Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File: VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier: qKHEcUw7KD2jRlOpvlewQh8mtlyicvep4gryjgqa7ck=
Subject key identifier: 06:73:68:4B:DF:A2:95:73:AE:34:9A:56:51:BB:C6:1B:02:8E:02:7A
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer: /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial: 019CAA58D5810B004D7F82009BC8D39625FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number: 0C0A
Signing time: Sun 01 Mar 2026 17:01:14 +0000
Manifest this update: Sun 01 Mar 2026 17:01:14 +0000
Manifest next update: Mon 02 Mar 2026 17:01:14 +0000
Files and hashes: 1: 3ySJGpA2URRVVCP24hw2sqWQ61c.roa (hash: iyB6OAaeqvyq/nNbWakBdiv2nFypvgMvutumi0LF9Xk=)
2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: H2IQdsg7YWlNuJ3kgBBAG3AZdP/to7JUzOn7tHaTPbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d5:81:0b:00:4d:7f:82:00:9b:c8:d3:96:25:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Validity
Not Before: Mar 1 17:01:14 2026 GMT
Not After : Mar 2 17:01:14 2026 GMT
Subject: CN=0673684bdfa29573ae349a5651bbc61b028e027a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:a4:ad:57:5f:0b:1f:2e:fd:cb:a0:8c:33:
83:36:89:61:d3:01:55:83:43:ca:47:08:a6:e4:e2:
ad:b4:c7:39:6b:44:ff:55:cb:46:87:8b:0e:a9:b6:
9c:95:40:3c:81:ce:49:be:3b:79:25:ec:a9:27:0f:
1f:85:a0:c5:30:36:25:0b:29:e9:35:27:31:66:ba:
59:35:63:f8:56:59:f0:06:87:48:fb:21:ce:58:22:
7f:16:68:e9:2a:83:26:48:94:23:de:3e:55:95:39:
cd:ef:f6:1f:c3:31:3b:7e:3d:f7:e3:2b:d4:c4:7b:
22:fa:cf:91:3f:5c:0f:e2:54:02:39:c1:da:b2:27:
12:14:fd:6d:9d:0f:b3:33:83:c6:8b:0e:51:53:08:
40:17:02:30:68:a6:d6:36:b6:5a:37:e8:ce:42:0d:
c4:1a:f5:66:a5:b1:03:41:36:62:d4:41:8f:97:9d:
27:eb:5b:0b:51:d4:51:01:22:24:0d:fb:c3:6c:e6:
9a:b9:30:ba:ab:09:63:63:ee:04:5e:8b:dd:63:c8:
b5:f6:f7:90:db:ba:a3:36:17:8c:77:f5:bb:6a:16:
b7:7e:f4:81:33:79:c3:40:3c:0b:7d:04:d2:98:75:
bc:42:4e:34:39:5e:15:56:31:1b:9b:f9:2d:e2:a3:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:68:4B:DF:A2:95:73:AE:34:9A:56:51:BB:C6:1B:02:8E:02:7A
X509v3 Authority Key Identifier:
keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:26:fb:74:4e:eb:40:e1:a3:05:20:7f:05:06:11:55:87:f5:
e2:bb:6e:56:06:85:88:c7:35:29:ad:1c:d1:4b:54:02:65:db:
bc:0a:88:1a:b7:33:c2:1c:dc:aa:3d:6c:bd:2d:ea:db:27:7b:
87:c9:7b:bd:8a:ec:f1:1d:ca:3a:70:c6:11:a7:df:e7:c7:06:
a9:18:78:96:5e:b8:2e:df:d4:3f:53:d8:6d:ed:7c:c1:ea:9b:
fb:b2:fa:26:90:a0:e7:b8:db:19:84:98:27:d0:8d:1e:53:f6:
19:a1:54:e1:d8:91:cc:e2:43:88:f8:67:22:d7:e8:e8:70:f0:
ab:aa:94:22:90:50:00:9f:19:f5:ca:95:41:0a:02:5a:6d:29:
6f:c7:ec:8a:b1:3f:b1:ff:5c:10:95:f8:f7:a4:07:2d:0e:d3:
ce:f0:5f:1e:f1:b2:4c:cc:34:13:41:91:b9:bb:b0:7a:59:10:
ae:25:6a:e8:b5:8e:7e:96:0e:3d:d5:93:83:51:84:4f:7b:c3:
b3:78:5f:10:a3:65:9a:b6:45:17:8a:dd:87:91:4e:c3:b4:61:
67:b0:f4:97:30:06:a8:7e:4e:29:0f:ed:d3:96:82:00:14:71:
7f:b6:19:8e:d5:2f:c6:89:8e:c0:ff:43:6a:21:be:97:9a:f6:
7a:ef:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:46 2026 by rpki-client