Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier: XKdYzy0h6JWMo27z+JmqGDZ7UeFGn//2JhRK0+rIlJU=
Subject key identifier: B2:19:45:56:5F:9A:DA:87:F5:71:40:FB:FD:E2:17:FE:B1:C3:71:FA
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer: /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial: 019CAC4725FC98CB346950445B03D9DF8FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number: 0A43
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: UdpDaeZVys7LHpexLg2_ugrpKao.roa (hash: 4C4Vm/weE0RMdrsBZQ2+meAake0bVi8NxlHOyIu9Ojw=)
2: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: Je1UnEGHrVQOVJRtihGsXDgElHpm2RupRt9kHlzhV4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:25:fc:98:cb:34:69:50:44:5b:03:d9:df:8f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=b21945565f9ada87f57140fbfde217feb1c371fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:29:92:15:2e:5f:f8:b9:ee:27:3c:c4:d7:
b5:cd:69:e1:9a:9f:ba:dc:25:b8:5b:76:a6:4c:d8:
5a:db:de:10:4c:5e:e1:fc:97:c8:15:2d:2f:20:1b:
8e:dc:4c:63:2f:62:b4:27:63:5e:ff:f0:d1:a0:a4:
81:0f:b8:99:78:42:16:97:18:7a:91:10:fb:fd:c6:
2f:06:e8:61:1f:dd:49:a3:6a:a2:1b:47:be:68:41:
e1:54:ec:0f:eb:6c:59:9e:7d:d6:f0:81:4b:f9:d8:
3c:a1:32:14:3d:5d:51:30:0a:f6:01:22:e5:c5:70:
40:33:d5:d6:75:a8:eb:5f:e0:0f:be:fe:ab:36:6c:
55:06:95:95:8d:ea:aa:ac:06:60:c2:71:0d:7a:1b:
37:7b:1c:ae:34:00:d4:a4:77:8e:b9:4d:27:69:3a:
e8:d0:c4:9d:d6:86:1d:57:12:f0:14:de:91:5c:d6:
f0:2e:aa:3e:41:88:a0:c2:2e:fd:90:c5:0f:01:21:
40:79:b1:91:20:71:31:c5:3d:e6:01:93:2c:4b:b8:
dd:5b:cb:ae:8f:51:20:99:25:59:1d:d4:22:32:34:
f1:34:23:58:ae:3e:62:7b:f6:20:2c:22:49:5e:0b:
ff:60:e9:c4:02:40:a7:a9:02:da:13:35:dd:3d:ce:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:45:56:5F:9A:DA:87:F5:71:40:FB:FD:E2:17:FE:B1:C3:71:FA
X509v3 Authority Key Identifier:
keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6e:09:66:5a:d0:a2:bb:e5:74:38:3e:97:52:a6:f4:02:33:
33:19:f1:7d:1a:66:06:d7:74:59:db:4a:6f:54:70:ad:bf:49:
b3:7f:c8:e9:42:80:b6:21:71:ab:33:dd:4d:39:79:b2:71:90:
e6:65:5d:a6:df:7c:4e:e3:f9:8c:01:33:4d:28:de:49:60:25:
b4:c5:8b:61:97:5e:92:74:67:4a:bd:34:fc:9a:6d:6d:ad:79:
c7:7f:e7:4c:1f:69:b5:8f:cd:1e:db:06:ab:bd:cd:01:67:a7:
35:21:75:2b:fc:a6:0c:bb:a8:35:21:fa:a7:98:fe:9a:23:58:
3e:dc:97:cd:36:29:83:ff:72:9f:1c:08:d5:b9:2e:c8:2c:6c:
98:89:65:a1:d2:91:c6:46:6e:58:03:bc:0b:35:f2:c2:e2:f1:
8b:ca:5d:99:a5:00:2a:e8:55:71:b0:1b:78:6d:c8:9a:fd:46:
1e:5f:b9:e6:f6:92:73:8f:86:e1:48:16:ae:1b:eb:e2:9b:b2:
cd:f0:56:53:d3:18:c0:e1:d6:11:ef:82:0a:c9:9f:e2:04:85:
a5:7d:fc:45:bb:dd:5a:ff:90:c5:6c:05:02:df:27:60:be:4d:
2d:9c:3c:a2:54:5e:71:d4:da:10:51:24:c9:40:52:b0:db:15:
1a:fd:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:23 2026 by rpki-client