Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: AqfQzKDu0YEOnTfn3H7gvKbCJ7rmKyh2VHp70SUKNEI=
Subject key identifier: EF:BD:0D:29:CA:FC:46:64:98:68:BB:B8:49:F3:F2:6A:BC:22:9A:DF
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 019FAC76E3FFB9E7B6741F878D873521D4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 056A
Signing time: Wed 29 Jul 2026 06:01:40 +0000
Manifest this update: Wed 29 Jul 2026 06:01:40 +0000
Manifest next update: Thu 30 Jul 2026 06:01:40 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: 5meCxfWKy14aQdKuXR970XKfoO/ZnEfJ4g5twTGIyTs=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:e3:ff:b9:e7:b6:74:1f:87:8d:87:35:21:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Jul 29 06:01:40 2026 GMT
Not After : Jul 30 06:01:40 2026 GMT
Subject: CN=efbd0d29cafc46649868bbb849f3f26abc229adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:3f:2a:05:5a:14:9d:02:c8:de:c1:1e:a0:
38:da:12:76:02:bf:3f:35:fb:c6:16:89:a8:1d:7e:
47:1a:84:af:5d:2d:d4:71:ca:ac:a4:46:21:3e:ec:
77:d1:45:32:ef:20:e6:a0:7f:62:a7:e8:12:3a:b7:
68:d1:b1:be:36:88:23:6b:d9:0b:b3:72:aa:66:21:
21:74:24:f6:6d:87:61:3c:6f:aa:cb:76:b8:e0:18:
a0:c8:42:cd:38:48:89:e1:3a:61:0c:60:d7:ea:71:
1f:f4:59:96:80:f0:84:fa:11:53:4c:7a:ba:a5:86:
1e:94:d1:99:0c:e2:10:75:9d:3b:c1:a4:ab:ce:1b:
28:44:e7:f3:6f:16:1f:91:1c:ab:dd:47:70:15:c1:
66:a3:77:74:b7:88:9f:0d:39:ca:3d:aa:01:27:76:
1b:85:89:e0:34:de:22:96:b3:bf:16:d7:3f:c7:7b:
d1:08:ba:b4:2c:d3:da:d8:57:b8:e5:a7:97:0a:84:
28:b8:08:43:fd:d7:18:65:48:0a:5f:12:10:bc:f0:
bb:e9:9a:fd:20:b0:f2:1c:26:65:b5:76:cd:c7:b5:
c9:04:60:f7:50:1e:42:ad:79:91:22:ef:d1:7b:1a:
13:7e:72:4f:5d:4e:51:fc:ac:b1:49:d2:90:69:58:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BD:0D:29:CA:FC:46:64:98:68:BB:B8:49:F3:F2:6A:BC:22:9A:DF
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:30:3c:57:e7:53:46:b8:05:56:5a:d5:29:f9:0a:d5:c4:fd:
ca:65:42:60:36:dd:3a:08:9d:ec:ca:c6:27:17:14:03:e4:6f:
7e:86:f6:ab:a2:8c:5e:5d:33:3d:ec:3a:9c:4e:b1:6d:17:ee:
81:c0:d0:bc:7e:ff:23:fc:1c:b2:5c:a7:20:d6:d5:f4:fd:84:
79:3c:55:49:44:f8:1a:f1:4a:91:73:5b:06:bf:06:d6:7e:9e:
b9:b8:8c:9c:bc:85:30:0f:4a:c2:8f:e6:03:bc:a3:f3:66:0b:
ea:bb:bc:d8:2b:81:ae:53:4a:b1:64:f0:1b:e7:ae:a8:9b:e0:
74:e8:14:a8:06:e0:8d:69:f1:a1:30:ab:55:ed:a5:27:84:50:
ac:b0:28:4a:5f:53:85:8f:b1:83:22:91:f9:fd:da:8d:b0:ea:
f3:d0:b6:1d:e9:41:1a:22:33:2b:28:52:1b:e1:ce:3d:37:bd:
8b:5b:fc:7e:03:02:02:c6:f9:5c:47:e9:58:42:dc:55:c7:72:
97:5d:0b:93:58:85:30:80:e7:7d:ca:7d:1a:da:c7:72:0f:7f:
a0:d9:3c:cf:a1:30:ea:5e:94:50:94:55:8d:a2:d3:38:56:e1:
13:fc:22:7b:bb:d6:ff:af:7b:2c:df:2f:ea:18:ac:92:8b:61:
ea:e4:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:38 2026 by rpki-client