Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File: VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier: l+ppfFk+B/OzXaBL5PwPKCh1q8ke40p9WgUfA/In6kY=
Subject key identifier: E4:4B:A7:65:59:F0:E7:97:4D:EF:2F:64:C7:28:05:E8:BC:AC:DD:11
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer: /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial: 01A0C28D07A5B4DD836D5A4B2FB595BFEB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number: 027C
Signing time: Mon 21 Sep 2026 06:00:17 +0000
Manifest this update: Mon 21 Sep 2026 06:00:17 +0000
Manifest next update: Tue 22 Sep 2026 06:00:17 +0000
Files and hashes: 1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: y1IJZGpY1v12cxlqB7DHuQ146vecR9rwPIoj6rxHJFQ=)
2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:07:a5:b4:dd:83:6d:5a:4b:2f:b5:95:bf:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Validity
Not Before: Sep 21 06:00:17 2026 GMT
Not After : Sep 22 06:00:17 2026 GMT
Subject: CN=e44ba76559f0e7974def2f64c72805e8bcacdd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:8f:de:c5:8e:21:b6:d7:0f:34:5f:c2:15:
b5:ed:49:2f:8f:f1:46:5d:3e:e2:2b:ed:6b:d5:d8:
fd:1b:13:85:53:d3:bd:47:39:e1:08:e4:27:1c:70:
46:15:00:b2:8d:6f:a1:f5:0c:f5:0e:a9:47:a2:5d:
2a:00:12:a3:c3:94:e2:ba:89:d2:7a:4e:92:77:b0:
d8:06:f3:78:6b:14:20:b1:21:64:68:5f:3c:10:05:
2b:f1:5b:4a:3f:07:59:ed:4c:07:53:39:f2:f9:0f:
a4:af:ac:6f:64:a6:14:bb:06:63:88:66:87:e3:df:
6c:ca:9e:59:b8:20:fb:b8:0d:54:a1:c9:6e:6f:d6:
8b:06:6a:3f:43:e2:45:df:81:ce:f2:95:cf:23:4a:
b2:f1:60:bc:26:31:3c:a6:61:19:44:21:2d:57:62:
2e:eb:79:83:32:20:09:cb:c7:70:cb:10:ee:8b:4b:
ed:f6:fa:17:ef:06:53:7d:42:0e:94:7e:4b:37:82:
57:05:77:72:7b:1b:27:07:91:e3:cf:15:4d:e9:0a:
2c:53:da:70:ff:f4:d7:d4:44:2d:b5:3e:db:39:f4:
ae:31:ec:b7:cf:a9:5e:1b:de:ea:1c:46:78:9e:5a:
d9:8e:9c:c8:51:b4:31:43:d3:04:db:fd:9f:f3:93:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4B:A7:65:59:F0:E7:97:4D:EF:2F:64:C7:28:05:E8:BC:AC:DD:11
X509v3 Authority Key Identifier:
keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ac:13:6f:47:4e:32:a1:dd:58:b4:0d:6a:2b:85:74:cd:06:
5c:67:61:48:81:d0:df:0a:9d:97:cd:91:f2:8b:90:fd:bd:b2:
af:3d:fe:1f:b0:0b:49:90:b3:18:09:bb:7c:89:10:cf:dd:cf:
de:d1:05:59:5f:73:c9:1b:64:84:a8:15:9d:5d:d6:73:f4:6b:
64:7c:c5:1e:85:e5:35:d0:ff:b5:09:00:ba:9a:c3:80:be:d4:
ab:83:11:95:3d:09:23:eb:b3:7b:ed:e5:5c:44:32:9f:d0:32:
34:32:c5:64:65:7d:de:1d:dc:09:8a:54:cd:66:c9:95:34:51:
17:56:eb:3d:64:a0:19:5a:68:f5:b7:e0:c8:15:89:4a:ae:00:
8d:c6:86:91:96:be:47:c5:19:c8:94:f4:65:ef:c1:ef:d9:18:
70:05:5a:33:8e:e6:c5:7b:53:38:94:c3:fe:d1:ad:1e:fb:14:
18:95:3e:15:26:e5:e5:2f:1d:61:b2:09:f7:b9:ff:92:72:10:
04:e6:31:4f:a5:0d:5a:c4:41:72:68:57:ee:9f:eb:1c:2f:7a:
5c:e4:43:62:14:9c:77:30:ee:a9:6a:a4:e1:de:e0:ef:5a:a1:
dc:e0:fd:a5:a5:78:b5:65:64:f7:82:63:fd:9e:63:c6:36:4d:
f0:89:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:15 2026 by rpki-client