Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File: VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier: CecRZuToUQujg35xX13lINkYhPNKFBcUYz7gzG4Mpt4=
Subject key identifier: 17:D9:4E:8F:96:73:19:1A:BE:FF:F3:3E:FB:57:2E:05:5F:4F:18:52
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer: /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial: 019CA97C6D5E2BBB3F249697B4932E0F61D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 13:00:29 +0000
Manifest this update: Sun 01 Mar 2026 13:00:29 +0000
Manifest next update: Mon 02 Mar 2026 13:00:29 +0000
Files and hashes: 1: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: j0QNTnbOLeUDxO75/e6M9bfmSwUZRMpuibID4F7Y44s=)
2: pIxI0K5hsESXmePVGgFsIZEijJs.roa (hash: G5KCa0nZX+XJgZTD+Ixy1mkZ7NwUXlv2lkk7I4p+IXE=)
3: r1lm5qDj8jPS_HediYhAeiovCQ0.roa (hash: Q31lY2NlT1+bF9MZR6DBQascJwHV9TGjTGSBlFqXjNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:6d:5e:2b:bb:3f:24:96:97:b4:93:2e:0f:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Validity
Not Before: Mar 1 13:00:29 2026 GMT
Not After : Mar 2 13:00:29 2026 GMT
Subject: CN=17d94e8f9673191abefff33efb572e055f4f1852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:61:15:c2:a9:01:5b:01:a4:b2:40:04:5c:
30:1d:ce:dd:57:50:ff:0e:f9:4e:6a:91:61:a8:b8:
95:d9:8f:81:7d:9f:47:75:1e:09:64:40:e7:50:5c:
09:5f:36:3c:73:8b:fc:37:73:45:8b:dd:c9:46:5c:
fe:79:07:63:83:e3:5d:ca:87:c3:22:ae:91:fd:05:
19:18:bd:a0:af:7d:85:a5:6d:39:9e:8f:b6:bb:67:
4a:5e:f5:71:72:a9:56:6c:0a:e9:d4:b7:14:7c:e4:
c2:75:48:7f:3d:48:1c:f6:37:ba:70:88:54:98:8a:
35:8b:dd:b5:4a:e5:bb:db:dc:15:45:d3:d0:5c:c4:
61:e1:74:79:ea:9b:2a:f4:44:9c:be:e3:48:0a:79:
26:a9:2c:87:e7:78:5a:7c:2a:fc:d0:54:c3:e3:61:
40:70:a1:c8:a6:04:78:04:4e:c4:97:f0:e6:94:b5:
b9:1b:c5:13:dd:92:6a:a7:e5:9c:89:45:fb:c8:8d:
84:69:67:04:1c:3d:24:04:1d:79:39:97:a5:08:58:
62:e0:96:fa:6d:8b:61:6c:49:22:a7:3a:85:27:64:
d3:0b:92:7e:a5:01:c2:d6:0b:7a:57:49:b2:fc:4d:
be:8d:ed:fd:6a:ca:dc:29:fa:ce:03:26:ef:07:e4:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:4E:8F:96:73:19:1A:BE:FF:F3:3E:FB:57:2E:05:5F:4F:18:52
X509v3 Authority Key Identifier:
keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bd:db:77:a6:55:3b:e1:36:58:07:eb:4d:f3:89:a6:9a:0e:
19:f8:ad:df:3d:bd:6f:39:2b:51:83:d9:87:6b:9f:5f:ea:cf:
fb:b0:e2:f1:8a:68:1a:e2:47:22:a8:d4:ce:57:35:2e:66:96:
f9:0f:29:c5:42:63:0a:3c:25:73:8d:88:dd:ba:d0:0a:35:2c:
73:05:81:b1:cb:27:11:12:c2:97:5c:19:61:22:5f:4b:1d:c6:
91:1d:3c:39:eb:3e:ec:03:30:cd:22:3c:f2:44:b5:69:c2:fb:
41:e7:47:58:7d:4e:78:19:90:d2:13:85:e3:d3:50:cf:00:e8:
e5:2c:86:a9:bb:18:10:72:45:33:a8:2c:a5:0e:41:8c:dc:f0:
2b:14:52:f6:5b:ef:1b:2b:77:a1:cf:80:6d:38:78:31:51:46:
0f:3d:d4:15:1e:94:f1:6b:0b:b9:a5:32:b7:87:cf:4f:21:ab:
34:b7:1d:62:99:bf:e1:5d:1f:e4:0f:e4:00:44:37:e3:f3:a7:
74:3a:30:df:10:ef:72:87:17:76:12:37:5d:4e:d2:ab:67:e3:
aa:57:90:3e:00:c1:c8:f9:fc:02:2a:98:bd:de:58:72:4e:71:
5a:6d:8f:59:67:bd:c6:93:5b:67:bf:f6:da:8b:9b:ec:5f:15:
27:c0:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:31 2026 by rpki-client