Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: IdDeEnOBzarpvEo5PDOHIoEimkhtnuW0iTf29f03JnY=
Subject key identifier: 1A:AE:E7:6A:2D:67:61:E1:32:C6:52:51:1F:4E:87:AF:6C:86:5F:9A
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 01A0E8F66E4EB8D5C21038F2FD9097D5D528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 0931
Signing time: Mon 28 Sep 2026 17:00:59 +0000
Manifest this update: Mon 28 Sep 2026 17:00:59 +0000
Manifest next update: Tue 29 Sep 2026 17:00:59 +0000
Files and hashes: 1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: eAGlI6el5V2JpyDOd6f5/hGZ8sUY0ob9bbM2jBYxO+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:6e:4e:b8:d5:c2:10:38:f2:fd:90:97:d5:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Sep 28 17:00:59 2026 GMT
Not After : Sep 29 17:00:59 2026 GMT
Subject: CN=1aaee76a2d6761e132c652511f4e87af6c865f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:50:aa:dc:d2:3a:f0:98:e1:08:c5:b0:15:
47:67:3b:16:b7:8c:59:de:56:9f:81:13:86:23:96:
c6:3c:35:a7:02:83:ad:15:ae:9d:e8:55:1b:3d:56:
32:43:17:91:a3:66:9a:b1:21:5d:2c:d2:22:b7:7f:
b0:71:8f:93:64:ef:62:21:1e:87:08:6b:48:d9:d4:
68:97:2d:31:cf:bc:39:68:8f:2d:f2:b3:0d:5a:2f:
d6:00:f1:99:db:20:cd:f1:a7:4e:79:a5:38:fa:cf:
43:16:4d:c2:cc:6b:4b:e0:eb:04:66:51:67:20:93:
83:f0:28:07:7f:e0:7e:14:1b:d2:77:4d:e8:48:aa:
47:e6:6a:c5:bb:cd:40:92:f7:43:6d:ef:8c:4a:d9:
2e:a5:78:46:79:d8:12:09:8d:90:6c:05:b0:36:11:
f8:53:48:d4:c3:07:3e:76:dd:68:d7:29:2c:a3:1f:
d7:07:fd:41:1e:bd:91:e3:57:bb:d4:a1:00:78:12:
65:0f:a7:53:01:bc:be:fd:69:79:a9:38:25:75:17:
ec:ef:04:0f:26:5c:40:8f:d0:a4:87:65:83:ae:ba:
b4:cc:e7:b8:58:a5:68:ad:ee:d7:1a:5a:00:c1:09:
6a:7c:97:b6:c4:eb:b2:3b:31:ff:33:7d:b6:54:a0:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:E7:6A:2D:67:61:E1:32:C6:52:51:1F:4E:87:AF:6C:86:5F:9A
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:28:51:15:82:c4:8c:99:bd:97:87:21:5f:0b:67:8a:0f:5a:
41:ec:c2:6d:65:5f:a8:22:d9:fc:9f:e4:0a:59:13:c6:fa:07:
3f:15:ed:ba:e9:54:e2:98:0e:11:e8:00:11:89:7b:d9:fb:aa:
9e:c4:8d:56:6a:e0:23:f9:4c:70:e4:4b:f7:d0:51:a5:2f:46:
19:6a:d6:fb:66:d0:81:93:31:44:c8:44:29:d6:b9:80:4b:31:
52:0d:9f:bc:6d:59:c9:c2:4f:86:69:3c:3f:64:26:e3:5a:e6:
b3:a6:a5:cb:7c:fb:c3:74:e9:26:3d:5d:b9:f4:8c:af:b4:c9:
19:93:77:75:5f:e9:92:16:81:fb:3c:f1:1b:74:53:76:84:cf:
e0:0a:5a:20:66:81:8b:19:69:58:fa:f2:c9:34:37:a9:fe:77:
af:a2:02:0c:14:8a:c1:ae:c6:0c:a6:6c:3b:6a:9f:77:24:a8:
e8:fa:ce:8e:11:90:8d:8b:9b:20:80:fe:2a:41:e4:f9:bf:ca:
73:c0:37:e9:14:f6:cf:b2:bf:4b:ff:d4:be:80:f4:77:1f:7e:
ea:a5:94:b7:01:d0:9a:32:e6:c8:ab:4c:77:3f:e9:68:a5:37:
fb:92:44:35:84:1a:cf:4c:4c:b1:ce:57:c4:ce:f0:0b:c0:d8:
2c:a7:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:34:17 2026 by rpki-client