Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: RRPwJpPQAvLa3hFwNogvEG4Ife9a1iZlunr3TP/hetc=
Subject key identifier: BD:F1:10:52:9C:E8:74:40:DE:E1:7C:23:12:40:36:D8:F9:BC:4D:0F
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019F8FEC24A61404B1B7C2BE68A3689633E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 0531
Signing time: Thu 23 Jul 2026 17:00:45 +0000
Manifest this update: Thu 23 Jul 2026 17:00:45 +0000
Manifest next update: Fri 24 Jul 2026 17:00:45 +0000
Files and hashes: 1: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: ls4v/DOm2FLGhJVaQUD/XTGHHLnUz43nSvo5jTRFdvY=)
2: uqb13WcH-sHQrFpv4PbFThoSkmk.roa (hash: z4r6mb25fzWJDdqfWlcYfompTywQy1djheMADUOlVYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:24:a6:14:04:b1:b7:c2:be:68:a3:68:96:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Jul 23 17:00:45 2026 GMT
Not After : Jul 24 17:00:45 2026 GMT
Subject: CN=bdf110529ce87440dee17c23124036d8f9bc4d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:e1:7a:25:4f:00:a3:e4:b7:c5:9d:64:26:
de:01:18:35:74:48:58:dc:f2:2f:a5:a6:e7:13:ad:
2e:74:66:03:6c:06:a4:b5:76:f8:55:f9:d2:ac:2c:
f8:3b:fd:d1:a4:d6:92:2a:da:4e:73:45:11:80:e6:
9d:59:93:63:9f:3d:fa:a5:5f:b6:1c:05:5a:f4:16:
7c:10:56:bf:a2:ce:2c:e0:2e:79:ab:02:86:81:06:
62:a2:67:4b:6f:88:1f:ec:29:31:cf:c4:a7:8a:c7:
3d:ad:2c:78:f8:8d:0f:06:36:bc:00:88:56:68:f3:
82:e3:1f:7a:fa:43:60:41:c6:e5:33:04:2c:79:ed:
11:21:8e:fa:74:4f:c7:c1:45:4c:f1:ef:fb:8e:b5:
91:c8:77:e5:b5:f5:29:c3:93:28:61:3e:d1:82:d8:
3f:83:bf:83:a1:11:10:f7:10:07:4c:96:57:f2:4a:
85:fd:9d:8b:bc:41:4b:c3:cd:c2:7c:a3:08:38:37:
48:99:28:58:e2:86:fe:95:8c:29:21:18:20:b8:fe:
40:49:b1:1e:0b:ee:55:25:cb:a0:5d:db:de:d4:e6:
c6:75:32:90:7a:1a:62:ea:4a:21:3b:7e:84:52:ed:
7d:c1:68:85:e3:73:8c:6e:25:e3:51:e9:86:11:af:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:10:52:9C:E8:74:40:DE:E1:7C:23:12:40:36:D8:F9:BC:4D:0F
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:66:d6:72:6c:fb:e8:69:de:ca:30:9d:c1:be:96:79:54:7b:
27:62:18:c7:35:61:a7:3a:4c:fc:a7:e8:90:ee:29:02:28:07:
22:1c:cb:b8:3c:c2:eb:bf:c5:61:c0:f4:b7:21:88:88:c6:4b:
a6:12:84:0b:ca:e6:77:dc:00:b7:86:13:15:61:34:e2:a7:84:
f7:f8:de:f7:a5:c6:5a:cd:fd:ad:46:c6:8d:07:99:ac:ec:18:
40:8c:aa:af:f4:80:5e:32:1c:10:53:6e:02:68:48:3d:4a:40:
51:cb:07:57:52:fb:07:b8:fa:af:97:d1:1d:3e:f3:05:66:67:
c8:89:48:98:b9:98:9e:94:bc:cf:00:b5:63:90:87:b1:8d:88:
e8:99:82:c9:77:71:4d:4e:57:16:5f:f6:e4:dd:64:d5:f7:82:
7f:38:73:bb:91:a0:85:36:a7:9b:a3:ba:1f:8a:8d:b8:25:32:
10:e0:06:9c:76:f3:9e:91:e2:a4:72:86:e0:d6:99:79:fb:62:
ad:ee:d8:68:ff:d1:5c:f8:b4:99:1d:4c:d7:71:ec:ca:12:41:
ea:83:ad:2d:fe:b5:0a:43:78:63:07:b0:8f:8b:d0:f2:cc:ef:
86:fd:d7:78:4c:67:42:45:11:e1:60:37:d0:eb:42:e3:df:14:
2e:b6:cc:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7CSmFASxt8K+aKNoljPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWMwZGRlYzMwZTI0ZTQ1N2UxNmU2NTA3ZDIxOTcyODMx
MDg5M2QwHhcNMjYwNzIzMTcwMDQ1WhcNMjYwNzI0MTcwMDQ1WjAzMTEwLwYDVQQD
EyhiZGYxMTA1MjljZTg3NDQwZGVlMTdjMjMxMjQwMzZkOGY5YmM0ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlHheiVPAKPkt8WdZCbeARg1dEhY
3PIvpabnE60udGYDbAaktXb4VfnSrCz4O/3RpNaSKtpOc0URgOadWZNjnz36pV+2
HAVa9BZ8EFa/os4s4C55qwKGgQZiomdLb4gf7Ckxz8Snisc9rSx4+I0PBja8AIhW
aPOC4x96+kNgQcblMwQsee0RIY76dE/HwUVM8e/7jrWRyHfltfUpw5MoYT7Rgtg/
g7+DoREQ9xAHTJZX8kqF/Z2LvEFLw83CfKMIODdImShY4ob+lYwpIRgguP5ASbEe
C+5VJcugXdve1ObGdTKQehpi6kohO36EUu19wWiF43OMbiXjUemGEa9sAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3xEFKc6HRA3uF8IxJANtj5vE0PMB8GA1UdIwQY
MBaAFFSsDd7DDiTkV+FuZQfSGXKDEIk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEt
MmYwNjU1ZjAxMDI5LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEtMmYwNjU1ZjAxMDI5
LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2bWcmz7
6GneyjCdwb6WeVR7J2IYxzVhpzpM/KfokO4pAigHIhzLuDzC67/FYcD0tyGIiMZL
phKEC8rmd9wAt4YTFWE04qeE9/je96XGWs39rUbGjQeZrOwYQIyqr/SAXjIcEFNu
AmhIPUpAUcsHV1L7B7j6r5fRHT7zBWZnyIlImLmYnpS8zwC1Y5CHsY2I6JmCyXdx
TU5XFl/25N1k1feCfzhzu5GghTanm6O6H4qNuCUyEOAGnHbznpHipHKG4NaZefti
re7YaP/RXPi0mR1M13HsyhJB6oOtLf61CkN4Ywewj4vQ8szvhv3XeExnQkUR4WA3
0OtC498ULrbMPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:26 2026 by rpki-client