Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: 5ha3uOSX4lonaEZ+L2BYL+bPYQe7OcqhIAn2TWJy77M=
Subject key identifier: 85:64:B4:EB:12:A1:AE:85:28:AC:19:3B:57:54:61:70:3A:10:C5:4F
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 019CAA2135F1DF96987FD2A74BE27E0BE0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 152C
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: MxmtZpT39ziVe-pzqj79_Ed_jAo.roa (hash: 4OhUHwywmDOO3mmhT6ZwnGr79zua7TEwc4pRLTJjvFc=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: +S/gA8jPLdHvgDQfU4sbpgDBcT6g2+TCs5+YSGwvL5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:35:f1:df:96:98:7f:d2:a7:4b:e2:7e:0b:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=8564b4eb12a1ae8528ac193b575461703a10c54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:7b:1d:ce:52:89:65:85:85:23:63:84:f6:
d5:20:be:0a:94:d8:ba:cf:d6:d5:8a:67:b9:e0:15:
ce:39:32:b2:db:8c:85:dd:54:70:5d:79:e8:69:08:
ca:2c:7d:26:c5:b9:a0:14:e7:8e:09:af:e2:e1:76:
54:86:14:c1:68:ce:61:e4:16:60:10:77:37:8d:ff:
c3:74:20:53:1f:70:4d:1e:6b:2e:cd:8a:22:08:e2:
36:44:ed:83:29:73:35:7d:18:fb:83:fa:72:1a:7a:
f7:07:87:e2:ce:14:db:bb:b9:f6:8c:88:85:eb:08:
eb:6f:eb:3c:02:12:d2:c4:45:db:7c:d0:b6:5b:06:
02:98:5c:62:aa:5a:b4:c2:99:56:c4:5d:de:31:f7:
e6:d9:5c:4f:20:7b:93:fe:16:77:b6:95:a4:82:6e:
32:0c:78:08:a1:47:ec:45:20:59:df:4e:02:9c:cc:
6a:56:3f:4a:fe:a6:fd:fb:88:1b:71:6f:11:79:94:
38:1c:3b:93:55:1d:0d:4e:07:ec:83:ee:bc:fa:f8:
f9:e3:f2:0b:05:1b:ce:48:2d:70:43:f9:ba:0a:d6:
77:97:3c:95:ce:bd:d6:04:fe:87:85:46:ff:c8:fe:
15:50:35:a3:67:e9:f7:bc:b9:40:08:cc:49:54:b1:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:B4:EB:12:A1:AE:85:28:AC:19:3B:57:54:61:70:3A:10:C5:4F
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b4:0b:34:a2:ae:69:4d:16:ea:6e:2d:62:ca:66:f9:f2:c5:
f1:1d:e6:45:39:9f:2e:50:3f:ad:71:9f:fe:eb:91:ef:f2:5e:
34:e9:b5:d6:d6:e9:00:1f:a8:ba:a1:d6:48:c0:1f:2f:7e:2b:
a5:09:b3:7d:09:0b:f8:4a:c4:67:d5:34:a4:e3:ca:2f:ed:0b:
9d:88:79:ce:c7:3f:1a:f6:62:2a:91:20:58:f3:c6:a3:b2:2c:
ba:5a:fa:56:c3:60:c3:ae:97:5d:97:e8:54:33:32:9c:cc:b6:
06:1c:13:9e:d0:c7:c4:79:e6:83:77:98:37:55:00:dc:d8:8a:
12:36:61:7c:9e:5f:09:a5:87:e3:57:93:28:08:6b:d1:eb:ed:
eb:50:37:87:99:e1:b1:09:d6:0a:3f:29:34:c6:ee:96:c5:60:
38:11:8d:fc:60:a9:bc:03:10:de:f1:2e:87:4e:98:ec:5a:df:
d1:07:6a:9b:cf:1c:e4:58:ee:34:80:2a:b4:56:cc:14:ab:e7:
d7:b4:c0:a8:aa:02:0f:91:02:04:4f:6a:02:1d:39:5a:ff:e1:
ff:2b:28:77:70:b6:aa:09:ad:16:8f:c5:82:ea:0a:53:31:9b:
d2:c7:1a:fc:01:bd:99:7c:e2:ff:57:36:06:f9:47:14:ac:1a:
4f:1b:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:05 2026 by rpki-client