Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: bUJBE2uMY18jGdG4TStN0Z8IgJKDSgvtLnH6KYm2ilI=
Subject key identifier: EF:59:00:CB:6D:40:97:0B:38:EB:98:AF:AA:0C:DC:C4:01:F1:A2:F3
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 019CAB6BA78D6418CB6E682EF19883425235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 06C1
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: gciRclKteTk7mh8QLXeGn/ModH2SHtDMHFbINBKySu4=)
2: XLYP7p5RdRYcFYlzrcGWJvzM9yA.roa (hash: tHVjpzIZv9hKwBcDf9rhYgJAorYOKfN7gsmTFS3LleQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a7:8d:64:18:cb:6e:68:2e:f1:98:83:42:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=ef5900cb6d40970b38eb98afaa0cdcc401f1a2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:12:e4:ae:e2:aa:bd:fd:b9:f0:f4:27:c0:
ec:69:f9:08:ec:f0:e1:85:e6:a0:db:db:de:49:b4:
b9:4c:a8:3f:8b:95:e9:24:32:18:41:95:02:59:b0:
fb:f7:f6:30:b6:cd:48:52:86:f7:f1:5e:69:72:4e:
a7:9d:3d:56:01:41:20:2a:08:7e:2b:61:11:c8:2e:
99:39:1d:9f:7e:f1:05:2f:4b:7c:bb:43:34:cd:fa:
91:26:79:0f:66:2c:35:3b:d7:8c:53:f9:df:a1:04:
13:df:87:e9:9a:d7:63:19:c3:a7:9b:da:1b:da:42:
28:de:71:a9:52:c8:37:d5:4c:fb:1f:12:53:10:e4:
7b:de:3a:a1:7c:9b:3a:57:a8:91:ff:2a:d1:e5:ef:
e2:59:61:75:26:2f:58:7b:8e:9f:d4:87:b3:93:b3:
2a:10:27:a1:c1:94:97:d1:d9:d7:9e:62:50:c0:2a:
37:35:87:16:0c:7a:cb:61:82:af:ee:6c:60:6f:88:
e3:3c:8a:5b:94:f3:d2:3b:60:f2:05:12:7e:a5:8e:
bb:91:08:de:9f:d5:f0:15:75:4e:f7:2a:60:4e:7d:
de:b7:da:94:06:57:23:7e:5e:d1:f6:2e:21:89:11:
4f:dd:a6:0a:b1:9b:44:f0:e9:b8:09:63:77:26:b8:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:59:00:CB:6D:40:97:0B:38:EB:98:AF:AA:0C:DC:C4:01:F1:A2:F3
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:92:d3:7d:b0:be:e5:d0:56:96:8f:a4:d8:9b:76:43:9e:
42:37:f8:9e:e9:ce:d4:6f:cd:b1:dc:ad:fa:5e:17:95:bf:2a:
a1:ee:ec:7e:90:b8:35:ce:d0:2a:dd:b3:52:ec:e6:82:aa:ea:
54:b1:a6:6d:8d:f4:f9:0d:31:1b:07:28:c1:04:b5:3e:14:fc:
91:a8:83:f9:4f:f3:0d:63:3c:5e:7b:5c:bf:33:72:79:58:01:
29:57:33:41:ad:76:4d:4c:af:a6:87:f2:d4:fa:4e:bd:e5:3f:
43:5d:f7:b6:d0:2d:f5:ad:bb:f1:f6:15:51:10:53:38:67:4b:
27:79:3c:99:cf:76:02:84:d6:bb:12:cd:58:49:37:f1:2d:8e:
f7:d6:16:52:40:2c:c4:40:90:4a:30:0c:7f:04:6f:4a:fb:7e:
52:8f:20:ae:e7:c1:4c:e4:79:47:49:d7:1c:2b:34:a9:c3:30:
81:ad:6e:1c:e8:80:0f:b3:5f:7e:a6:ac:ae:34:c7:09:b5:a4:
d4:5c:e2:28:67:81:31:44:4a:f5:50:0b:9e:37:bf:d5:c7:b9:
1d:bf:90:7a:96:8f:b4:60:94:be:d4:bd:61:bd:c8:cf:ad:74:
44:25:cb:41:e8:94:a9:aa:96:fd:46:b4:e9:fe:a5:da:11:4b:
94:a1:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:08 2026 by rpki-client