Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File: VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier: UV7A5V878sHuJ6zUgXTZAstwH2xmPvE5ubJhSMy+l2U=
Subject key identifier: E8:3A:89:25:C6:8C:93:60:80:AD:2C:F5:DF:61:A6:91:03:D8:EE:4D
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 019CAEA34284A7F7D20A89B092577EB765BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number: 09CF
Signing time: Mon 02 Mar 2026 13:01:00 +0000
Manifest this update: Mon 02 Mar 2026 13:01:00 +0000
Manifest next update: Tue 03 Mar 2026 13:01:00 +0000
Files and hashes: 1: SZwng8c8STc3WrdaRWzq-6TbXLg.roa (hash: 5kW6U6T1/vZEmpDdes9PfAiCAiyWcN3dkaJYH4AuORE=)
2: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: 74Lq5ho7nyv4gREq6BFpLwRqqD0sPSHsKZHF//Fvi9g=)
3: Wf0i36PV-VmyKUK20H0rdHHPRas.roa (hash: 7LRImySHs+dAxi+a5eFHvvhxZ2AT2UvZ4Ch0CMlh2Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:42:84:a7:f7:d2:0a:89:b0:92:57:7e:b7:65:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Mar 2 13:01:00 2026 GMT
Not After : Mar 3 13:01:00 2026 GMT
Subject: CN=e83a8925c68c936080ad2cf5df61a69103d8ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:5b:e1:45:1a:2c:af:d6:1c:67:93:1e:62:
b1:3f:28:19:47:58:67:99:a5:0e:39:db:e3:66:dd:
ba:a8:e7:cc:da:bc:fb:5e:f1:19:cb:ad:91:ac:ea:
ce:0c:a5:18:4a:5a:ba:f6:6b:62:57:d9:1a:e8:41:
72:42:e0:a7:8b:0f:25:3c:62:9b:2f:3a:46:00:72:
da:99:19:68:40:5d:c5:c8:8b:63:96:e2:6a:f3:67:
d3:ef:b9:11:00:bd:16:ba:83:4a:31:73:d4:da:12:
d9:ae:09:00:ca:0c:3b:aa:b7:13:21:60:e2:50:08:
ab:f6:a2:31:fa:15:bf:f5:1e:6c:e5:b4:db:83:03:
2f:a8:77:da:6b:fe:64:9a:62:80:d2:6b:49:36:72:
6c:1e:35:fb:f7:d8:39:2e:4e:27:b5:b2:66:5e:e3:
dd:fc:b5:cf:fa:dd:78:f8:18:42:79:e8:5a:af:1a:
19:12:ac:7a:b7:26:e5:76:dc:ac:3e:20:78:30:61:
f9:bc:1f:eb:65:49:8a:92:59:30:73:cb:79:a0:17:
b9:40:85:5f:bc:cc:08:c9:a7:14:c7:fd:f6:9a:3b:
39:56:9f:8e:a1:6f:2c:87:8f:a3:8a:3e:ff:93:2d:
1f:8d:9a:43:5f:97:2f:f4:ea:15:8e:74:10:c7:2e:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:89:25:C6:8C:93:60:80:AD:2C:F5:DF:61:A6:91:03:D8:EE:4D
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:1a:7a:f1:6a:6b:29:b6:c2:79:6b:3b:4e:6c:da:98:54:
ef:d2:f8:3c:37:a1:c2:da:d2:de:81:6c:5a:e7:fb:af:36:f6:
3e:c0:b2:1b:8a:fd:ba:b5:cc:f2:9e:4e:c6:bb:ee:0f:9d:ee:
3d:d4:81:b3:23:44:58:75:28:d1:7f:ad:c4:91:6a:aa:12:8c:
98:b5:12:1d:01:f6:9f:7c:b9:f2:86:f5:5c:44:b3:f5:10:64:
03:a4:e2:f7:a3:c1:c0:65:b0:d0:e0:6d:05:66:e3:9a:c0:a6:
06:99:cb:06:a5:4c:37:56:5a:f0:4e:c3:42:fc:51:21:ba:b4:
41:b0:15:a9:77:05:39:fb:4d:32:50:e6:2a:db:42:50:c2:17:
6f:a0:b4:d7:0c:44:29:86:d9:4d:18:8f:3a:06:69:00:7f:42:
5b:8c:b8:34:83:49:2b:0a:5e:ab:ac:c6:eb:80:7a:25:a3:fa:
6c:c8:1b:6d:ac:98:9d:de:f5:5f:80:8d:38:aa:19:14:1b:b7:
fd:e1:af:6a:c5:6e:be:55:dc:f2:d0:68:88:d0:46:d9:79:ee:
b7:57:ac:99:b7:07:2a:d5:a2:e9:84:36:bc:f7:9a:ad:7a:64:
9e:43:48:8d:07:42:f6:19:ef:d0:20:78:28:7e:43:b8:e1:18:
15:89:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:44 2026 by rpki-client