Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: Sy3lkTKvo+WSM3CBW8YkrmL8uTYBcxoSk5PRmgZrjWQ=
Subject key identifier: DE:0E:F9:D9:C0:3D:B7:AB:62:69:22:76:80:2B:DF:04:FE:38:A6:3D
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019CADFEA41A9C83940C43C56E9A2E1965DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0E28
Signing time: Mon 02 Mar 2026 10:01:12 +0000
Manifest this update: Mon 02 Mar 2026 10:01:12 +0000
Manifest next update: Tue 03 Mar 2026 10:01:12 +0000
Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
2: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
3: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
4: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=)
5: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: xJFC5VhLOQ58nqYRORFmDECVyVGh526ob8VqpYXEq2o=)
6: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
7: kArbhjBH6JXdAhPlJ86iriQtuWc.roa (hash: qwu2ROVHzmSDMccd2wvWrqMZt1dYnz/7qmymWNSDMkw=)
8: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a4:1a:9c:83:94:0c:43:c5:6e:9a:2e:19:65:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Mar 2 10:01:12 2026 GMT
Not After : Mar 3 10:01:12 2026 GMT
Subject: CN=de0ef9d9c03db7ab62692276802bdf04fe38a63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8e:49:49:2d:7e:fb:72:5e:1a:2e:e3:3b:43:
59:3f:fa:41:77:23:f3:8c:b2:2f:ff:7f:55:b1:83:
a3:b4:25:91:00:30:0d:45:9b:f0:f9:71:02:a0:e8:
4b:9e:75:36:da:50:9f:ee:04:7e:d1:dd:e7:a5:fc:
6e:66:93:22:5b:f5:d2:46:e2:28:d3:34:75:42:9b:
33:30:21:a4:dc:8c:9a:7d:fa:8f:32:19:52:1f:39:
80:a8:b3:d1:c0:1f:b7:46:66:96:d1:85:d9:da:eb:
ec:c0:9d:05:84:fe:61:3d:0d:fc:a6:15:d7:e8:85:
6f:c9:5b:c8:ce:8d:8f:77:c3:20:5a:27:5f:f4:e7:
48:df:49:6c:b3:ea:76:c6:95:22:9f:47:3c:59:18:
93:61:65:28:55:69:21:ad:46:eb:99:27:be:52:4f:
14:a4:46:a3:ed:f6:39:c0:35:d9:fc:c1:7b:c5:8c:
0d:63:f1:19:fc:45:3f:15:87:ce:e4:33:c5:6d:f6:
a7:ff:5e:34:0c:8f:2c:dd:ed:2a:a9:73:c6:0e:39:
06:ad:fb:4e:d3:a0:cf:93:c7:88:99:52:e7:e2:76:
66:fa:6b:52:83:05:ad:c7:5d:a6:17:50:44:eb:65:
07:f5:14:25:52:b9:2f:ae:6b:58:81:e2:c4:b6:14:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0E:F9:D9:C0:3D:B7:AB:62:69:22:76:80:2B:DF:04:FE:38:A6:3D
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:29:80:dc:56:a5:b7:14:13:74:4a:4d:ff:ac:dc:d1:17:ff:
90:e0:fb:a2:53:77:06:eb:98:36:b4:29:c0:15:81:aa:9d:df:
90:b4:7e:a1:6a:2a:8e:d6:f5:48:25:44:d7:3a:1f:00:21:44:
c3:24:59:f1:3f:3d:df:9b:6f:0f:1c:6d:ef:f9:ef:98:41:29:
67:5c:d0:2d:d0:fc:77:2d:38:fe:82:3d:7e:0b:63:fe:b1:08:
c3:c5:74:74:01:f6:0c:87:fe:df:67:89:95:64:0c:e4:3a:47:
4a:c7:04:83:ef:03:5d:12:e2:00:e2:e5:63:72:f3:1a:56:77:
14:71:4e:09:c4:57:ae:a9:7a:85:5b:7b:1d:bb:0e:83:d0:85:
43:7e:e4:91:72:65:52:23:2c:a1:e9:42:ce:af:05:e7:2f:f4:
69:ab:c6:74:38:52:bc:e1:0e:31:a9:b8:7b:99:ce:19:08:b6:
3f:c3:93:2e:9a:5a:ab:0b:be:be:56:de:60:bb:6c:de:bb:6d:
95:16:42:6b:d7:5c:73:b9:48:31:af:37:1e:a2:ba:9a:63:b5:
2c:c8:0d:d6:82:be:f7:43:74:e3:bb:6c:f7:44:ad:0c:f1:f4:
3b:15:9d:ba:42:23:a6:d0:23:05:c6:cb:83:0e:b3:4d:7f:d4:
e0:67:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:17 2026 by rpki-client