Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier: D78oJ30v04gqqW0b8N5h/EtUwaE2yS1Pev8iStqHHaQ=
Subject key identifier: E5:3B:B6:FA:1B:61:99:F9:05:60:08:31:3A:9A:C6:26:13:C1:33:C2
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial: 019CAB342830A4735C28BB341FAB15F964D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number: 04C9
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: IpSnJJcRk0rVaIinr9MzfOMamE4.roa (hash: sJC1dVz6+49l7Xv9i824Gl0XhIuWekON6If1soCkGf8=)
2: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: zzZTZP3HF+qAgdByHRQmx0S9RcKyve8a8K4sONFXikk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:28:30:a4:73:5c:28:bb:34:1f:ab:15:f9:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=e53bb6fa1b6199f9056008313a9ac62613c133c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:8e:09:6e:1c:70:ff:97:36:ff:8b:95:a6:
3b:9d:d1:be:f1:6b:96:df:64:a9:27:39:d5:49:11:
79:4b:a9:11:63:82:3e:5c:72:e6:e0:58:ac:db:26:
33:a5:7a:79:67:36:1d:09:5f:fd:82:75:e4:9c:2f:
42:37:0f:22:10:73:0f:8f:25:87:83:7e:87:42:f3:
e5:38:49:f4:ce:6a:6b:b0:b2:d7:f7:4b:1b:c0:65:
f2:d4:8b:c1:9d:de:b4:d9:1b:12:79:23:d9:53:06:
1c:f9:c2:48:82:9a:a1:36:ca:17:78:de:c6:dd:3b:
72:f5:dd:ee:19:48:a3:bb:9d:8e:34:e7:3c:f7:72:
d0:f5:7a:5d:7c:00:04:3d:38:18:89:ae:66:70:f2:
6d:f2:e8:2e:a1:de:18:23:c1:0b:e5:37:22:cf:05:
d3:62:34:0b:bf:b6:0f:e0:5b:75:98:20:c1:a0:a5:
4f:2f:75:24:5e:89:a1:a9:41:e5:b6:97:4a:a6:1e:
dc:7c:98:f2:e7:3e:9d:70:e5:9e:95:1a:82:39:db:
cc:62:fa:b7:e6:5f:39:bd:85:0b:d7:51:3e:ee:8c:
fa:69:5b:f9:ec:57:73:b3:14:7b:dc:4b:6e:34:d8:
a2:19:ff:a6:67:a1:b9:94:ad:66:4f:30:e1:bd:bf:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3B:B6:FA:1B:61:99:F9:05:60:08:31:3A:9A:C6:26:13:C1:33:C2
X509v3 Authority Key Identifier:
keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6f:12:ec:36:8e:e5:d8:ae:fb:51:92:ac:a2:fb:2e:67:f1:
3c:8d:a3:7b:a4:b3:5c:e1:67:09:32:2b:51:71:41:f4:a0:05:
02:62:1c:a2:85:54:23:4f:6c:98:f0:f8:34:9a:1e:5e:60:23:
12:cb:5d:68:31:56:de:96:a0:15:3c:86:26:b7:69:ae:97:47:
9b:b3:ff:19:79:eb:9b:ff:c5:31:45:bb:53:5e:18:63:c5:8b:
7c:69:42:9b:1f:b5:2b:9f:38:f3:ea:f4:44:83:f1:fb:49:dd:
d6:d9:73:d9:4d:62:c5:5e:42:4d:21:d2:88:3a:cc:46:b0:d5:
33:41:80:a2:0d:a8:ff:4b:94:03:8e:73:d1:f4:8f:3b:63:37:
f0:c4:1a:91:e3:d3:c2:af:56:fe:34:28:d6:23:67:f3:9f:6e:
07:bf:14:0f:8d:0b:ff:81:84:75:af:da:ba:07:01:ae:20:08:
75:ce:dd:d8:6a:b0:8e:55:bb:a4:01:c9:fd:cc:13:77:b2:b7:
b1:90:dd:f3:38:0a:6c:cb:54:cb:fe:12:c7:5a:74:1d:51:9d:
c0:70:ae:8e:b9:4c:31:f5:6d:30:2a:98:e8:77:75:9c:3d:3b:
69:60:2d:12:d6:b1:ad:d0:9b:7b:9a:6a:4f:dd:85:6e:94:2c:
1e:8e:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:45 2026 by rpki-client