Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: fn4eFCy62YiBljgQIIhEb9SPKw7zUck9M/44eYZ04y8=
Subject key identifier: E8:1A:D2:B7:64:4A:AB:86:14:F7:06:55:27:88:E2:78:3F:65:9C:28
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 019ED5E283FFE3252239AC897B64262812FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 0C87
Signing time: Wed 17 Jun 2026 14:00:52 +0000
Manifest this update: Wed 17 Jun 2026 14:00:52 +0000
Manifest next update: Thu 18 Jun 2026 14:00:52 +0000
Files and hashes: 1: GIndhU8ELmsNHmG9wjRWuLwz2bs.roa (hash: PQMP13AMPNG5zd/gezY6JmA04bcuMNJCFye1nndg+RI=)
2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: GwHd6havOs4DoEgq2BRLFqajrn8MqxbkfuOU1GFd00g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:e2:83:ff:e3:25:22:39:ac:89:7b:64:26:28:12:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: Jun 17 14:00:52 2026 GMT
Not After : Jun 18 14:00:52 2026 GMT
Subject: CN=e81ad2b7644aab8614f706552788e2783f659c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:03:97:d9:75:2b:26:d4:34:1d:7e:10:b9:
7b:dd:82:d7:17:22:f0:8a:94:4d:4d:3d:0e:89:c1:
e8:87:80:cc:61:f0:2a:b8:e9:0c:3c:b8:3a:bf:21:
8c:ce:04:78:41:1f:e3:0d:53:a5:57:f0:43:6e:42:
d0:f2:81:34:3c:0e:ce:76:5a:39:60:9a:ae:b2:9c:
46:63:64:e7:89:90:f4:da:62:a1:56:63:22:f9:b4:
07:f7:03:c1:0e:d1:8e:83:ca:2b:16:df:1f:69:2b:
71:30:53:f0:89:74:7f:8a:43:ec:bd:46:68:f0:d6:
6f:40:44:b0:a1:2d:b1:5c:2d:43:5e:68:d8:29:2d:
4d:3a:78:3c:b4:89:f3:53:23:e1:de:e6:68:8b:3c:
0f:60:09:3c:d3:5e:31:b8:2e:d2:a5:7d:20:f9:f3:
40:5a:4d:9e:d7:74:89:1a:40:a7:ff:24:c8:54:b5:
69:c7:fc:34:12:3b:a6:5d:d8:33:25:db:c0:6c:aa:
0e:55:dd:d0:d6:00:c8:2d:11:6a:fc:de:7d:95:64:
cd:00:d2:b7:39:ff:3f:61:2c:70:f3:3c:78:fa:8d:
50:ae:c4:24:0f:3a:19:25:8d:a5:1d:9a:fc:a8:95:
18:44:48:f5:8d:82:95:93:16:b6:af:1d:a7:98:09:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1A:D2:B7:64:4A:AB:86:14:F7:06:55:27:88:E2:78:3F:65:9C:28
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:70:86:55:85:8c:31:08:e7:49:2c:54:e8:12:4c:22:e2:
b4:b6:a9:b2:cf:48:7a:dd:cd:1a:2c:ff:20:76:85:70:cb:99:
40:fb:ca:6a:92:00:4c:a7:fe:c8:47:cd:f2:dc:e2:71:0c:a8:
db:70:58:50:c4:5e:82:26:ba:6d:f5:60:cc:24:f6:29:2c:4d:
e4:34:48:89:d9:57:b9:ce:e0:6e:0f:8a:c8:81:20:d9:04:1a:
76:70:2f:ad:c7:43:02:40:14:a6:9b:00:db:fa:ba:62:ef:7b:
82:6f:1a:7c:73:a3:23:9b:3c:7a:a9:9b:ad:87:61:85:6a:63:
16:2d:f5:b0:46:66:a8:7b:63:e4:b1:a5:6f:fa:d1:14:ae:75:
ea:8d:4c:1b:73:14:d6:27:c5:a7:ad:45:38:ff:e0:71:ee:9c:
51:95:66:e5:b5:5d:69:aa:5f:50:12:24:9b:24:4d:a1:4a:08:
cf:98:90:8e:77:92:16:43:ac:51:73:74:87:4a:07:4e:8b:a4:
e5:f5:06:14:3d:87:5c:68:b7:52:28:fe:4d:61:bc:e9:f7:c2:
51:95:38:0c:eb:7a:16:ea:3d:40:e7:ec:9f:d4:f1:04:93:d6:
34:10:5f:1a:14:13:0b:6c:56:0b:6b:a3:96:11:c7:70:8e:bd:
2d:74:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:55:19 2026 by rpki-client