Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier: LbPH2+jG8iZwqEiClJIGbq+F/XMtYgg4Mih+kciTpl4=
Subject key identifier: BF:B6:4D:73:1E:98:9A:B1:49:FF:13:70:E7:1A:8D:ED:D1:41:C8:86
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 019CABD9B273542638BABAB616B95812624B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number: 14DC
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: E6VcUABJOgaDwD9RzJREvDXjkAM.roa (hash: qjoSCznyEiS7sQVKAn02kghNOIKy/+vPrXAKlA+IZs8=)
2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: bDEXSs9/29AyKjrJ2Pkfj8JzhMbFlig3zV+14+zPW4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b2:73:54:26:38:ba:ba:b6:16:b9:58:12:62:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=bfb64d731e989ab149ff1370e71a8dedd141c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:eb:71:c8:c9:12:a4:c3:52:ee:f2:69:c9:
ee:54:42:18:46:95:2e:c1:a2:45:12:52:c2:c9:5c:
d2:49:6d:fa:7f:56:99:f8:18:47:6d:88:d4:43:e6:
6a:cf:c3:c4:e9:28:01:58:3c:fc:d6:6a:21:e2:51:
74:c8:9e:eb:54:15:b8:3e:d1:0a:ee:11:7f:07:01:
cb:bd:0a:ca:ca:5d:45:da:40:57:55:3f:30:74:8d:
45:ca:3c:8d:ca:47:9e:c1:f9:b3:1f:44:25:04:a5:
32:6a:48:a2:1b:60:fa:e4:bb:a3:13:f9:97:5c:aa:
36:e8:34:b8:56:c8:fb:36:8e:8f:e4:a7:dd:d3:4a:
ff:c5:81:86:3f:d9:d8:b4:85:cf:4a:aa:06:3e:52:
b8:39:77:23:5f:7b:c9:51:16:f9:4a:e7:66:72:1f:
ce:a5:2d:6f:34:12:49:a0:77:42:bf:76:1b:86:98:
5b:a0:6e:54:4b:73:42:1a:2c:30:ee:ae:35:19:b0:
83:48:0b:63:62:a1:d8:9c:23:8d:a9:f3:2e:b5:25:
ab:c6:94:57:5e:69:25:4e:5b:00:9f:8a:d5:7c:0d:
4a:d3:6e:e8:e4:ad:1c:ff:35:e4:1f:eb:04:e5:d6:
c6:39:e7:01:a9:b0:1f:75:b2:ca:1a:b6:42:3c:2c:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:4D:73:1E:98:9A:B1:49:FF:13:70:E7:1A:8D:ED:D1:41:C8:86
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:28:03:66:80:e9:7a:6d:61:94:e1:1c:25:ec:cb:a3:f8:08:
cf:81:02:7c:a9:13:bb:59:76:e6:50:b7:a2:40:22:5a:0f:c4:
ba:11:a8:f4:00:22:be:2c:0c:b4:3c:6c:8e:dd:0d:5f:43:4a:
c8:a2:42:98:5e:a4:32:3b:6a:b2:eb:ef:fe:8d:33:d0:8c:83:
68:3b:ec:e2:56:f6:53:35:76:11:5f:09:c0:3b:6d:91:d0:36:
56:f8:da:cc:22:2d:5a:db:01:a9:18:15:e0:f0:fc:05:18:94:
e2:32:5a:8a:15:84:76:e6:bc:db:91:88:fb:54:1f:59:de:89:
ba:63:24:eb:a3:a8:04:50:9a:9b:31:eb:5c:56:3f:de:94:04:
6d:a1:26:6a:93:df:2c:a3:ac:4b:5f:8e:41:de:8c:33:de:76:
c9:18:3e:16:35:6c:e9:b8:2e:7c:7e:69:10:46:2e:9e:3d:ed:
69:83:77:4b:2a:cc:77:e6:45:a5:29:72:52:ab:bf:35:c5:b1:
08:b0:e2:24:f1:cc:ab:6d:2b:00:c9:25:0f:04:c5:71:bf:09:
8c:cf:64:ff:3d:81:6a:cf:03:8d:04:d1:de:39:4b:94:60:4a:
9b:70:14:2d:71:30:f2:43:7a:ba:41:34:7e:50:9a:2b:ce:34:
f4:77:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:04 2026 by rpki-client