Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: z+lCbjnMgqKR/5u24QbXutdIXkm67jWS8PXlMxgi7XY=
Subject key identifier: 05:63:EE:8D:1E:3A:EF:5D:A3:B6:D3:D7:E2:E3:86:7B:EC:58:78:AF
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 019D9B1A12ED0367EA65A1779A175220818B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 0682
Signing time: Fri 17 Apr 2026 11:01:10 +0000
Manifest this update: Fri 17 Apr 2026 11:01:10 +0000
Manifest next update: Sat 18 Apr 2026 11:01:10 +0000
Files and hashes: 1: PAm1yALS9x-qP_AZ-54W9AnDYy8.roa (hash: GPlRwEDHa/2OENPSASpmCv5lcN0fa6+rmfNybAsq4r0=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: 60Q+PGPsWVqRCK6ladz6AQ+rjMZjhY5u+6YJlLEmbck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:12:ed:03:67:ea:65:a1:77:9a:17:52:20:81:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Apr 17 11:01:10 2026 GMT
Not After : Apr 18 11:01:10 2026 GMT
Subject: CN=0563ee8d1e3aef5da3b6d3d7e2e3867bec5878af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:d5:45:85:56:f5:67:14:47:04:3a:56:2c:
5d:4b:21:9d:c2:fc:bd:42:d0:5c:98:9c:d0:07:f5:
e2:d8:2c:ed:c2:82:4d:49:51:42:00:68:27:2a:bc:
e9:cf:5f:07:e9:c5:f3:57:e0:6e:c7:09:fd:a0:53:
6f:ca:22:b3:fe:23:03:04:96:c0:09:67:4e:d2:37:
2d:ad:02:aa:4e:93:d0:81:72:06:3b:44:7e:fc:1f:
61:73:e0:be:68:c3:c3:ef:4d:78:fa:e3:ff:69:f6:
27:71:96:4c:69:71:d3:45:5f:bf:6e:20:2d:e0:31:
8a:10:ff:13:cd:39:5e:77:ff:53:5f:b8:ed:c9:47:
27:03:1f:85:40:0b:0a:09:1b:23:ed:61:26:3a:34:
1a:07:f2:47:7b:6d:0e:35:c9:7a:1c:c5:19:51:ba:
8b:8d:33:1b:f6:a8:9d:0f:f7:95:0b:a5:36:f4:0b:
39:4f:e1:37:8a:46:5c:75:1b:04:0a:89:a8:cf:69:
33:58:c1:c3:45:d4:94:55:2c:ed:82:ba:fe:31:62:
e1:72:92:45:ac:ad:be:76:37:8b:ad:b1:08:01:df:
53:c4:0e:e9:5b:35:47:5b:5f:7d:df:b4:db:0f:9f:
50:29:78:00:6e:57:83:20:ae:5f:13:76:e5:ff:8a:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:EE:8D:1E:3A:EF:5D:A3:B6:D3:D7:E2:E3:86:7B:EC:58:78:AF
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:bd:33:15:05:67:42:74:64:7d:a5:77:04:5d:a8:94:16:
13:b9:15:a0:79:70:33:09:15:bd:34:5e:59:2a:b5:dc:bd:4a:
a9:b2:69:6a:3f:73:e0:12:9f:d3:85:d1:53:56:34:2e:c0:35:
9f:c1:60:71:dc:97:0c:ee:0a:79:0e:ed:13:68:24:00:2e:bc:
02:c9:a3:26:a9:6d:ca:dd:dc:63:ed:95:02:51:f4:5f:13:a0:
4a:50:9d:2f:47:45:55:3a:06:57:57:59:47:f7:f6:15:0b:ce:
20:ec:d9:07:2d:5b:76:e7:e8:13:ef:3d:4a:b8:b7:fe:86:c3:
50:43:d5:82:b6:a3:d6:ee:3b:25:2e:09:46:ac:c4:8d:b0:4d:
f9:b5:bc:2b:94:db:0f:c6:af:87:aa:e0:34:a4:5b:20:7d:42:
bd:30:52:ae:68:d6:fa:71:f9:17:ca:07:74:fb:d6:3a:f2:d2:
43:d5:ef:bf:83:12:9c:f3:71:64:4b:a2:a4:ef:c5:45:6b:f5:
92:c1:68:40:8d:f1:91:c2:06:f7:92:17:d5:a4:90:90:cb:fd:
78:40:7e:34:c5:4d:f9:1a:4b:40:6d:d7:6d:ff:ef:c2:bf:ad:
4a:c8:a6:7a:6a:85:59:34:de:65:75:a3:1e:ba:24:55:4c:bc:
98:c9:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:38 2026 by rpki-client