Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: KLazM9rJagGT8p42ampXmDHx10/gO9cA6GT5zEMcwUs=
Subject key identifier: A7:28:7D:74:19:47:4A:7F:F6:58:5B:14:74:B2:04:EA:D6:C1:B7:EF
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 019CADC80CD4DEB74C0351DD730BBECDA2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0D8F
Signing time: Mon 02 Mar 2026 09:01:34 +0000
Manifest this update: Mon 02 Mar 2026 09:01:34 +0000
Manifest next update: Tue 03 Mar 2026 09:01:34 +0000
Files and hashes: 1: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: 7ASan0jDWn4W10Obi80I43ilItMLmV3cO1O2Fknbubk=)
2: yt_W34qE1gacCIWkMgYeBjQGjjM.roa (hash: uA38rCETd1LT3A08agddmLYBBE8doq+uuawTYwQT0bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0c:d4:de:b7:4c:03:51:dd:73:0b:be:cd:a2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Mar 2 09:01:34 2026 GMT
Not After : Mar 3 09:01:34 2026 GMT
Subject: CN=a7287d7419474a7ff6585b1474b204ead6c1b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:41:c3:bd:a4:e4:2a:ee:f3:28:71:ea:ce:
10:8c:70:cb:5e:9d:5f:8a:7c:8c:38:aa:5f:67:fa:
66:90:a7:d4:71:a2:f9:25:58:97:6d:a9:e3:86:62:
b5:48:71:ef:60:51:ba:42:a8:03:25:9f:9d:0d:04:
55:69:77:fe:ff:a6:d4:72:86:3e:62:07:c6:8f:69:
50:18:26:c3:1f:bb:be:e9:6a:63:09:0d:99:e2:d9:
b8:85:61:db:db:5d:fb:64:3e:ca:4e:42:0c:3b:8b:
62:a6:a2:d2:9b:da:e1:e7:1d:ba:9e:da:43:68:dc:
45:12:ea:8d:3d:b6:43:48:c0:ec:28:71:47:ae:6f:
68:55:14:ca:60:ef:c1:a5:b8:15:e4:e4:fa:77:bd:
8f:ee:11:0f:f9:01:fd:16:7b:16:ef:31:e5:81:25:
82:49:f2:4a:3e:6d:58:2e:79:00:7f:b5:59:76:b5:
d1:88:23:65:f6:4d:d8:2f:8e:fe:01:90:70:fe:ca:
e7:76:f9:66:67:57:cb:54:28:fb:84:40:0b:b1:6a:
ff:61:3f:73:38:29:37:f7:3e:20:fc:c4:a8:68:f0:
2a:54:ed:cc:ee:6e:5f:96:55:60:a4:3d:2f:ec:1b:
6d:c1:76:77:37:43:15:62:38:1e:a2:f5:65:d2:4d:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:7D:74:19:47:4A:7F:F6:58:5B:14:74:B2:04:EA:D6:C1:B7:EF
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:db:e7:94:e1:48:87:d9:b4:66:6e:71:3c:88:48:a6:41:
12:20:46:cc:59:9c:30:54:9b:8e:2a:49:22:b9:33:dc:d7:3e:
f7:2a:5c:3d:01:60:1d:6a:49:c3:90:cc:41:db:4b:9c:e0:d1:
09:10:f5:2d:9c:a4:4a:2a:a5:9a:93:19:9c:5a:55:f3:08:27:
51:45:1b:b7:9a:0f:8b:15:d0:68:11:1e:0b:79:2f:b8:79:d1:
0d:b6:7b:d0:ee:4d:3e:41:cf:9b:cc:e0:f5:34:80:fe:70:8a:
40:7d:38:78:eb:36:21:98:79:96:77:c7:53:73:1c:e8:90:26:
5b:60:fc:d5:7c:a5:2b:c0:24:c2:62:d3:44:f2:3b:9f:4a:3b:
88:6a:42:bb:80:38:e9:ff:d8:f3:bb:6f:46:b4:2e:38:19:84:
32:80:7a:5a:3e:0b:e7:92:70:ec:59:d5:73:c2:36:1e:d8:0b:
54:ac:68:a6:a3:6f:ed:12:03:53:e0:2b:e3:0c:11:10:33:e8:
22:23:f0:8d:b3:5e:6b:3f:6f:78:0c:e9:98:aa:27:48:5c:2f:
de:b2:d2:37:46:e6:ae:2b:93:38:ef:81:53:91:d5:c2:46:bb:
60:e0:d2:8d:df:1b:92:e9:4a:52:6a:d8:b9:bc:05:dc:bb:ff:
13:29:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:11 2026 by rpki-client