Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File: VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier: hTRQUSX1fSYM3ZVlh6UqRl/S/h45ncJkRZ3jIHmJJY0=
Subject key identifier: 4C:75:CE:68:57:7A:80:FF:3D:C8:68:49:D1:B5:52:D8:3E:ED:47:B5
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer: /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial: 019D265F6AC767FD6959EEC765DF5B8151DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number: BE
Signing time: Wed 25 Mar 2026 19:01:20 +0000
Manifest this update: Wed 25 Mar 2026 19:01:20 +0000
Manifest next update: Thu 26 Mar 2026 19:01:20 +0000
Files and hashes: 1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: 6Iooppv/Hihk/AkV2DgEXCETcisyFdJE5EYGe1U8ALY=)
2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6a:c7:67:fd:69:59:ee:c7:65:df:5b:81:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
Validity
Not Before: Mar 25 19:01:20 2026 GMT
Not After : Mar 26 19:01:20 2026 GMT
Subject: CN=4c75ce68577a80ff3dc86849d1b552d83eed47b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:4f:58:0f:1f:d9:6c:fa:b3:17:27:ec:a6:
88:ed:f7:d2:cb:23:b5:14:9b:3c:ca:9e:81:0c:28:
e6:45:a7:2d:f2:c2:b2:b6:ea:0c:b7:6a:66:e4:58:
00:4e:0f:34:38:02:c8:8b:2b:7d:5f:69:6f:7f:21:
ca:b8:52:51:67:e0:e1:61:9b:72:0a:72:09:06:a5:
97:5d:d4:b1:d9:ba:53:40:9b:ea:4e:f0:b5:fd:82:
52:ff:4c:d7:0e:ed:59:d4:32:0e:98:c9:c9:f6:da:
8d:8b:2c:76:3a:4c:ea:e8:80:c2:5f:ea:45:6a:ab:
13:f0:2f:74:ea:27:42:c1:7c:ba:0b:aa:a0:30:4c:
d8:5b:b4:76:77:a8:af:37:f8:8f:69:8c:18:52:a2:
6b:32:82:1a:54:4a:2d:bb:f9:21:ae:b6:7d:13:ca:
cb:2e:f5:d4:c7:c9:80:0c:0f:f1:39:3f:6a:d2:22:
4b:57:9c:82:93:53:a2:5f:72:6b:46:83:bc:0f:c5:
0c:aa:a3:7d:1f:73:2c:65:08:e5:ad:f9:fa:e2:fb:
37:ac:7b:1e:c9:fc:8a:60:a2:a3:bd:21:4d:bd:0c:
ee:8b:ef:58:1b:3a:6f:07:c4:93:c2:da:6b:f0:ee:
bd:fe:42:2e:0b:8b:6a:d4:7f:02:2c:11:1e:70:7c:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:75:CE:68:57:7A:80:FF:3D:C8:68:49:D1:B5:52:D8:3E:ED:47:B5
X509v3 Authority Key Identifier:
keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:da:d1:03:30:f9:40:6e:ac:77:2c:b9:ab:5c:5d:5c:c7:cb:
bd:8c:29:a9:c0:00:20:fc:63:b5:5e:ab:b8:c0:b0:33:07:e0:
c4:d5:ae:80:af:b7:4b:72:b7:e4:0b:f6:35:0a:a2:83:34:e2:
56:d0:b1:cb:97:44:1a:6a:95:de:ad:de:88:e3:ee:35:3d:c5:
74:68:77:a3:de:a6:59:82:cc:67:1c:0c:1c:a9:b2:d9:3a:88:
50:6f:7f:1d:b9:cb:83:da:2d:e7:fb:50:af:6e:8a:96:dc:1f:
69:48:3d:cf:4a:2e:fc:14:6a:e8:3a:f5:13:a0:26:18:71:00:
36:8a:0d:8f:00:2a:d2:cf:63:40:7c:7d:98:2c:19:7c:60:85:
43:74:53:01:6b:6b:e2:5c:d8:04:0c:1c:a7:e1:16:0d:ca:e8:
f5:89:d6:43:1d:76:20:c9:15:50:ae:ce:d8:36:be:6b:cf:a3:
9e:cb:fd:4e:8e:d2:88:14:53:06:a0:d2:b9:a8:5e:b0:c4:c9:
46:a1:5f:62:e9:b5:9e:47:77:7a:1d:68:fb:3c:40:17:66:4a:
08:08:86:4d:eb:77:15:f6:7c:d3:ff:84:db:0c:a2:8b:27:64:
c9:e0:47:09:30:d5:89:66:0b:86:dd:78:2f:53:ed:db:e1:2b:
e3:8a:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:31 2026 by rpki-client