Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier: rnz8qMTZqwrs2UhNzIgV0/uatPMtoR35jrSwmeCtVTM=
Subject key identifier: 94:1D:0E:64:DE:DD:9F:BB:FF:56:4D:C1:CB:78:87:96:01:F0:EE:32
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial: 019CACB4D058145336FFF5D6733E58B1AEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa (hash: EWBZ2UHTAmxrD1L9UAKAHW/cTFQz9Hh3HcW2rFyIPpw=)
2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: 7qBmGBp2TrwegRSElNSiX56tgv1jRfUCeWDbGNL4zhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d0:58:14:53:36:ff:f5:d6:73:3e:58:b1:ae:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=941d0e64dedd9fbbff564dc1cb78879601f0ee32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:30:d0:21:18:ef:39:8f:87:8e:39:11:73:
fd:71:89:96:60:63:a8:71:6e:49:e8:5c:de:59:3f:
d9:8e:34:74:9e:bf:07:57:ea:63:48:3d:f2:44:39:
22:ca:07:39:7d:46:14:1c:69:94:f3:60:00:72:84:
21:24:08:4e:b6:53:63:36:3c:11:0a:94:b5:21:45:
08:d9:f0:bf:29:a4:d7:7a:25:f3:3f:4d:7b:90:68:
50:cb:c4:2a:20:c4:8f:a3:8d:96:04:45:28:50:a9:
06:7a:9c:15:ec:e6:a0:8f:dc:85:2a:8c:c3:68:b5:
4b:37:66:86:eb:17:48:ec:df:d5:04:e6:42:2e:ba:
db:f9:67:7b:93:2b:47:86:aa:8f:d9:dd:a5:a8:d8:
b5:8f:a2:b4:4f:90:4c:0e:ae:81:de:43:b1:6f:22:
21:33:bb:27:0b:1e:15:0e:ba:8e:bb:e8:80:7d:25:
2c:b0:41:00:06:7d:c9:1d:d0:b3:31:ed:c6:79:a9:
2c:c6:8c:cd:0c:f6:36:62:49:6b:41:e7:69:38:41:
65:43:2e:54:07:61:f4:70:ac:f6:c8:f2:d4:08:47:
ec:7a:81:b6:bb:2d:a0:b6:b7:f8:89:dc:ca:ad:5d:
5b:c1:4b:f1:77:a1:77:ed:64:63:30:c5:51:37:96:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:0E:64:DE:DD:9F:BB:FF:56:4D:C1:CB:78:87:96:01:F0:EE:32
X509v3 Authority Key Identifier:
keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f9:65:a7:e8:ef:d7:00:e3:64:ab:5f:65:da:c5:f6:44:c3:
13:7a:1a:53:2b:6e:c4:35:05:ea:9c:bd:0f:93:10:60:a7:71:
fe:67:f7:10:29:f4:44:f5:78:f8:68:8e:2c:65:9c:d1:0b:0c:
ec:44:1f:f2:b9:f4:0d:92:10:21:55:d5:db:63:30:6d:fe:ba:
80:c6:0e:a9:ee:a5:f0:9f:87:5e:07:ec:bf:58:fd:3a:7b:ca:
dc:bc:09:17:31:f4:c2:ef:82:07:17:b0:fb:7d:a7:8d:08:e7:
33:ee:8d:48:50:2a:82:b8:e9:8d:fe:59:9d:fc:da:7d:24:d0:
df:74:b1:08:6f:5b:9d:8e:ef:79:5e:de:73:21:f8:55:e6:13:
18:ba:86:f8:2a:0a:89:49:68:e7:66:ca:3c:39:27:ca:cf:9d:
bb:13:1c:83:3c:42:4a:a9:83:f1:6d:5a:81:f5:dc:aa:58:f0:
27:1b:d2:79:26:0d:97:97:a2:a4:94:9d:70:66:c6:f4:39:21:
00:95:b8:0c:09:79:47:c5:8d:99:6b:82:04:07:0d:23:a3:6f:
63:a4:9d:1b:ff:cc:a0:8d:d1:7a:88:8d:47:b7:74:b1:12:c0:
d2:bb:0a:84:f1:1c:52:b6:c7:bf:43:a9:9b:d5:b9:5f:6f:1b:
bb:ec:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:04 2026 by rpki-client