Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: f7tU135Pcg5nZDbT9QPdfYBdr0H+VYBjE+zVx1yC0jY=
Subject key identifier: 76:D9:F2:96:A1:95:85:95:13:88:C4:70:A2:4D:D3:98:C2:92:C0:D1
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019CAD901EBE32D965764DF80D23BF0C2D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 0700
Signing time: Mon 02 Mar 2026 08:00:29 +0000
Manifest this update: Mon 02 Mar 2026 08:00:29 +0000
Manifest next update: Tue 03 Mar 2026 08:00:29 +0000
Files and hashes: 1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: a6mBMz5yxNt1JEqby+/SPOuVuqBTaUZ4ljcPkzWwkxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:1e:be:32:d9:65:76:4d:f8:0d:23:bf:0c:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Mar 2 08:00:29 2026 GMT
Not After : Mar 3 08:00:29 2026 GMT
Subject: CN=76d9f296a19585951388c470a24dd398c292c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a5:e9:0f:b2:ca:e9:a9:87:50:67:4c:cb:41:
14:69:e4:6e:38:ce:a3:be:04:7f:d3:2b:2c:d2:0e:
b3:b9:b2:4f:87:1c:52:79:7b:01:2c:d1:95:4d:40:
41:87:41:20:22:c8:75:11:c8:db:6c:22:d4:47:76:
fe:fb:a3:64:c2:19:ad:f9:32:b3:e4:3a:d5:a7:3b:
78:23:59:0a:21:f8:7c:ec:d5:e5:ae:18:5e:06:0e:
e0:0f:aa:f6:ce:4f:d5:89:78:66:c2:32:6a:b5:2f:
10:a5:e3:bb:ef:b5:dd:72:0a:f8:2b:af:86:d1:26:
7a:31:d4:92:c7:90:45:a5:2a:68:f3:50:e3:22:f8:
c0:c5:fa:a9:d6:7d:72:05:7b:55:89:89:8c:59:0c:
82:4f:53:04:7c:8c:00:d6:a3:dd:1f:bf:81:ca:f5:
2e:04:37:4e:9b:96:e4:be:1b:ea:a4:a7:39:94:e1:
db:b0:ed:18:7c:e4:fc:b1:a9:c6:a9:81:77:b7:c6:
d4:b8:94:3d:0f:79:f6:85:3f:a2:b2:a6:85:1e:a2:
6a:d8:3d:d2:2b:f2:e8:14:53:a2:72:40:f8:31:77:
bf:1f:83:83:5f:2b:5a:7e:3f:66:09:fc:49:49:2c:
18:8a:d2:19:3e:4a:81:7e:e4:b0:9e:eb:22:15:42:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D9:F2:96:A1:95:85:95:13:88:C4:70:A2:4D:D3:98:C2:92:C0:D1
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:43:3c:08:42:b2:ce:42:87:0a:25:30:b3:c4:10:76:56:
46:52:25:08:33:39:6c:a8:0a:1d:bd:8a:cd:1c:71:5f:75:42:
34:b1:24:f1:aa:f4:cf:ea:7b:95:05:dc:ac:6f:59:3f:53:cb:
a6:95:de:9a:b9:5b:44:2c:66:23:97:56:1e:f9:f2:e0:a4:2c:
6d:e3:bc:0e:27:46:93:38:06:58:ac:35:3d:91:1c:8f:79:1b:
3f:de:f7:bb:f6:0c:c0:2b:bd:61:19:a2:2f:e7:f8:a3:03:6e:
a1:0a:be:41:11:d1:3f:38:1b:c0:8e:ab:b0:df:67:a2:1e:14:
94:c6:f8:4f:e2:03:37:53:af:e6:d8:6b:50:c9:f5:05:15:47:
82:e6:7c:2f:d8:75:73:df:57:12:31:aa:af:08:6d:46:e7:eb:
71:17:59:4c:66:31:d7:71:e7:91:f7:54:10:64:f9:aa:76:ff:
da:3a:8e:bb:75:2d:34:a2:20:5b:94:3f:c5:fd:a1:43:aa:12:
6b:f8:16:4f:f2:93:3f:07:58:3e:70:a7:3d:50:b5:47:dc:53:
5e:ae:5c:d5:4d:8a:2a:39:04:f6:a1:3e:0b:ab:7e:28:a3:7e:
65:b3:35:8d:b9:5c:bd:4c:90:57:43:67:b0:b6:91:41:62:d3:
59:46:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:43 2026 by rpki-client