Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: aDOMuPaTeOW4liRPhgdHuPHtJekE8vnvJ18rwcMHsWw=
Subject key identifier: 20:CC:B6:EF:9A:8B:78:65:F3:EA:C7:86:F9:FC:84:56:24:78:7F:80
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019CAB6BCD1B8DF05B751CAFF0D9D585B54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 058D
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: l2sRhiRl3vE5GLT1oeG2r84UJxGtDG6uUiIECPBA83U=)
2: l90rpj-DR5r3cFHT1ngY8fi_CKk.roa (hash: RVDAEAhgMvMiTiC9CmO4uk0GliY1A4CXLkuJGW6M+tM=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cd:1b:8d:f0:5b:75:1c:af:f0:d9:d5:85:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=20ccb6ef9a8b7865f3eac786f9fc845624787f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:82:ec:69:9b:b0:ca:e9:eb:2f:f0:1f:20:
9e:a4:b2:08:54:af:b5:6b:51:a2:97:9c:0e:56:09:
d4:50:20:70:13:6b:29:0c:7d:ef:63:76:e8:aa:d6:
d7:bc:4d:71:be:21:be:60:e7:08:89:19:31:d7:09:
a8:96:d3:bb:33:d6:7d:e5:f9:2e:b0:de:61:df:d3:
3b:a7:3a:95:e2:60:0f:d4:8d:14:64:5a:08:21:53:
00:53:0c:ea:c7:58:30:38:45:13:f7:4e:1f:95:1d:
63:e9:a9:82:66:6f:54:9e:ff:28:0a:73:09:3d:c7:
a5:2a:ba:96:18:61:6e:8f:34:03:01:12:96:fa:fd:
cc:32:9a:3d:04:aa:6b:73:79:34:df:50:96:0b:75:
62:c8:a3:90:e1:f9:6c:76:24:0f:2f:1f:4d:8c:18:
f2:2f:76:ac:0d:77:42:92:05:83:fb:31:7b:a1:b5:
90:e0:f6:b2:e2:b7:db:cd:98:04:c9:fc:ec:7a:c9:
95:8c:77:43:fd:16:0c:8b:20:45:a1:47:dd:4e:f3:
09:63:fa:73:e2:aa:f2:8e:19:4d:b2:f4:9a:a9:5a:
0e:60:42:8a:78:a5:44:c9:1a:3f:eb:2b:ae:b2:52:
d4:eb:f1:e7:b0:f2:e0:89:54:91:b8:10:da:23:35:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:B6:EF:9A:8B:78:65:F3:EA:C7:86:F9:FC:84:56:24:78:7F:80
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9e:0b:d7:e5:b3:52:a2:db:bd:19:2d:a6:37:e2:a9:f5:29:
5a:87:e5:20:61:1e:0e:dd:74:cf:0f:4b:0a:7e:95:dd:8f:72:
a1:5b:b9:7a:d7:f5:af:76:68:91:0c:5c:05:df:ff:2d:17:70:
07:ef:04:82:b2:c4:3a:47:c2:25:e0:e9:1f:0e:cb:ca:8c:76:
57:64:3f:00:74:d4:fe:a2:a7:d7:69:85:c6:5d:d3:0e:7d:d5:
74:88:a2:f3:ed:d1:af:eb:85:82:8c:5d:24:e9:a0:eb:2b:4c:
dd:f4:55:20:2d:34:1f:9b:d6:1f:9e:e0:4f:36:77:0f:a2:45:
39:50:7f:b1:aa:f0:00:e3:60:c2:9f:3a:0e:53:9d:09:da:0e:
19:05:bc:cc:2a:23:e7:af:54:25:04:21:cb:9c:5f:e1:fd:9a:
6d:0a:87:f1:4a:8e:e8:5b:c1:0f:95:3c:35:f3:14:03:a4:6e:
f2:6c:15:c9:6f:b0:a2:8f:72:1e:e8:33:ed:5f:e3:57:ab:9b:
5a:1a:5a:8d:8a:6a:01:67:cf:27:7a:db:c1:17:02:ae:65:07:
ce:06:ab:6e:cd:d3:c0:e0:5e:34:5e:36:f6:d3:97:80:92:a9:
d9:c8:63:62:fd:5e:5e:72:8d:9a:ce:06:3e:73:8a:4b:e3:5c:
4b:94:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:56 2026 by rpki-client