2:90:3b:a9:bf:62:6b:ad:
8b:08:24:75:81:02:bd:4f:d7:d6:68:b4:4a:2e:bf:
44:3a:ba:1f:51:8a:ce:fa:4b:e1:d8:4d:12:af:45:
10:ed:fd:77:b1:63:8c:1c:51:b1:87:18:9a:e3:d7:
d8:8c:6c:83:99:70:73:ea:9a:83:08:03:67:83:7b:
84:fb:41:fb:41:c3:51:c7:c8:4d:63:7f:08:df:95:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:0E:32:4D:8F:DD:27:0A:FF:61:EE:D3:48:AB:A2:FA:2A:1C:A9
X509v3 Authority Key Identifier:
keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:34:40:0a:9f:f0:d1:3f:bf:12:1b:bc:30:af:cf:d2:fb:
ca:eb:3f:9f:ab:b5:5b:b3:ea:ac:b2:8a:5e:f5:6b:1c:aa:86:
ae:c9:9f:c2:ff:2a:17:14:6b:b5:19:13:cd:0c:48:c8:ac:e5:
bf:05:e2:50:0c:f1:91:b6:b8:5e:b3:4d:cd:c4:a1:ce:34:04:
af:a6:94:93:47:ed:06:0c:8a:7f:49:ed:27:a3:a7:f4:69:14:
93:cf:43:08:f0:26:a3:88:80:d4:82:8b:ae:2c:6a:fb:fe:da:
c4:28:3f:f6:87:fa:81:63:a5:df:47:fc:ec:3b:3f:7b:ac:57:
dd:7c:94:00:8b:3d:38:b2:bb:e8:e3:8b:11:4e:7b:0a:f2:dd:
ad:e7:3a:41:e5:ec:db:2d:78:4a:a3:3b:4a:48:52:a5:d0:f4:
d3:01:2e:d0:61:3e:7b:ec:45:58:68:46:60:6b:20:0b:3e:45:
43:68:e7:88:3e:f3:e1:07:74:45:57:3e:bc:7a:b1:dd:8b:fe:
4c:7a:63:c9:2b:98:2f:c4:14:f0:8e:53:f3:2a:6a:96:f7:f7:
7a:cc:cb:59:3a:2a:d6:b6:c7:2e:4e:e1:11:73:d4:f8:1f:5d:
4e:e4:00:04:60:ed:5b:f2:1c:e6:a4:f9:75:35:d2:45:8f:4c:
9d:b3:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:55 2026 by rpki-client