Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
File: VgYV3qcNgLblEAE38HRCF7eHopw.mft (raw, json)
Hash identifier: U089wr9k+5uxVsC71sVt+IjT10H4O/XzEco5T5dLW0A=
Subject key identifier: 71:1F:4B:81:7D:92:72:CE:96:2A:8D:0A:C3:79:1C:FC:7C:6F:65:9E
Authority key identifier: 56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
Certificate issuer: /CN=560615dea70d80b6e5100137f0744217b787a29c
Certificate serial: 019D9BF5BABA4429B1A6252806A358A37530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
Manifest number: 68
Signing time: Fri 17 Apr 2026 15:01:05 +0000
Manifest this update: Fri 17 Apr 2026 15:01:05 +0000
Manifest next update: Sat 18 Apr 2026 15:01:05 +0000
Files and hashes: 1: VgYV3qcNgLblEAE38HRCF7eHopw.crl (hash: then+RvL4VsJYAg4D/2phUNMpeouM2m8dqphmVZbrrM=)
2: mXn0MKmHDy1aT83WYfadFmq0_G4.roa (hash: R2FDSVyHViAgLea0vkfodWf9cM1uOy5XpY9Z9jCfAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:ba:ba:44:29:b1:a6:25:28:06:a3:58:a3:75:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560615dea70d80b6e5100137f0744217b787a29c
Validity
Not Before: Apr 17 15:01:05 2026 GMT
Not After : Apr 18 15:01:05 2026 GMT
Subject: CN=711f4b817d9272ce962a8d0ac3791cfc7c6f659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:2c:23:1f:a4:cb:bd:9c:e9:40:1c:56:f4:
c3:bc:0b:e5:5e:ea:d5:6d:57:8b:24:bf:45:f9:24:
c1:7e:a3:d8:91:ad:00:95:11:7f:df:ba:21:5b:8c:
b2:b2:ef:82:0f:f8:50:da:8d:d8:a0:07:0a:fc:85:
f2:79:f9:6c:bd:1a:01:c5:6d:34:6a:45:ba:ce:22:
42:e9:64:c1:c5:8c:02:e5:4e:3e:7c:ab:73:1b:5e:
b6:25:53:d8:06:3d:d1:db:d9:48:61:cd:8b:05:d3:
9a:42:7b:3c:b9:a0:1a:95:5a:97:38:08:78:84:d1:
0c:7f:b1:42:cf:e7:f0:1c:34:cf:bb:5c:d7:2a:88:
e1:33:e5:53:ff:27:a3:3d:8c:0c:6c:51:2d:3a:5f:
85:7c:e7:5a:67:b8:66:24:77:18:2c:85:bd:8d:bc:
ca:20:a7:d9:2a:b7:3e:f8:d3:43:04:fa:ef:f7:3b:
fa:51:34:d7:cd:36:53:90:7a:65:e9:38:04:b2:3b:
50:23:ef:46:8d:8e:aa:e2:a4:2f:56:a1:f9:83:a0:
e1:4f:3d:76:63:66:f9:e0:1b:6a:7a:8b:e3:17:cf:
07:5f:e8:93:01:32:d1:04:2f:8b:a2:f2:d4:27:db:
5a:f6:41:32:5b:c4:e7:a8:c6:da:36:c4:b4:58:1a:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:4B:81:7D:92:72:CE:96:2A:8D:0A:C3:79:1C:FC:7C:6F:65:9E
X509v3 Authority Key Identifier:
keyid:56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c3:35:88:1b:f0:ba:a9:7e:d6:66:ee:81:ba:70:88:d4:ec:
8b:1a:41:70:45:eb:c5:2d:cd:3a:25:1f:d7:ee:3c:dc:b5:02:
82:51:84:c9:f9:55:c6:cc:72:05:a5:ae:e4:59:6c:f0:f0:11:
da:28:58:8b:f8:e8:89:f6:1d:26:2c:23:95:f5:dd:7f:ac:c2:
88:ff:d4:c1:28:89:01:90:d0:fc:e1:20:9a:cd:07:ed:e0:d9:
3f:6c:9b:b6:73:c3:b6:27:f4:52:1f:85:a2:51:2c:72:07:0d:
75:d3:26:ef:1d:29:07:3b:4e:94:c1:a4:5f:dd:3c:5f:54:29:
a7:76:84:87:5b:ac:f0:cb:be:fb:84:bd:d5:d8:8a:d9:0f:d8:
b4:3f:46:f9:bf:3d:d2:37:53:69:89:cf:67:c6:03:a6:18:53:
35:ce:9e:47:bb:3c:7e:5c:d2:27:c4:93:fc:51:ff:bf:6c:07:
bb:ac:51:e7:62:78:dd:5e:91:a2:58:c5:8e:30:30:9f:18:f4:
53:f7:4b:8b:21:e4:f5:15:59:50:67:fb:7c:a5:86:f7:36:d1:
91:2d:0a:27:ab:ec:6b:e1:e8:b0:be:c1:6d:b4:f5:4e:ce:34:
83:0d:ca:c9:b4:f2:c0:b9:cc:22:31:ac:d5:3e:17:9e:c9:d1:
88:fb:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:48:15 2026 by rpki-client