Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: kB8xV8CdQg2aJm3Dlsx+Gwxsy6FUXrWvJgkbd6RE3dE=
Subject key identifier: CC:AA:BF:6E:64:04:1B:2E:DB:D0:47:06:5A:3F:3E:B8:4B:38:CB:3C
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 019CAF10E2BD15334535C33D44C58BD0939A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 0462
Signing time: Mon 02 Mar 2026 15:00:45 +0000
Manifest this update: Mon 02 Mar 2026 15:00:45 +0000
Manifest next update: Tue 03 Mar 2026 15:00:45 +0000
Files and hashes: 1: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
2: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
3: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: XinELbgBIrYFQ5VU3mxNSNkqni8S3bikyd2ac4JpRw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:e2:bd:15:33:45:35:c3:3d:44:c5:8b:d0:93:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Mar 2 15:00:45 2026 GMT
Not After : Mar 3 15:00:45 2026 GMT
Subject: CN=ccaabf6e64041b2edbd047065a3f3eb84b38cb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:51:c3:68:d8:93:b5:0b:66:cb:32:2d:52:
67:e0:b2:73:36:50:db:82:bd:8e:4d:68:ec:75:7a:
e5:f2:fe:69:d0:28:5a:81:e1:2a:fd:31:46:57:60:
16:f3:e5:97:64:33:41:38:e7:ea:3d:8d:02:3a:f2:
43:1f:81:6f:19:fa:18:6e:6e:77:7d:a3:55:62:f5:
31:78:c9:e3:0e:56:5d:01:21:94:6f:36:2a:b0:8d:
00:e0:e9:71:9d:b7:55:66:39:96:17:9b:30:53:0b:
84:4d:dc:cc:2f:19:eb:18:4d:99:3c:4e:d5:1d:9e:
27:07:db:a4:d7:75:a5:bb:75:56:36:67:6a:e1:a9:
73:ce:5e:07:34:b1:41:f1:2e:fb:27:97:41:85:f6:
89:27:87:63:f8:54:54:5e:f3:b6:fc:15:0c:3e:22:
ee:66:a8:47:da:38:aa:00:af:bd:23:91:ab:80:39:
f2:76:b5:ac:71:23:26:a6:88:29:7b:3f:82:df:20:
2b:79:c0:0b:d4:4c:d6:46:a7:42:eb:09:6e:97:3e:
17:0a:0d:60:54:32:9c:46:72:ab:ec:6b:da:50:65:
f5:14:3b:47:92:b5:6c:64:18:d9:8a:7f:b4:d0:fc:
94:bd:1d:c0:56:8d:fd:3f:51:b5:94:ff:41:56:53:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:BF:6E:64:04:1B:2E:DB:D0:47:06:5A:3F:3E:B8:4B:38:CB:3C
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:33:75:5f:b2:e5:94:54:07:fe:dd:0e:b3:51:ac:1d:93:40:
3e:06:ba:3c:be:fe:f4:95:15:cf:f1:87:3d:df:fa:b9:f9:47:
aa:2e:5c:ab:45:f8:5d:ff:53:dc:7c:61:ec:0b:3a:ae:2e:8f:
53:ee:a3:00:2b:43:1a:43:3d:90:45:33:7c:35:94:69:fd:61:
23:88:4c:ea:54:8e:77:f1:e5:e9:62:f8:e9:8a:41:d2:f6:ae:
09:3e:95:5a:55:81:a7:b7:01:87:48:03:78:ed:81:17:94:25:
5b:f9:1d:fa:a4:0e:55:89:b8:68:2a:66:3d:49:d1:34:0c:78:
2d:98:2f:4f:2d:32:e2:58:c1:43:ea:44:64:7f:5d:69:4e:f1:
04:4e:82:75:93:a3:32:9b:22:0a:40:42:aa:d1:dc:18:03:4d:
d0:13:9e:8d:38:64:71:67:2a:39:2e:a5:8e:c7:04:c0:86:01:
8c:88:3c:86:88:76:47:07:72:02:0a:a5:9f:b7:94:9a:e9:f1:
2c:9f:20:7e:aa:8e:43:c6:1b:bb:56:78:5a:af:38:66:f1:86:
1f:36:53:50:f9:38:f3:68:cc:51:a0:c8:d6:75:60:88:dd:3f:
94:af:d7:ab:e3:84:04:d0:18:7e:63:4b:7b:5d:89:28:92:07:
79:4d:a0:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEOK9FTNFNcM9RMWL0JOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTg1MjFlODBmMmYwNzFhMzEzODViY2RmYmMzMWE2MjFj
NjhmOTQwHhcNMjYwMzAyMTUwMDQ1WhcNMjYwMzAzMTUwMDQ1WjAzMTEwLwYDVQQD
EyhjY2FhYmY2ZTY0MDQxYjJlZGJkMDQ3MDY1YTNmM2ViODRiMzhjYjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OBRw2jYk7ULZssyLVJn4LJzNlDb
gr2OTWjsdXrl8v5p0ChageEq/TFGV2AW8+WXZDNBOOfqPY0COvJDH4FvGfoYbm53
faNVYvUxeMnjDlZdASGUbzYqsI0A4OlxnbdVZjmWF5swUwuETdzMLxnrGE2ZPE7V
HZ4nB9uk13Wlu3VWNmdq4alzzl4HNLFB8S77J5dBhfaJJ4dj+FRUXvO2/BUMPiLu
ZqhH2jiqAK+9I5GrgDnydrWscSMmpogpez+C3yArecAL1EzWRqdC6wlulz4XCg1g
VDKcRnKr7GvaUGX1FDtHkrVsZBjZin+00PyUvR3AVo39P1G1lP9BVlOKvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyqv25kBBsu29BHBlo/PrhLOMs8MB8GA1UdIwQY
MBaAFFboUh6A8vBxoxOFvN+8MaYhxo+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMt
MGRhMGYyYWQ0Njg4LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMtMGRhMGYyYWQ0Njg4
LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTN1X7Ll
lFQH/t0Os1GsHZNAPga6PL7+9JUVz/GHPd/6uflHqi5cq0X4Xf9T3Hxh7As6ri6P
U+6jACtDGkM9kEUzfDWUaf1hI4hM6lSOd/Hl6WL46YpB0vauCT6VWlWBp7cBh0gD
eO2BF5QlW/kd+qQOVYm4aCpmPUnRNAx4LZgvTy0y4ljBQ+pEZH9daU7xBE6CdZOj
MpsiCkBCqtHcGANN0BOejThkcWcqOS6ljscEwIYBjIg8hoh2RwdyAgqln7eUmunx
LJ8gfqqOQ8Ybu1Z4Wq84ZvGGHzZTUPk482jMUaDI1nVgiN0/lK/Xq+OEBNAYfmNL
e12JKJIHeU2gJg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:52 2026 by rpki-client