Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
File: VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json)
Hash identifier: MkHKM4iXPOtdIuluGTpYtlPtPI47HsoSfrU5HGh+hE8=
Subject key identifier: D9:FE:90:50:38:4B:81:54:F9:08:39:7A:89:E4:6F:CD:54:55:FD:46
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Certificate issuer: /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial: 019CAD90564EB39927DC2C63C16BC78268EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:00:43 +0000
Manifest this update: Mon 02 Mar 2026 08:00:43 +0000
Manifest next update: Tue 03 Mar 2026 08:00:43 +0000
Files and hashes: 1: Ay1de_CJDcGalpq6G-6jy9K11Gk.roa (hash: uc5IBSFrLOuYogekySiZznfKugYHdXYL0+i6gvyMboQ=)
2: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: Abn/iEDQTT3WGF1q1oi+5NZ6oHvNIXeI8IlOU6LSHSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:56:4e:b3:99:27:dc:2c:63:c1:6b:c7:82:68:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Validity
Not Before: Mar 2 08:00:43 2026 GMT
Not After : Mar 3 08:00:43 2026 GMT
Subject: CN=d9fe9050384b8154f908397a89e46fcd5455fd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:69:78:d7:5d:28:2e:9d:2b:07:f0:a2:f9:
26:cf:9d:c4:43:94:99:96:0b:67:27:f0:95:f2:9b:
a5:3e:e3:e4:92:0b:81:52:bf:03:e1:87:dc:46:19:
b8:12:e4:4b:f6:71:3a:5b:2c:25:80:9b:b0:b5:1e:
67:14:cb:67:09:5f:ee:68:04:4a:10:03:29:91:92:
1f:39:bc:cf:ea:80:85:6c:0d:91:24:ec:95:61:93:
21:14:2b:d8:92:77:c0:48:02:ea:0b:4b:3b:bf:97:
de:c4:6a:a6:1a:a8:b4:f6:07:0a:b2:91:3a:00:72:
2f:5b:d9:f9:53:5c:39:6e:d7:fe:8f:d2:07:e9:bd:
6f:f5:92:6e:d2:bf:aa:7f:68:7b:d9:c5:8d:c4:f3:
26:8b:5e:cc:82:3e:98:65:45:8a:9d:98:9c:db:65:
66:cd:de:50:53:f8:0c:fd:da:bb:eb:64:ca:2d:d3:
9e:56:7d:09:7b:03:d9:49:a7:a9:e6:9b:32:b6:8d:
52:b7:83:b3:c9:41:35:70:99:dd:6e:f5:ad:bc:a9:
90:20:0b:8d:69:75:18:2f:6a:8a:a0:12:7a:4c:51:
fe:5f:b2:a7:9a:c9:95:51:08:cc:fe:31:c4:78:36:
c5:b4:e3:07:16:1a:fe:8f:42:2d:08:7b:2b:2b:c9:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FE:90:50:38:4B:81:54:F9:08:39:7A:89:E4:6F:CD:54:55:FD:46
X509v3 Authority Key Identifier:
keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:48:ba:4a:14:b0:89:d3:aa:92:03:d4:ba:79:8f:d8:8d:
c5:f2:e2:65:1f:8d:a1:cd:51:aa:ca:9a:f7:69:e4:c1:01:92:
c1:88:a2:72:ba:e6:5d:9a:4b:93:0b:6e:af:4f:71:ba:37:74:
f3:8b:62:fd:c7:95:f6:22:13:83:fd:b4:2a:4e:f9:d5:3d:71:
6f:5e:a2:52:ab:c9:82:86:6c:46:b7:b4:55:e3:8f:13:97:d5:
c6:5f:2d:9b:fe:31:ee:1c:87:75:4b:68:bd:b3:81:99:17:ab:
1f:01:9f:76:9e:df:17:03:c2:60:e2:40:c5:74:1d:7c:be:9a:
50:ff:41:38:75:f0:59:05:0b:3d:1a:30:93:f2:2f:28:e4:3e:
28:53:3a:b6:72:c2:5f:14:79:e3:8f:1d:d4:ce:45:c0:8c:a0:
b4:f7:63:43:ce:d6:1f:2d:2f:91:83:1a:75:31:43:a2:67:85:
e0:4c:4c:54:d4:29:39:bb:06:00:83:35:cd:4a:0e:dc:ff:66:
17:a1:32:aa:16:c7:d1:ae:a6:e6:02:81:c0:49:79:2a:d4:18:
12:5f:72:3d:20:c4:48:f7:c5:2f:ec:9e:62:bd:8c:78:31:2b:
40:3a:02:f4:b1:21:28:9f:56:c6:1c:b7:29:44:f3:53:82:97:
66:f2:c8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:10 2026 by rpki-client