Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier: aqnviAoQUwJO937b7P+ZY87Yi9UQriBovfG7QDnA2N4=
Subject key identifier: D7:18:8A:A9:5F:4D:EC:A5:1B:88:CF:C7:D9:93:87:B8:2F:A5:EB:E9
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial: 019CAA58E93AE785ABEDE3589DD95296E850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number: 0340
Signing time: Sun 01 Mar 2026 17:01:19 +0000
Manifest this update: Sun 01 Mar 2026 17:01:19 +0000
Manifest next update: Mon 02 Mar 2026 17:01:19 +0000
Files and hashes: 1: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: lzx+2UKqd7Qqhz8dMU1vlwnUwZRx2zgJMnKPXNRtZfs=)
2: rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (hash: TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e9:3a:e7:85:ab:ed:e3:58:9d:d9:52:96:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Validity
Not Before: Mar 1 17:01:19 2026 GMT
Not After : Mar 2 17:01:19 2026 GMT
Subject: CN=d7188aa95f4deca51b88cfc7d99387b82fa5ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:62:5a:6c:6d:af:05:91:6f:37:99:ba:08:
b6:dc:51:33:bf:d9:60:e0:d1:36:98:a9:ff:93:d4:
f0:1f:cc:18:a3:d7:b1:4e:66:b6:4d:ab:b9:fc:07:
90:0e:6c:7c:ab:65:5b:40:d1:75:6c:df:42:82:00:
99:1f:d9:07:89:a2:6a:80:d5:4a:d1:3c:47:ed:fa:
87:6e:cb:a1:9d:7f:95:b8:e3:20:23:0e:93:05:2c:
06:ee:f7:10:c8:4e:5a:0a:85:17:20:92:ad:e3:b7:
e1:3a:c0:9d:2f:96:ee:7e:55:65:2e:87:aa:10:8e:
6a:7f:97:06:80:66:7f:aa:95:9f:9c:f8:9a:04:3d:
aa:d4:6c:de:b5:59:b1:a2:d0:a8:b0:06:81:7c:4c:
20:50:c0:7d:5b:7d:a4:f8:ed:5e:6f:7e:59:45:6f:
46:a2:f4:88:32:02:a0:be:55:b0:67:02:a5:36:a9:
1c:3c:23:e9:64:f2:f9:c1:43:0f:3b:b8:c3:f6:2f:
88:16:d3:17:b8:fa:ac:39:0e:84:24:7f:2f:22:bb:
d7:71:2f:2e:5e:36:7d:e7:a7:56:f0:db:11:02:7c:
fd:b7:dc:48:ac:10:ce:4d:d3:28:36:53:43:f4:2d:
96:ad:36:86:a0:bd:af:c3:dd:ab:3f:b1:28:64:36:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:8A:A9:5F:4D:EC:A5:1B:88:CF:C7:D9:93:87:B8:2F:A5:EB:E9
X509v3 Authority Key Identifier:
keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e3:e3:e6:bc:2b:8a:52:fa:e0:66:1d:fb:81:d1:be:de:3f:
28:cc:32:4a:1a:1e:ad:0e:95:3b:fd:6f:bb:3a:0d:1b:b1:b9:
fa:a1:74:b9:f3:e0:df:ea:7a:2e:7f:46:50:5e:e4:fd:df:a0:
b1:68:1c:12:cd:1e:74:ec:7d:d6:12:5f:c1:0f:b2:e6:84:53:
63:8a:02:38:ce:d0:bb:0d:9a:aa:40:25:67:da:b8:c7:c3:84:
a0:59:ae:57:4d:0d:2f:c9:2f:cc:69:d9:62:4d:c6:8f:0c:78:
5b:e3:3c:96:2e:10:81:bd:db:85:97:e9:67:46:1f:7b:a6:e5:
6c:5d:a5:12:cd:f6:f4:d3:63:2c:25:72:c4:07:f7:22:d8:bb:
5d:a6:ef:01:c6:3a:35:fd:39:5d:e3:02:0f:c2:6c:19:bc:98:
de:a6:04:66:9a:0e:fd:09:28:a1:ef:ca:47:b5:ab:ac:e9:25:
03:53:ff:a6:7b:63:84:36:0e:9d:30:eb:ee:36:5c:72:66:aa:
b6:a5:0d:1c:ef:84:eb:d2:e7:ff:58:9e:04:cf:62:cb:f3:06:
78:05:c5:c5:cc:00:e5:2e:89:8c:14:d4:f9:01:06:ab:a7:93:
2d:21:7e:7f:be:06:2c:23:46:d8:65:ef:d0:33:ac:f1:05:4e:
ff:31:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:48 2026 by rpki-client