
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: hJNuVJNSKIhAc+ArYF/JbPjxUkO28R5MMmdoHhzG0HY=
Subject key identifier: B0:6B:48:4F:13:4A:B5:7C:CD:35:F3:D5:8B:DF:03:78:58:E3:A4:E7
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 019CAAFD7DB625B1ACA9D57BCE21536AAC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 15E2
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: JjGWu_iS8cN2zsRmRzGaL41mOkE.roa (hash: g4eeZndVmzfMZIquXIPB+scdVjdZfzjwgvSICfGOgYk=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: 1bHiUNzrTY1LKf1FAjt/Zftwjb4ZZx7otXmyXBHGoKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7d:b6:25:b1:ac:a9:d5:7b:ce:21:53:6a:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=b06b484f134ab57ccd35f3d58bdf037858e3a4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:59:a6:95:a4:2d:8b:31:34:1e:32:8a:c8:
d5:6f:81:60:6f:1b:84:33:5b:10:e0:bb:82:66:3b:
8c:d8:dc:4f:19:65:fa:6a:d7:97:0d:df:75:4e:f1:
76:a8:0b:5c:53:33:c3:9f:ca:4a:ff:07:cf:e2:56:
0c:2b:65:44:6d:b7:9b:00:f9:0a:5e:41:bf:f9:73:
dd:32:f9:f7:82:08:7f:df:a0:d7:d9:55:46:7a:78:
92:d0:97:71:fe:de:92:94:8c:3d:39:90:a1:ee:ce:
4f:8d:0a:4c:12:79:b9:65:b9:b4:59:74:10:85:af:
b5:0a:2f:c0:2a:c3:e8:54:40:64:c5:98:63:8a:de:
25:8f:ad:07:47:d5:5c:ef:6b:7f:3a:34:98:e0:33:
2b:79:5f:a7:44:ef:7f:67:aa:ca:5b:a5:e5:4b:46:
4b:06:9a:d5:5a:fc:8e:97:a8:d8:22:b8:7f:76:2d:
37:16:b0:8d:23:37:68:de:31:49:bf:2b:3a:70:25:
6f:c2:01:41:6c:3a:08:76:28:c3:9c:69:aa:a1:be:
fe:55:15:ee:db:db:7a:1b:cf:63:1f:6c:7f:fe:e4:
7e:4f:b2:df:dd:57:8e:00:d8:6c:70:39:e0:45:5e:
d7:53:c8:34:f0:60:6c:4d:35:93:43:02:3b:21:15:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:48:4F:13:4A:B5:7C:CD:35:F3:D5:8B:DF:03:78:58:E3:A4:E7
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:78:b3:49:76:1a:a8:50:85:6e:34:68:68:6f:31:66:8c:30:
ac:88:0f:06:54:a6:4b:a2:87:7b:0d:d6:52:43:c7:bf:07:92:
1e:af:e0:3b:80:28:91:34:4c:43:54:e7:33:e5:ca:44:3f:ea:
6a:bc:c8:fe:c6:45:ff:6f:0d:4c:db:94:16:58:a4:49:40:de:
80:c7:71:b7:b7:f9:6d:50:1d:74:e6:4b:fd:81:b8:3a:56:e4:
3a:ab:5d:11:d5:35:73:8e:f5:72:24:b6:52:5d:5b:50:6d:09:
e8:6a:96:b9:d1:00:09:79:64:20:4c:5c:c7:92:b9:b5:4d:6b:
1f:03:be:2f:9f:c9:7b:4d:04:cb:90:77:a3:0e:39:7e:c0:81:
9c:5c:fe:47:63:22:e9:ef:03:27:cc:35:94:15:14:97:55:27:
85:a0:39:10:c3:90:8d:d1:05:a7:c9:2a:aa:de:a6:4a:cd:67:
10:c3:f3:6e:8d:94:80:a5:30:28:05:27:5e:31:c5:f7:c3:1f:
41:d9:eb:87:9d:f3:78:9a:6e:6e:74:a1:53:5e:b1:f9:a2:09:
a8:47:e7:7c:57:f7:12:f8:70:f3:d7:a2:d3:5b:e1:0f:23:98:
1c:66:9f:14:83:ab:3e:cc:18:27:28:ec:c3:9a:52:00:30:09:
e2:c8:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:51 2026 by rpki-client