Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: Yp//u+aMfBcoAkQa0LIZWOYTxHahl2BDTrDnu4XetqM=
Subject key identifier: 28:CF:47:CC:B7:32:22:8C:A0:48:97:67:A1:56:3F:9C:CB:62:2D:38
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 019CAD5A5110FF690B3C2959EF2D5F53E4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:01:43 +0000
Manifest this update: Mon 02 Mar 2026 07:01:43 +0000
Manifest next update: Tue 03 Mar 2026 07:01:43 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: WMHLJwpkE4BOmzMeKos6cDASrpjm6f2kthZv8gjX3h4=)
2: mzMqmoVSIFuCLCPTGJNgkppjofc.roa (hash: wetUFpoO1LIZACM6xLS3nZwdIp4jjp+fdNMN2abBvwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:51:10:ff:69:0b:3c:29:59:ef:2d:5f:53:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Mar 2 07:01:43 2026 GMT
Not After : Mar 3 07:01:43 2026 GMT
Subject: CN=28cf47ccb732228ca0489767a1563f9ccb622d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:db:2b:26:db:42:1d:2f:af:01:95:50:ab:
d8:57:34:08:ef:e9:e5:f8:b1:a8:3f:16:8b:4f:01:
3a:5a:47:8f:08:41:f9:53:0a:49:52:f6:29:b7:e9:
8f:68:77:56:c2:eb:63:94:19:da:86:50:20:2a:2f:
3a:db:dd:8a:7e:48:21:45:8e:f3:c8:3f:54:24:f8:
48:04:14:f4:03:c8:65:79:04:59:48:fc:c9:ca:dd:
ae:6f:88:7e:e2:45:a4:b3:9e:29:1a:4c:f7:8b:a5:
44:09:53:ec:bc:7f:27:f4:f5:ba:a6:35:cb:e3:ae:
1c:52:09:93:40:22:01:52:e0:43:2a:bb:05:28:8d:
be:91:66:f8:9e:2e:09:ab:67:00:b7:29:f3:79:fd:
6a:64:34:31:ec:7e:37:0c:46:84:28:a9:77:11:17:
36:d2:2e:f0:8c:6b:48:dc:d5:1f:0a:ab:70:de:ea:
63:48:ea:71:a2:4c:46:1d:22:56:b8:6d:4c:95:38:
39:c3:f3:1f:af:09:f4:01:bc:ef:69:e0:f6:d8:bb:
cf:48:49:4f:2a:7f:e3:68:52:0a:03:6a:02:ce:f7:
2d:59:f4:8d:f1:b7:f6:4f:80:24:0a:08:e5:83:01:
e2:62:22:5e:4f:6c:5f:2b:a5:03:59:ad:da:1a:b7:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CF:47:CC:B7:32:22:8C:A0:48:97:67:A1:56:3F:9C:CB:62:2D:38
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:73:49:97:35:d6:26:bb:8b:b4:3c:6d:92:d5:d5:7f:02:2c:
35:cc:e9:3d:54:36:a4:ec:7d:a4:c3:04:21:c3:a6:a5:56:b9:
bf:c4:a9:26:b6:54:fc:58:af:23:b1:30:32:5f:9f:9e:07:ea:
fc:14:ef:0c:f9:ba:bc:16:26:66:e2:10:34:56:dc:4f:ac:0f:
c8:2d:09:ae:20:02:f4:08:ae:1f:85:52:70:08:26:64:ad:70:
d5:7f:9a:71:ea:3a:dd:57:9d:a4:62:8d:9e:73:9a:2c:1d:65:
ab:c3:27:ec:d9:76:2c:54:bf:94:27:65:88:48:55:b1:aa:f2:
fb:51:e7:b4:48:7e:dd:77:85:33:f2:15:76:ab:cd:df:ce:c1:
68:0c:e1:c0:3a:5d:55:66:8a:ef:59:1a:f0:69:60:aa:a9:ca:
a4:2b:f9:ff:e3:d3:45:df:69:b0:c5:c8:13:48:f1:22:b8:25:
e1:7f:bf:76:31:3c:63:8a:c2:71:3f:28:98:a8:35:2c:ff:b6:
68:2a:b0:85:8c:a3:18:b6:b8:bd:59:fd:cd:16:4f:ea:94:8e:
b2:68:1a:18:55:97:81:55:31:0f:8e:07:dd:fa:06:0d:69:63:
ca:76:4a:71:89:87:4a:10:3d:3a:59:02:44:10:03:74:f2:43:
90:43:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:23 2026 by rpki-client