Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: KQ6hlPVrmkJ3Ft97ryzSz+BoNR4vliD4XAW2Cg7UoGU=
Subject key identifier: BF:91:EA:D9:98:EB:95:97:A0:7F:8C:13:73:62:39:2A:37:41:75:EB
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 019D9AABC3E66AB09AA5C917415C349BC5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 04DC
Signing time: Fri 17 Apr 2026 09:00:41 +0000
Manifest this update: Fri 17 Apr 2026 09:00:41 +0000
Manifest next update: Sat 18 Apr 2026 09:00:41 +0000
Files and hashes: 1: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
2: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
3: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: SRLv1As3Nai4Fz9f7r8vm2XzJGvcquoCpw60moks1VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c3:e6:6a:b0:9a:a5:c9:17:41:5c:34:9b:c5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Apr 17 09:00:41 2026 GMT
Not After : Apr 18 09:00:41 2026 GMT
Subject: CN=bf91ead998eb9597a07f8c137362392a374175eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:01:f4:f3:ed:54:c5:4b:4d:40:c4:dd:ad:
4f:18:c6:0d:d6:dd:e0:f8:97:9f:96:70:31:37:0a:
44:e8:dd:d0:23:29:4b:77:2d:3a:96:c6:05:f6:ed:
11:c9:1f:66:ef:d1:72:c6:9a:ff:be:83:b7:1d:ce:
6f:17:c5:67:28:b9:55:d5:64:42:29:7f:db:ff:72:
62:4e:31:12:42:67:61:a7:af:60:33:17:20:b1:1e:
40:c9:fb:2d:df:99:45:55:61:f3:94:a2:38:fb:12:
6f:0a:b8:5f:d1:0f:d1:2e:3b:c7:9b:76:60:23:91:
5b:35:26:18:67:c6:b7:80:02:13:46:c8:9e:8a:5f:
24:0a:4a:63:3d:d5:b9:44:29:a6:56:f4:1e:5b:32:
4d:38:44:ae:56:eb:99:d0:2a:79:db:8e:6f:a3:02:
40:63:49:1a:f9:bf:b2:db:43:cc:82:15:90:0d:61:
c7:bc:cd:4a:6f:16:91:42:53:20:cf:8a:25:85:26:
e9:92:99:ff:f9:9a:70:98:09:bf:b3:81:c0:75:87:
35:7d:50:70:00:b3:3b:57:e3:4c:74:e0:d5:23:7e:
d6:07:e6:c1:79:85:17:cd:96:53:4e:57:82:61:4d:
19:7d:9f:38:25:46:39:df:55:a1:86:2d:05:91:14:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:EA:D9:98:EB:95:97:A0:7F:8C:13:73:62:39:2A:37:41:75:EB
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e2:57:b1:fb:7c:4b:08:db:c2:f5:ce:1f:f4:ca:74:b7:f5:
6f:a8:d4:53:13:d9:5d:12:92:d5:b1:bb:2d:28:30:25:ea:80:
6c:37:a8:95:e6:38:2d:19:00:f2:a5:3d:47:4b:64:8e:6c:a9:
25:3b:68:de:5e:79:65:5f:de:6d:b1:5b:45:9e:39:a8:d9:44:
d1:83:be:2e:02:b6:b7:ae:f7:eb:5e:78:1d:c2:82:b0:fe:34:
9e:c8:4b:b2:6d:9e:dd:1d:60:d6:e5:d8:cf:c3:c6:46:65:d7:
70:74:19:b3:24:c4:f8:2b:c2:a2:0e:3a:06:6f:17:1c:1f:d2:
45:6b:29:6a:82:51:ba:c5:f8:f1:af:95:4b:62:f2:52:2d:1c:
2e:36:93:9c:11:2d:e4:e1:3d:d3:2d:ae:04:39:c0:1f:a0:18:
47:c5:04:ee:50:e7:41:48:2d:9c:52:b3:4d:dc:70:94:49:86:
16:e0:d1:dc:35:c6:81:59:ee:02:5f:33:57:e3:ab:c0:dd:47:
29:ed:15:7b:76:46:91:c2:ae:ad:79:8b:aa:ad:62:0c:79:1e:
c4:7d:97:de:22:12:69:d8:a8:bd:ea:fb:e1:fa:61:b9:5f:60:
55:67:f3:23:3a:3d:25:aa:e9:1e:e1:1d:1c:0f:71:f6:8c:63:
13:ba:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:18 2026 by rpki-client