Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File: VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier: c5UHOXbQJufSDpqmtjNIfYf+bLwNHG6UxCASB+O5mjs=
Subject key identifier: 1D:E6:74:D8:56:1D:49:03:EF:50:2E:E2:3A:A0:84:7D:3C:7D:C0:2E
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 019CAD22752BF11AF81372D5EDB0601A2343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number: 0FEF
Signing time: Mon 02 Mar 2026 06:00:42 +0000
Manifest this update: Mon 02 Mar 2026 06:00:42 +0000
Manifest next update: Tue 03 Mar 2026 06:00:42 +0000
Files and hashes: 1: Axm6d1alqEnfu0vZueA3GQcIATg.roa (hash: +dNIyPFCVGYMfpVf51l51gN+nP6OIQk6gVR+KK+wc/U=)
2: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: E9hFG7wawMZG4Vq5shT4spihCk89XkjQqXsWUIMqPcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:75:2b:f1:1a:f8:13:72:d5:ed:b0:60:1a:23:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Mar 2 06:00:42 2026 GMT
Not After : Mar 3 06:00:42 2026 GMT
Subject: CN=1de674d8561d4903ef502ee23aa0847d3c7dc02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:93:ef:c1:93:18:dd:a5:f8:24:e8:c6:de:
53:45:df:5a:e9:3c:0c:ea:bd:ee:57:9e:76:1e:70:
0c:15:75:38:29:e5:0d:c5:d8:95:7d:29:bd:a7:95:
e0:71:7f:ce:30:a9:b7:54:e5:8a:62:4d:e8:2b:d9:
15:97:62:d3:3b:17:80:34:e2:38:c4:f9:fb:64:36:
6c:04:fe:45:84:ce:92:93:43:85:f5:72:bc:c9:d1:
15:10:f6:0e:96:ea:8f:c5:0a:7d:a1:ca:37:f3:02:
b6:cd:d9:b3:95:c1:3a:04:63:f8:03:62:1e:3c:f4:
9d:00:1b:ac:58:2d:b6:a2:3f:97:4d:36:e9:1e:20:
8d:33:f1:30:ab:a3:f9:64:7c:fc:2f:f5:3d:a1:18:
c5:cb:96:e8:94:59:aa:ae:53:56:28:5d:0b:31:c8:
2b:7c:74:40:6c:06:11:ac:0d:06:f1:51:98:9d:2e:
38:f8:40:7d:b4:cd:f3:09:da:c7:cb:8c:18:82:f8:
d1:87:05:72:ef:95:96:55:92:3d:98:86:56:10:5a:
1f:05:c3:49:1b:da:58:96:d0:3e:90:b1:ee:94:87:
47:e4:8c:b1:a8:a4:bc:4d:d9:d4:4e:37:a2:86:23:
d2:5b:1b:50:23:05:3a:bc:45:d6:e6:13:35:8e:96:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:74:D8:56:1D:49:03:EF:50:2E:E2:3A:A0:84:7D:3C:7D:C0:2E
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:09:84:d0:bf:f7:0c:33:d5:18:0a:fc:42:f1:ab:b8:be:59:
ef:e4:89:78:ab:8d:4c:76:52:48:48:61:0d:dd:d0:0b:dd:6f:
a4:2f:b2:3b:f5:9f:91:3d:43:6f:f0:c9:6b:61:d9:c3:00:b2:
07:fe:6b:33:67:30:1c:84:18:be:37:4d:60:d9:94:d0:e3:3b:
fa:11:30:55:fd:3e:0a:25:9b:30:3c:d2:be:18:32:87:6a:b5:
a0:22:92:62:79:3d:85:ad:86:4a:76:94:68:66:07:0b:39:b2:
c8:25:7e:dd:fd:c0:9b:92:08:36:e0:f0:83:dd:5a:23:ef:58:
f4:44:7f:0e:f5:5c:3f:87:96:bc:26:71:04:e6:aa:3d:75:28:
70:a9:ff:9e:86:2c:ea:46:98:6b:87:4e:96:81:2f:3b:85:e5:
52:9d:d3:ca:c6:68:ab:36:4e:8e:ef:4c:89:3b:1b:b1:fe:3d:
37:db:58:f6:45:74:b4:b3:fc:09:ae:31:33:fd:af:32:cf:ec:
59:13:6a:bb:e3:50:4f:be:69:6e:1d:91:01:d6:fd:d5:2e:5f:
d8:ce:6e:7b:b6:66:e0:e2:1d:20:83:66:d6:40:70:79:bb:8a:
a8:01:69:03:8c:93:cf:48:c3:c1:cc:3b:6f:ff:18:fd:42:bb:
f8:dd:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:22 2026 by rpki-client