Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier: nnenq7LfQ+9U8/Bp2rm5Kj//5YvvWAUsdY7ldLcEu8I=
Subject key identifier: 84:42:90:3E:A7:E3:04:D4:BE:50:CE:B5:AB:91:9D:77:AC:BE:09:BE
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial: 01A0DBA9D3C709A81D23BE060301F23AEFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number: 0607
Signing time: Sat 26 Sep 2026 03:02:14 +0000
Manifest this update: Sat 26 Sep 2026 03:02:14 +0000
Manifest next update: Sun 27 Sep 2026 03:02:14 +0000
Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: dnzPLhYYGvhuDCIn6hxAxla967rSKf0z0Y6FHabR2tU=)
2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:d3:c7:09:a8:1d:23:be:06:03:01:f2:3a:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
Validity
Not Before: Sep 26 03:02:14 2026 GMT
Not After : Sep 27 03:02:14 2026 GMT
Subject: CN=8442903ea7e304d4be50ceb5ab919d77acbe09be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:d9:00:0e:89:fd:c5:62:1c:c4:f9:1d:c7:
0b:aa:a3:d4:50:66:62:70:9f:2e:72:42:97:6b:d0:
d7:66:eb:7e:da:2e:84:b7:5d:fc:fa:51:39:2e:d7:
94:16:de:8d:4f:7b:d2:f7:1c:bc:cf:4b:e3:b5:60:
80:a2:8d:db:9a:4c:e4:e2:3b:1b:87:6b:5e:2c:8b:
74:40:0a:21:39:2c:84:3e:a0:aa:08:27:68:5f:0b:
41:4f:a9:f9:9a:52:0c:b1:6f:a1:15:39:94:ab:e2:
74:65:ce:ce:e6:9e:d7:c3:b6:63:17:5b:68:9c:2d:
e0:ee:d1:2b:9d:c4:2c:92:49:33:2b:69:cf:44:d4:
1d:d8:9c:8b:54:d6:67:24:7c:0d:90:c0:3c:61:d8:
61:dd:93:78:92:7a:4f:e3:73:75:b6:47:cf:af:d4:
42:e7:7d:4d:b0:61:82:33:b6:89:4b:bb:02:d4:09:
d8:87:9f:02:d4:08:de:1f:b7:fe:8f:21:70:b0:21:
59:2a:94:ee:c6:4e:5d:71:d8:52:0c:fa:c7:ac:c9:
dc:38:f7:ee:8f:87:17:2c:05:af:f1:33:9b:bd:4d:
b2:3c:36:a8:c7:24:20:8b:df:88:17:c5:0e:6c:62:
87:ee:6e:49:1e:52:48:ce:0f:a1:b3:86:c0:f3:f5:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:90:3E:A7:E3:04:D4:BE:50:CE:B5:AB:91:9D:77:AC:BE:09:BE
X509v3 Authority Key Identifier:
keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f8:1d:f0:fa:a4:a2:00:11:c6:be:a7:27:f1:8a:ac:e2:92:
7d:61:73:55:ee:3c:a9:d0:dd:60:52:a2:96:b9:99:aa:ab:b5:
6e:be:bb:cb:a5:8c:79:d9:ef:86:de:2d:f9:9b:09:ab:b3:ea:
ff:ee:25:ab:2b:53:9a:83:63:83:a3:55:5f:f4:06:ef:00:55:
ba:28:5d:97:c0:8b:e2:d5:6e:5e:86:cf:9d:2c:c1:46:a9:29:
11:e9:58:d1:af:f0:77:74:a9:a7:37:e2:35:25:c0:f1:2e:a5:
ec:35:af:f8:c3:9b:cc:b2:4a:11:c6:24:fe:4d:67:3b:ca:b3:
b1:80:25:2a:b9:c7:f0:1c:0e:21:57:ff:a8:03:8e:4e:1f:b4:
9f:2d:1e:44:c5:ed:dd:36:76:40:2f:92:a1:57:e3:18:7d:86:
a6:59:19:27:e0:fa:60:76:2a:d4:44:e6:70:48:59:f8:47:ed:
8a:d8:7c:24:e1:7e:4f:47:8e:f4:f1:97:ed:d7:e1:e0:a8:20:
8c:a7:79:c5:d4:e1:03:3a:16:34:54:f7:fe:9a:1a:f3:f9:60:
ff:7c:a6:8f:9c:07:ea:cb:a6:2a:e9:10:a2:00:3d:64:6e:a7:
d3:49:06:ef:28:da:38:ee:c1:4d:50:59:be:3a:0b:61:b3:f0:
08:2d:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:49:16 2026 by rpki-client