Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: x6I5zdm1SXdnyGQaUF9bg5bIHMl0C/2bhfaXLTfTh/w=
Subject key identifier: C2:E0:65:21:ED:EA:41:F8:97:34:24:BA:D4:FB:A3:22:2A:E7:A2:8B
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 019CACEB8036BE6D368CFC80CB4BB81B9B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 05:00:40 +0000
Manifest this update: Mon 02 Mar 2026 05:00:40 +0000
Manifest next update: Tue 03 Mar 2026 05:00:40 +0000
Files and hashes: 1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: aRravjWVYvgN0IM0HnQO0CK+wtujAQieAFjzl5BXPUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:80:36:be:6d:36:8c:fc:80:cb:4b:b8:1b:9b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Mar 2 05:00:40 2026 GMT
Not After : Mar 3 05:00:40 2026 GMT
Subject: CN=c2e06521edea41f8973424bad4fba3222ae7a28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:78:c2:19:f5:40:7e:b1:e8:c8:e5:14:48:
ed:d6:f6:88:0b:d8:cc:ed:03:50:26:a8:4e:6f:18:
13:1e:45:d6:45:60:e8:ee:d2:d9:3b:ff:9c:b3:d0:
42:28:ef:e0:13:68:72:c1:6a:8f:59:0c:a7:63:95:
45:09:14:72:d9:bc:37:d5:2c:30:d9:11:08:80:64:
c8:fb:c7:38:7e:45:3c:28:24:45:e6:c8:f2:c4:dd:
df:8c:9d:c8:c3:ca:56:e1:08:d6:cf:db:24:31:8d:
6a:af:20:12:f1:67:e4:ad:44:d8:15:ad:61:79:9c:
a6:e6:46:c2:3b:c0:39:35:4c:ca:9d:4d:09:ff:69:
41:62:fd:f2:a2:5e:52:5d:a3:d6:e9:ae:af:0a:e3:
ff:96:61:1d:f3:f2:11:7b:f0:a4:00:84:8f:3f:79:
be:c2:d8:4c:4b:b4:b1:31:be:d7:a6:35:bf:03:2a:
02:5e:51:a2:67:31:f9:bd:29:3a:89:b1:b9:ff:e6:
88:5e:c8:d6:70:cd:e5:5f:81:d2:bd:0c:a6:e7:e9:
1c:69:56:72:4a:ec:d6:53:e9:1c:4d:07:62:15:2c:
7e:93:38:e0:55:8b:be:f6:59:56:30:65:e1:ce:9a:
81:ce:16:82:96:68:0f:c8:03:70:a8:a9:6c:95:cd:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:65:21:ED:EA:41:F8:97:34:24:BA:D4:FB:A3:22:2A:E7:A2:8B
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ae:bb:b6:c3:b9:e3:aa:55:2a:c1:43:7b:21:4e:6d:46:e4:
ae:1a:92:e3:8a:57:3a:74:fe:48:13:cb:17:f1:73:0b:7c:bb:
89:0e:6c:6e:22:69:ec:92:db:d8:f4:78:40:62:37:f5:80:99:
95:9a:95:eb:a2:8e:5a:fb:b5:3d:8c:e3:b4:5c:7f:f7:1b:ac:
f2:ea:6c:d4:90:05:cd:a7:54:54:4a:12:92:ec:da:f9:ca:7d:
af:3a:ff:6a:66:71:40:c4:b1:ed:5e:dc:4e:03:d4:ad:4a:cd:
31:32:a3:a2:76:e6:65:a8:59:bb:1e:eb:0f:8d:4c:c8:15:2b:
cc:81:c0:6b:7b:4e:29:0c:fe:9a:b4:2f:d9:3a:f4:e2:f7:1a:
cd:b6:58:d1:f7:95:10:99:00:e6:46:b5:78:3e:50:01:66:2d:
c8:fb:aa:4b:35:f2:48:e0:56:62:7f:8b:23:21:b0:4d:5e:f5:
f6:0f:b8:a0:25:9d:ee:2e:d4:00:92:08:6e:9f:a7:f7:d9:3b:
2a:b9:ce:c2:18:ea:7b:dc:17:26:aa:fd:de:da:41:c7:84:8d:
6b:28:20:21:55:58:35:df:27:70:e5:91:19:49:10:b4:10:86:
e9:55:c2:09:4c:f4:f8:86:e5:29:16:2e:ea:61:81:39:2c:bf:
ee:bf:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:04 2026 by rpki-client