Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: XW1qu3egOBOJXsqk9IBx49cgYKrg8F0je4cWiczgsN0=
Subject key identifier: 89:EA:D6:72:FA:81:EB:0C:35:55:83:F2:1E:C0:40:58:D4:EF:C5:BB
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019ED53E41B7CF1643DA4937657640971216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 1290
Signing time: Wed 17 Jun 2026 11:01:27 +0000
Manifest this update: Wed 17 Jun 2026 11:01:27 +0000
Manifest next update: Thu 18 Jun 2026 11:01:27 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: q0xpxRu0A7Jvu9ITvoS2zVdZWyVt0au/dQcA1pX8ZMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:3e:41:b7:cf:16:43:da:49:37:65:76:40:97:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Jun 17 11:01:27 2026 GMT
Not After : Jun 18 11:01:27 2026 GMT
Subject: CN=89ead672fa81eb0c355583f21ec04058d4efc5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:4a:7a:5c:0d:22:81:8a:9d:dc:1a:45:28:
28:6e:91:50:92:53:2a:a4:d0:7a:f7:c2:57:4f:33:
c0:94:7e:fb:47:37:2c:6c:d4:24:29:85:50:b1:30:
8b:d0:6a:36:d9:c9:ae:7f:83:04:e1:6a:92:42:8c:
69:60:d6:90:7a:2a:3a:62:f3:b9:12:47:94:f4:dd:
0d:76:f7:2e:7a:8a:99:31:60:e8:3c:d4:42:f6:ce:
8c:92:73:06:73:58:32:d8:9e:54:50:34:df:4f:f7:
d0:79:ce:6f:1f:dd:61:07:68:74:0c:59:80:65:72:
7d:aa:91:2c:3c:a2:53:c6:0a:a8:22:55:a3:d6:f5:
19:70:95:d1:32:91:49:37:d1:f9:6d:f0:10:47:a7:
e5:89:2b:65:1a:54:21:fc:35:a8:78:a4:64:dd:fd:
02:fb:44:2a:ed:40:60:66:a4:35:15:29:fb:73:c8:
08:f8:08:a3:bb:24:29:dc:b3:af:44:3f:d6:7d:46:
01:f5:7f:6b:a6:7f:f0:1c:e0:0e:e7:d1:96:7f:f4:
d6:b3:4c:45:2a:22:81:a9:83:35:dc:2f:bc:a2:1d:
10:92:84:c8:b8:c0:c7:b6:2a:8f:52:69:46:d7:1c:
3f:29:f4:71:1a:f2:59:de:8f:99:28:92:d3:57:a6:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:D6:72:FA:81:EB:0C:35:55:83:F2:1E:C0:40:58:D4:EF:C5:BB
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:37:8c:ff:43:71:60:a6:e7:36:ed:0f:d0:22:c5:68:25:21:
50:3a:c5:f7:78:ff:c6:8e:be:0d:2b:fe:2a:22:0e:39:19:6c:
82:f5:68:3d:46:fa:49:8d:e4:d3:56:8e:28:53:3f:99:18:7f:
c1:85:be:22:44:1a:a3:d7:04:88:94:9d:9f:74:c9:89:18:9b:
c6:6b:04:ac:99:e5:33:35:ca:46:04:fa:d3:f7:bc:6d:64:f1:
b2:99:fc:38:02:40:ce:11:96:ba:e2:06:78:93:e4:7a:ee:c8:
4d:48:05:a1:aa:6d:36:7b:f1:8c:58:fa:79:96:41:44:ab:56:
99:d9:45:cd:e0:e6:ee:3c:7c:99:82:11:ad:f5:42:24:23:a2:
3f:28:ec:e8:44:a2:d0:e4:00:fe:af:57:0b:8f:46:55:f5:29:
e2:fa:7a:37:2b:b2:56:d3:72:6e:fa:c7:d2:f7:2e:44:86:e5:
eb:96:fb:0b:8c:9d:b6:a4:aa:1b:c7:bd:1c:89:66:3e:d8:c2:
ba:2b:a2:48:5e:82:2c:55:52:cf:58:28:3a:15:d0:ae:91:7b:
8a:51:e0:7f:95:ed:de:7c:16:c7:af:ab:07:93:b4:6e:da:ad:
e0:a4:d1:6b:00:aa:8f:b1:ae:68:2f:0b:9d:a0:6c:21:91:f2:
f4:3e:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:02 2026 by rpki-client