Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: mO9rIcTSlgEA/fKgzI+M/Lq4UHdHV7kP+eiZJ58G64M=
Subject key identifier: DE:0D:AE:7B:99:5F:7C:83:25:B3:7A:5C:2C:77:17:15:96:23:AC:E8
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 01A0D83B6FA296A58C1DE61535CEF3D8AB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 05DB
Signing time: Fri 25 Sep 2026 11:02:48 +0000
Manifest this update: Fri 25 Sep 2026 11:02:48 +0000
Manifest next update: Sat 26 Sep 2026 11:02:48 +0000
Files and hashes: 1: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: H5Du40xNCR4hiEei9hsJd4ViySVNLw4qQJmVzYMwA+Y=)
2: uqb13WcH-sHQrFpv4PbFThoSkmk.roa (hash: z4r6mb25fzWJDdqfWlcYfompTywQy1djheMADUOlVYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:6f:a2:96:a5:8c:1d:e6:15:35:ce:f3:d8:ab:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Sep 25 11:02:48 2026 GMT
Not After : Sep 26 11:02:48 2026 GMT
Subject: CN=de0dae7b995f7c8325b37a5c2c7717159623ace8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:59:7e:79:a4:c8:c3:55:26:b6:bb:4d:fa:
f8:b1:df:0d:9a:d3:c3:57:6c:58:be:a6:4c:49:ee:
35:f9:2d:a4:8f:65:ef:8c:84:91:9c:92:b1:2d:69:
a0:14:1b:c8:11:e2:f9:0e:c5:ce:11:55:83:93:17:
a2:1d:b6:67:18:07:33:2f:23:33:36:2c:07:d7:aa:
b0:e2:ef:16:9e:45:8c:7c:5f:9b:cd:bf:51:25:55:
5d:05:e0:e5:26:1a:c0:22:ec:7f:06:a8:69:9a:1d:
79:97:38:25:98:56:c6:b5:22:17:e2:56:a1:b7:e9:
16:67:1c:08:4e:f2:34:91:8a:de:a8:50:cb:01:80:
64:06:03:35:3e:80:5f:af:9d:c1:d0:42:15:c1:30:
0b:b7:7f:b3:86:e7:9c:fb:fc:90:c2:38:dd:e0:06:
eb:15:91:da:8a:0f:df:cf:b0:1c:bd:ef:51:ca:57:
df:7b:47:c1:f2:75:42:f5:a8:c0:ea:70:3b:1a:48:
52:66:2b:17:6d:3a:9a:9a:72:1a:4d:e0:c1:40:d5:
3e:5c:88:b2:84:b3:f0:6d:af:40:86:08:bd:19:02:
b2:01:83:e4:99:7d:40:1f:d4:44:c7:ee:57:08:5d:
a9:51:28:03:ec:34:60:9e:82:63:34:05:bf:5f:5f:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:AE:7B:99:5F:7C:83:25:B3:7A:5C:2C:77:17:15:96:23:AC:E8
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e3:f6:c1:0f:a6:ed:44:8f:f1:fe:0a:62:44:16:e0:eb:a5:
d3:1d:65:fc:a1:6c:a2:c6:ef:cd:2e:07:a7:c5:2c:e1:c0:22:
41:58:bb:42:cb:d2:65:50:4f:14:7d:ec:b1:18:c2:73:84:f3:
fe:53:f1:e0:ce:bf:71:5b:b1:14:e5:df:1b:dc:05:84:30:53:
ae:26:fd:f7:fb:9d:c4:3f:0e:03:ac:80:b7:43:15:e9:8c:a4:
39:16:af:b0:26:2e:99:9d:79:ad:ca:4e:4d:13:e3:f0:93:ff:
33:10:df:35:0c:22:ed:c0:90:74:ed:9f:28:2c:57:67:30:bc:
eb:e9:d3:31:55:2c:9e:7e:65:29:31:47:7a:af:9c:f6:54:f5:
3d:45:00:d9:15:b5:cb:2e:74:e6:06:05:9e:3a:01:bd:f1:be:
12:67:4b:0e:50:cd:42:e9:74:68:68:fa:35:0d:ea:75:34:5c:
d9:6a:9d:58:8f:af:9e:a8:6e:bc:88:1e:2c:75:53:61:f7:50:
f4:fc:cd:e8:45:d3:57:74:22:14:36:8f:48:12:a6:dd:00:f3:
0b:4a:cb:b0:0a:d6:5b:9f:b8:ef:bc:77:b9:f7:2b:c2:a7:ba:
98:ba:6f:1c:b7:ea:d4:c4:94:f5:cc:2f:9e:c7:60:a6:af:cd:
dd:40:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:22:41 2026 by rpki-client