Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: Ux1+ROK7YqIIfD+qEr4Fk0QiqvyIKfYnt9vc9jHOxhc=
Subject key identifier: 2F:ED:CC:26:3A:90:67:A1:7D:E2:20:33:1B:54:2F:3C:21:10:42:C8
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019CABA1CA6B2C70FEB97B0DD668B6E4C56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 06FF
Signing time: Sun 01 Mar 2026 23:00:32 +0000
Manifest this update: Sun 01 Mar 2026 23:00:32 +0000
Manifest next update: Mon 02 Mar 2026 23:00:32 +0000
Files and hashes: 1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: eksHnqfWTRtOTqgzHh+5qet3upYws+8tWoAzqIjVa/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ca:6b:2c:70:fe:b9:7b:0d:d6:68:b6:e4:c5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Mar 1 23:00:32 2026 GMT
Not After : Mar 2 23:00:32 2026 GMT
Subject: CN=2fedcc263a9067a17de220331b542f3c211042c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:09:a8:67:90:5e:bd:95:51:d1:0c:c7:60:
e8:4e:79:1b:f5:3d:97:5e:30:f6:e2:36:cd:58:c6:
4d:12:9c:d5:90:ab:b1:79:74:c5:0c:d9:b1:1a:2b:
9f:e6:e0:b4:4e:39:0a:f3:4e:01:18:47:16:26:e9:
1c:bc:d3:4a:cc:25:13:e5:01:55:25:42:69:2e:35:
1e:b1:08:1c:67:5a:9a:3a:d9:70:8d:18:80:5b:67:
f9:08:c1:08:4f:13:00:95:02:9d:d8:f5:8d:ae:c4:
9a:da:15:30:d1:8c:56:29:1f:05:cc:7c:d2:f0:4c:
cd:5d:ca:91:f1:2b:da:64:64:b4:93:51:5a:04:d8:
9b:d3:f8:38:c4:ce:7e:10:a7:1c:3a:84:c5:4d:a9:
2e:65:de:52:50:c2:15:49:84:68:f9:13:b7:45:34:
0a:f1:a7:42:4f:15:b6:05:3a:99:32:56:87:74:25:
5e:e6:a6:1f:a2:61:09:ef:f8:60:53:d7:82:e7:c5:
36:59:05:5c:d3:58:4e:86:ec:9f:6f:e2:a0:9f:32:
e2:b1:ec:aa:3c:77:35:98:f5:2c:f8:e4:a0:bf:0f:
ad:9a:d8:1e:2a:2b:7e:a7:70:5d:c0:90:fd:52:1c:
cc:d7:f5:fe:0a:13:5d:73:5c:51:db:e3:b5:75:d6:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:ED:CC:26:3A:90:67:A1:7D:E2:20:33:1B:54:2F:3C:21:10:42:C8
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:37:91:46:8b:f0:8d:8a:f3:65:36:cd:af:4b:d4:4d:ef:a6:
eb:21:14:2a:9d:cc:6c:aa:76:20:63:0f:0c:11:4a:25:ad:f2:
56:66:a8:1c:48:4e:c6:72:58:0a:5f:19:11:e1:ae:ac:a2:15:
5f:4a:82:94:f5:2e:40:ca:cb:9d:71:37:fe:3f:7b:eb:b1:4f:
01:8c:96:cb:49:46:ed:63:4e:09:c5:25:7c:0f:d7:97:72:86:
3c:5e:f9:bd:14:d2:51:25:51:48:29:9b:23:5b:af:2e:ad:14:
19:fb:f3:70:ad:ae:96:9c:20:c8:41:5f:b5:4d:d2:c2:21:00:
dc:0e:b9:c6:22:e9:eb:aa:e8:6c:ca:2c:59:9f:78:12:56:7c:
38:03:29:a3:39:24:3e:81:9f:c7:a9:ee:bb:05:78:fc:11:7e:
ae:dd:97:57:3d:ca:2e:21:99:8b:b0:44:95:b0:37:c0:2a:b9:
6c:a6:9e:81:5c:a0:23:c5:79:1e:9b:c3:48:76:65:67:cb:04:
a5:67:1e:f4:b5:2d:a3:41:d7:f1:9a:5f:f2:26:06:19:2c:a8:
00:0a:3b:00:25:61:5f:92:6a:6f:36:47:f6:9a:46:7e:74:7d:
22:26:97:8e:98:04:f0:a8:3a:48:c5:7a:08:e2:05:27:f2:6d:
e7:d6:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:56 2026 by rpki-client