Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File: VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier: NFKjOu4IfJgbUh1N2fUy2fWrThaWkf4uF3DY00sYXo0=
Subject key identifier: DD:B7:75:B9:97:83:A9:1E:80:04:F2:1E:C7:9B:07:27:AF:B9:E1:5D
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial: 019D992B948B9AAB251A53FAFDFE2AD971F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number: 10EC
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: qkQKBiEUOkLP9xPdiXE3iFkb5AZft5+SvHX9NxHlTNw=)
2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:94:8b:9a:ab:25:1a:53:fa:fd:fe:2a:d9:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=ddb775b99783a91e8004f21ec79b0727afb9e15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:89:9e:ee:86:be:f8:6f:6a:fe:f7:8c:6b:
7d:b4:93:07:37:75:21:80:79:6d:2b:ba:23:4a:4c:
31:95:f0:a5:e3:03:d9:2a:a8:87:56:4a:38:b6:50:
60:21:98:20:d6:8e:59:54:96:f4:ce:89:2a:1f:04:
15:58:1d:9b:a2:e7:0a:b7:29:a5:96:da:89:10:b1:
dc:f6:fc:cb:33:7f:34:b1:8e:94:17:dc:50:d5:c2:
ca:9b:1c:2b:5b:8a:3b:7b:49:06:50:91:a1:89:d3:
d4:6a:e9:2d:43:7f:cf:6a:f4:74:4d:bb:be:4e:50:
18:03:d9:e8:da:ff:d4:9b:d7:67:2d:89:81:7f:db:
52:4a:65:3c:c2:86:8e:1a:84:a5:6b:02:ad:2e:ed:
00:5b:23:2b:44:2f:0c:c8:95:c0:ea:fd:38:de:82:
64:42:57:e2:bb:0c:05:49:61:0f:45:df:de:61:35:
ba:26:36:b1:99:5b:50:10:34:de:5a:c0:2f:a0:2c:
f2:17:79:69:17:45:a8:00:b8:f4:45:23:db:5a:67:
ab:a3:0b:3d:5e:c7:61:85:62:94:a7:0c:ef:2c:56:
61:28:1d:3c:37:36:01:fb:a2:53:19:5f:b2:fb:fc:
a8:8d:40:24:46:1f:94:dd:79:7d:2f:c0:62:24:2e:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:75:B9:97:83:A9:1E:80:04:F2:1E:C7:9B:07:27:AF:B9:E1:5D
X509v3 Authority Key Identifier:
keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:38:08:f9:27:d1:40:4e:86:fa:63:9a:3c:51:60:66:b7:
74:36:e3:53:db:36:41:f5:a5:c1:49:34:c1:44:e8:1f:22:77:
a9:10:91:b0:a9:1c:2a:13:4f:f1:f6:35:67:b1:87:c0:53:ea:
b6:74:d8:28:68:58:c6:a1:6b:5b:3c:23:12:84:14:85:48:dc:
9d:65:13:d9:f1:7a:6b:75:71:3a:5a:0c:79:f9:97:70:ce:88:
b7:4f:ad:37:cf:20:5e:d3:6c:a7:d3:a5:ac:6e:12:77:48:ab:
f8:59:87:04:13:e7:9d:fe:16:22:84:61:95:f8:cd:eb:3d:bb:
eb:e5:0f:fc:ea:ce:34:0f:ad:81:04:ac:11:8f:e5:d4:b2:8f:
2f:b5:83:eb:8b:58:8e:eb:af:12:a8:1f:e9:11:bc:60:5c:1f:
c4:a2:bd:1c:38:76:a0:cb:33:77:ab:15:3a:0b:03:c5:f6:3d:
c5:a4:29:33:68:aa:10:c9:03:f7:78:be:c9:85:26:ef:f7:85:
43:f4:30:82:49:67:69:77:87:af:e4:d0:f3:d0:06:a9:b9:af:
3f:d7:99:25:90:3f:cb:b9:f3:7a:44:17:6b:e3:63:79:08:25:
e9:3c:98:58:66:c6:4f:ab:d0:8c:ba:a7:1b:4d:c9:1e:6e:5d:
23:d7:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:38 2026 by rpki-client