Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File: VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier: e5O5gZEb0do8dC56514BEDWkKUQOuxSvBDGc6k0ZlH0=
Subject key identifier: 84:1B:7F:CA:F8:F3:84:05:C4:28:E4:2D:BB:36:79:B9:F6:3E:08:EA
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer: /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial: 019CA9B39F8D04EDAC1C0B72097FC4EEC688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number: 0957
Signing time: Sun 01 Mar 2026 14:00:47 +0000
Manifest this update: Sun 01 Mar 2026 14:00:47 +0000
Manifest next update: Mon 02 Mar 2026 14:00:47 +0000
Files and hashes: 1: 8nI5XphuKEFYn2qpBVoD2ClJd40.roa (hash: c3cddBuV2MILIsaSSUtkvwu3f9bCRyo6z910eiwVKSY=)
2: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: /Wv7B923hTdxgzEuxkBIj4OxPDLtLX+TBJs135aC4TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9f:8d:04:ed:ac:1c:0b:72:09:7f:c4:ee:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
Validity
Not Before: Mar 1 14:00:47 2026 GMT
Not After : Mar 2 14:00:47 2026 GMT
Subject: CN=841b7fcaf8f38405c428e42dbb3679b9f63e08ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:25:da:84:8b:55:26:48:9c:61:d0:0b:af:
5b:ff:64:47:db:84:ad:37:e6:de:7d:17:6b:65:ab:
9b:b8:f9:18:5e:2e:af:fe:c8:e8:65:96:62:99:19:
d9:8c:df:10:f2:14:bb:fe:7d:6c:82:b2:0f:01:41:
00:a7:e7:62:dc:1a:8d:a1:cd:70:ac:76:05:c2:42:
49:28:93:bf:1d:eb:ab:2e:3d:53:82:43:92:c7:35:
87:8a:32:88:23:09:af:e4:22:5a:de:5d:94:1a:b5:
cf:a5:68:fc:79:21:36:3c:7c:29:eb:d0:cc:e1:0b:
fb:1a:c9:1b:4e:23:73:39:7f:98:49:36:60:c4:ed:
eb:f0:49:ba:3e:12:6a:e8:62:aa:95:78:f5:5e:93:
d6:14:d4:3e:d0:7c:c0:d7:10:03:d2:5b:40:6b:96:
04:91:3f:91:1e:f8:1e:29:db:bb:ac:3f:46:c2:d1:
23:f3:e5:90:ed:62:17:99:59:99:57:79:45:3c:9d:
06:6e:a0:c1:0e:e8:c0:ce:8b:f0:57:13:7a:53:b4:
43:b0:71:d0:2b:76:6e:dc:61:26:59:bf:5d:b0:ff:
92:5b:49:c7:cd:ec:c3:29:79:fa:e6:35:a9:60:51:
57:7b:04:25:5b:1a:3b:59:4d:5b:e6:6e:b7:68:0a:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:7F:CA:F8:F3:84:05:C4:28:E4:2D:BB:36:79:B9:F6:3E:08:EA
X509v3 Authority Key Identifier:
keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:09:ab:f4:36:f1:18:84:b8:1a:85:f1:89:5a:74:fe:d1:b9:
ac:c6:be:4c:13:7c:42:25:ce:1c:09:8e:ec:e2:05:65:1c:51:
e1:78:00:cf:1f:99:89:59:60:7c:dd:d8:97:e3:45:d1:36:bb:
fc:9f:92:4f:1d:f7:8b:e9:67:42:b1:a7:1d:5b:2f:dd:79:b1:
7a:aa:f5:9e:b8:f9:f0:f4:a3:12:ef:cc:ba:f0:65:dd:10:17:
02:44:3d:6c:4c:e8:27:db:86:43:2b:c4:99:a7:0f:1c:73:c0:
8c:b1:1a:12:56:3d:99:fa:ec:eb:74:49:a7:ad:4e:b6:bf:48:
1c:bd:86:9b:c6:7f:6e:29:45:8f:24:98:05:4f:c1:8c:30:b8:
1d:0b:af:07:dd:93:3b:00:01:db:be:6f:69:4c:4a:27:e6:48:
ce:64:0c:b3:ae:74:cd:33:8b:40:55:42:d0:4d:d7:57:13:cd:
49:8d:0f:0d:73:ce:ba:98:ac:1f:67:04:88:55:9b:17:97:8d:
8a:91:5e:3b:21:d3:7f:39:c2:ca:e1:0f:73:f8:73:2a:e8:b4:
11:d5:9c:0a:fb:f0:57:9c:e3:b5:b4:98:7d:1d:48:86:79:3c:
b2:67:df:f3:1e:e9:26:79:a0:4d:f4:96:89:03:c4:b3:77:45:
8c:43:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:01 2026 by rpki-client