Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: ARvJ0q11QDXjeO25i6WNPi4GSbNukmMcNQbLV0jYiLc=
Subject key identifier: B3:B2:C7:66:D3:83:6B:D5:36:5E:2E:21:22:70:05:1E:DD:D0:CC:FB
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 019CAAC6BCAD1E6449682BEC960A7FFA7260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0D42
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa (hash: kcWbbVv8ASdYvi8EuyOv3tMh0xXxdFL5jH6YworqpiU=)
2: OCwZn3M2fA5Hq8kNmQdHXm6169A.roa (hash: hYYgtO03EJt7YSnRsoX8WPt38DBVQ4OQ4v1UuaWwBlg=)
3: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: vdnrSk4fJsQYALDalXj2uMlBTe0dD1A7XdRC0Tcz+H8=)
4: qK3CTioRHIZv8tRs19l4YH3NK7Q.roa (hash: mYr/W0vsn5NqGep9nH2w5E2ZZ+X10OK8JIo9QGjsoSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:ad:1e:64:49:68:2b:ec:96:0a:7f:fa:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=b3b2c766d3836bd5365e2e212270051eddd0ccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:0b:c5:06:30:a1:45:3a:19:4d:7b:4a:88:
8b:4b:98:03:3a:03:f6:fb:7b:af:21:c6:58:bf:52:
3d:e1:b8:fa:f2:8f:89:1a:0b:d4:dc:73:f3:1a:18:
eb:90:35:ef:61:ae:5f:48:bb:37:06:e7:cc:66:1f:
b9:42:fb:01:60:10:2d:a6:3f:2a:f0:ac:c9:c7:aa:
96:55:28:98:15:c9:98:f9:69:73:7d:e3:76:ca:90:
b9:cb:78:8e:e1:72:9a:bc:cb:46:71:fe:8f:8c:7f:
ac:1b:6d:4b:03:85:37:bc:45:fc:d3:3a:9e:43:38:
9f:28:0d:2c:69:d6:f3:64:3e:9e:60:10:b2:8f:98:
0d:3c:20:04:94:35:c4:c1:bf:1e:fa:16:3e:fd:53:
4e:ad:2f:aa:f0:e8:d0:c8:9c:97:70:3c:bb:d1:bf:
5f:04:0f:68:59:f0:c6:97:af:fb:38:8b:8d:36:9f:
d5:92:7b:85:8c:c9:10:b4:0f:97:8a:9a:57:c1:bb:
8f:d3:b8:9f:a6:7c:ba:4e:a5:06:8c:6d:75:a2:b4:
f6:81:53:14:d5:12:92:cc:7b:98:17:03:bd:83:79:
2a:f6:f0:c0:9f:a8:9d:4f:51:15:34:fa:7c:ce:80:
a0:09:e6:80:73:58:f0:97:d0:cf:12:f5:8f:03:72:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B2:C7:66:D3:83:6B:D5:36:5E:2E:21:22:70:05:1E:DD:D0:CC:FB
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8e:ab:98:6e:81:8c:83:be:50:44:2b:01:64:32:08:8e:00:
30:0b:58:6d:5e:a8:5f:89:e4:68:d8:88:e7:ef:23:a0:85:a1:
84:b1:9b:0c:3c:c2:e3:43:96:4a:91:ec:11:0c:09:d5:9f:38:
4b:54:20:70:a1:82:33:7f:e0:25:ee:4d:a3:78:94:6b:80:3d:
e0:14:bb:47:82:54:b7:5a:b4:50:76:29:41:6a:d6:2d:e4:c3:
6b:01:bf:c5:10:6f:92:da:10:ea:02:01:aa:2e:a1:bd:90:66:
60:6d:f5:d2:3f:40:23:f5:df:d0:e8:f5:c8:8b:5c:db:27:33:
aa:4d:49:ff:4b:5d:8d:42:b6:e1:3a:f6:00:67:dc:49:ad:ec:
10:f4:a2:c8:b1:f7:01:ac:6f:c2:40:28:ca:fe:e9:a8:90:f3:
89:6f:c7:d0:91:ba:e0:47:a0:64:a5:2e:63:94:e6:59:3e:5b:
69:3c:20:92:cb:93:1e:20:82:75:e5:e1:a4:b9:6e:83:f2:c2:
d5:67:2b:8e:1c:1b:b9:c2:fc:26:44:9d:cc:aa:11:d8:1f:56:
a4:d3:54:14:e3:63:31:56:32:68:04:52:d1:7b:38:63:5b:c4:
df:39:72:19:ac:84:07:26:71:6e:fa:d6:8a:46:c8:91:55:49:
bc:92:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:20 2026 by rpki-client