Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier: 9fhFiyliDQDjQCSylXONJWnZgiggJGXmadlDfhjbl2g=
Subject key identifier: 89:CF:08:6D:AA:C8:AD:74:AA:FB:17:2F:83:61:95:45:38:52:79:62
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 019CABA1E5027BCBBCD0023DE1AA8E616D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number: 0606
Signing time: Sun 01 Mar 2026 23:00:39 +0000
Manifest this update: Sun 01 Mar 2026 23:00:39 +0000
Manifest next update: Mon 02 Mar 2026 23:00:39 +0000
Files and hashes: 1: PAm1yALS9x-qP_AZ-54W9AnDYy8.roa (hash: GPlRwEDHa/2OENPSASpmCv5lcN0fa6+rmfNybAsq4r0=)
2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: KAC5wbr6V8QIU1LAJ+go/a2RLxDfMXJGfRXS/5dkaqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e5:02:7b:cb:bc:d0:02:3d:e1:aa:8e:61:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Mar 1 23:00:39 2026 GMT
Not After : Mar 2 23:00:39 2026 GMT
Subject: CN=89cf086daac8ad74aafb172f8361954538527962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:aa:cc:2e:63:3f:46:7b:f8:4e:53:57:40:
62:da:4e:38:ac:53:09:b4:52:92:6f:64:74:c6:fc:
5a:ed:31:4c:28:df:19:d0:a0:aa:64:04:43:83:94:
7f:e8:3c:60:36:4f:d5:5e:dc:27:75:2e:f5:9b:e4:
ef:be:45:c9:ca:42:4b:9d:25:2c:b1:60:61:78:90:
1d:83:16:f0:06:ea:dc:4d:b5:1e:30:e0:fd:39:c7:
62:a4:46:de:9b:a3:80:26:ea:2b:64:bc:f8:b6:2d:
dc:f2:dd:cc:c7:bb:de:8d:ae:60:fc:29:1f:79:ee:
98:0e:a8:f8:16:6b:c4:31:b8:fb:99:8f:e3:40:fb:
81:03:e3:2a:e0:c2:bc:55:37:f5:3c:71:c6:2f:04:
80:3c:03:90:b2:e0:7a:02:48:f2:99:4b:fb:d2:15:
83:88:c4:c1:85:9e:93:94:5f:74:8b:8a:c8:fc:33:
da:95:99:fc:39:22:38:02:ec:a2:78:b1:d0:41:67:
8d:6d:fc:25:14:e7:a2:2e:e9:f7:da:e8:8c:e3:c7:
50:d3:9b:70:cb:1f:17:9b:73:81:83:34:b2:6f:09:
54:35:b4:df:0f:6c:50:c4:36:9d:6e:c2:26:33:58:
e1:da:43:ce:52:58:25:75:c5:27:fc:0c:3e:16:30:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:08:6D:AA:C8:AD:74:AA:FB:17:2F:83:61:95:45:38:52:79:62
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:89:40:10:57:3b:2f:2e:3d:aa:15:66:0c:c0:10:4a:21:
c6:05:92:82:62:18:64:da:6a:34:57:ea:7c:39:50:37:62:05:
f0:37:07:60:b4:2b:22:b5:a8:a0:0e:d1:ec:8a:af:39:3e:c5:
d2:19:35:19:a8:2f:5c:15:53:52:0c:61:5d:17:0e:a7:a1:d2:
ab:95:d3:e6:4b:e2:b9:e8:30:12:7f:bf:4c:20:a2:cd:a5:ff:
83:f8:1b:db:2b:5d:97:d3:6a:88:7e:86:28:88:e9:33:5a:5a:
96:04:5e:89:34:27:1f:08:79:dd:86:d1:b5:3e:09:73:f7:6a:
92:00:fe:b8:56:71:63:6d:3f:97:26:fd:87:82:b1:2f:fb:39:
de:3f:32:dd:d4:68:08:04:ad:81:cd:f9:73:92:e0:0f:64:b7:
e9:8d:34:7d:75:a5:f8:13:eb:24:5f:2b:95:13:a1:e9:67:6a:
29:ca:de:21:d8:f1:f7:35:68:3c:76:f8:44:8e:76:ef:bd:0e:
f2:41:25:55:87:52:c1:37:22:89:0e:35:4d:65:08:19:f3:99:
a1:4b:e5:52:99:b0:4f:55:8e:ce:62:0a:8f:e2:c3:e8:ab:13:
4f:95:6d:bd:1a:1a:2b:14:46:f2:a9:0a:95:8b:23:07:f4:cd:
d0:ae:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:37 2026 by rpki-client