Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: FtFfoq+WRtlvu5VHgDTmiFOI8d6EPOZe4NOSopsx2t0=
Subject key identifier: C3:92:AF:E5:D8:E9:91:1A:0E:52:73:FA:20:97:73:50:26:8D:F5:0A
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 019CAD90B16A7360D0F11C5D8065AC67ADDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0FFC
Signing time: Mon 02 Mar 2026 08:01:06 +0000
Manifest this update: Mon 02 Mar 2026 08:01:06 +0000
Manifest next update: Tue 03 Mar 2026 08:01:06 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: XdtAbXAMMm387HbTvtBJxD9JmDOTgzd1cv7itanxS/A=)
2: j-BlH6UGFV5kJDZBH1ZzuR8E1fY.roa (hash: rc09LpGqWbk6PYA80jVQRNeDW2Q3wDT/cj8KXISR7eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:b1:6a:73:60:d0:f1:1c:5d:80:65:ac:67:ad:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Mar 2 08:01:06 2026 GMT
Not After : Mar 3 08:01:06 2026 GMT
Subject: CN=c392afe5d8e9911a0e5273fa20977350268df50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:10:07:d8:8b:7d:96:19:0f:4d:19:b8:bb:
9e:2a:a8:6c:99:a6:e8:c0:02:59:97:6c:d3:eb:82:
36:09:2d:71:48:40:e7:7d:79:90:72:a0:d9:37:cb:
d0:47:df:31:52:a7:12:65:25:5d:92:60:f8:d2:e7:
bc:31:0f:fb:c3:11:0c:c6:56:50:d0:26:a7:b3:78:
5f:ca:c5:54:77:8d:80:74:9e:33:8b:8c:73:3f:c3:
5c:45:50:dd:95:48:21:7e:67:c4:a8:46:64:93:5d:
e2:b1:0e:1d:ad:27:19:4a:db:46:ba:90:59:d9:d0:
f4:ea:4a:a3:f7:be:1f:78:03:a0:fc:30:8e:0f:d0:
5f:f3:fd:f2:b9:42:cf:a2:12:17:5a:67:71:d9:9d:
78:92:8d:1c:6d:a8:fb:3b:a8:52:78:be:6f:39:79:
7f:95:55:41:d6:60:1f:99:51:c0:24:42:fe:46:e5:
7d:69:3c:60:2b:a4:bd:3a:0e:d1:87:c9:fd:7a:05:
67:ef:c4:a7:bf:1e:7c:af:05:8e:a8:04:8b:ff:00:
99:59:2c:8d:7b:be:29:d2:d6:92:c0:7e:9e:d1:e2:
dc:13:2b:9c:1d:e8:de:ef:3d:c6:66:12:56:ec:fc:
2e:72:76:08:f5:4d:cd:ad:ce:b4:32:2d:04:6f:8d:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:AF:E5:D8:E9:91:1A:0E:52:73:FA:20:97:73:50:26:8D:F5:0A
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1a:de:37:2a:c2:a4:03:84:3a:02:53:da:fb:c7:b3:f1:af:
71:7a:67:2f:37:0b:f9:1c:f8:44:67:70:a3:ae:b3:f4:f6:ec:
44:0d:6f:f3:f8:b5:89:df:48:25:07:57:28:ce:7d:7d:fc:e2:
d0:0d:54:52:ee:d7:f0:0b:a2:0f:20:a5:7d:e1:05:e5:55:01:
99:22:17:eb:04:07:c1:ad:63:13:0c:1f:ec:5e:7e:54:b7:27:
1e:8b:33:4a:10:ab:98:3d:94:a1:0a:98:7e:bd:87:08:a6:79:
96:e2:c0:4e:c8:79:01:5d:be:7f:7f:11:5d:de:49:0d:5e:6c:
90:8e:28:db:60:ba:86:8a:e6:73:43:2f:bc:d4:00:53:9b:22:
54:70:80:23:1a:bd:aa:c8:cd:36:c6:35:c0:56:aa:5f:c7:e1:
03:6c:ad:3a:73:eb:38:c9:ea:0a:04:8f:3c:37:cc:01:59:ae:
3c:90:2b:f3:3e:8a:09:8f:b5:64:f9:18:73:0a:20:3c:91:4d:
1a:e2:7e:52:45:a6:33:48:2a:50:d6:a8:e4:41:5a:f3:c4:c9:
45:0a:66:33:76:6b:bb:3c:9e:27:a7:94:43:2e:a8:7c:d3:6b:
67:51:6f:ad:0d:fd:22:a3:c3:61:0f:0e:91:61:3e:cd:b4:e8:
6c:41:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:56 2026 by rpki-client