Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: NctxmWiceiPX+Pc9i6QchoCfXj4Tqhpzw77reOnDWtE=
Subject key identifier: 45:77:24:85:AD:41:7E:F7:58:7F:C1:03:9A:D4:FB:07:C2:27:4A:CD
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 019CAD9066187C58796E8FF1C4A21CC3D26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 0B69
Signing time: Mon 02 Mar 2026 08:00:47 +0000
Manifest this update: Mon 02 Mar 2026 08:00:47 +0000
Manifest next update: Tue 03 Mar 2026 08:00:47 +0000
Files and hashes: 1: GIndhU8ELmsNHmG9wjRWuLwz2bs.roa (hash: PQMP13AMPNG5zd/gezY6JmA04bcuMNJCFye1nndg+RI=)
2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: T+cRwSuGFaaQhbqvgi94E2SctDuzGhBj/AUs1tdY4MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:66:18:7c:58:79:6e:8f:f1:c4:a2:1c:c3:d2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Mar 2 08:00:47 2026 GMT
Not After : Mar 3 08:00:47 2026 GMT
Subject: CN=45772485ad417ef7587fc1039ad4fb07c2274acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:89:f5:f7:ea:be:a0:72:58:07:88:4f:08:
68:a5:99:9f:4d:75:1b:86:33:c4:c2:2e:b5:79:9d:
24:a6:f3:fc:2d:9f:c1:f1:39:50:91:01:a6:ae:55:
e2:91:19:e9:33:32:50:5d:83:29:2c:77:cb:7c:39:
1d:34:84:85:56:44:ca:8e:e5:82:3e:66:af:0f:02:
f7:e8:ef:a5:2b:b7:81:61:85:aa:a4:b7:1b:b3:27:
b3:c7:11:59:b7:34:1d:67:53:3b:74:8b:2a:6b:0e:
ac:b4:2d:fc:b3:a8:af:67:26:83:b5:5a:ab:c3:cc:
a0:88:2f:b4:f4:31:f6:61:8e:d9:4f:5b:84:9f:91:
d8:9a:8b:86:ea:1b:f8:62:e5:07:7e:04:28:07:06:
4d:16:82:61:af:b8:05:1d:b4:22:e1:e1:26:75:75:
d0:57:ea:f8:51:ec:07:4c:73:b8:2d:9a:0f:a0:8b:
42:fa:cf:fe:6a:3c:e1:12:cf:ab:51:70:d7:a9:2d:
88:13:22:6f:46:5e:7d:01:c0:44:4a:f6:b0:40:41:
97:b4:83:ae:90:e2:21:22:13:0a:1a:c6:e5:1b:7b:
26:53:99:9a:1c:be:61:ba:e7:9b:5c:b5:9b:18:37:
07:a9:32:c2:0e:f5:3a:62:5a:a6:d0:af:d6:39:68:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:24:85:AD:41:7E:F7:58:7F:C1:03:9A:D4:FB:07:C2:27:4A:CD
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2a:36:1d:68:ef:27:e0:2d:fd:bb:e5:32:f8:2c:42:cd:f0:
da:54:c8:e4:a6:2b:99:27:40:a4:01:d8:06:ad:28:0c:48:f5:
9e:b3:aa:01:4b:89:dd:48:1b:f1:66:41:0a:d4:ab:cf:d4:b3:
cc:4c:04:69:4a:30:30:74:1d:3b:8b:87:00:d6:4f:7a:43:0a:
cd:69:b1:1e:28:b5:f0:ec:c9:4d:78:47:58:1d:83:b9:ab:3f:
00:0b:23:22:6c:ad:70:1c:4c:f0:db:18:c5:fb:6e:6c:6a:3b:
d2:6d:8e:1b:eb:49:83:f9:0f:a5:91:0f:f6:b1:d5:28:fe:9d:
d4:2b:8e:04:be:a4:23:e7:a2:32:b4:ef:36:f3:34:df:da:c2:
b4:48:a9:79:05:c1:e2:ab:7b:63:b3:f2:24:0e:44:e0:b9:01:
09:e2:2d:df:dc:48:07:c1:29:ef:19:8b:2e:48:54:62:8f:fa:
a9:82:54:4c:90:c4:fe:8d:f9:fd:ad:fd:e4:ab:ab:c3:ea:b1:
7f:21:2c:47:cf:1c:18:03:de:76:f2:37:4f:f2:97:45:34:8b:
c6:b6:75:04:49:d6:8a:81:33:b9:4f:5b:c9:eb:77:90:5d:de:
12:cc:4e:f8:b5:e7:bd:22:07:3d:19:70:83:cb:bc:04:6c:6b:
80:2c:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:40 2026 by rpki-client