Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
File: VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft (raw, json)
Hash identifier: H2Vd6GjmJKp52MmKk3kR4LyMJQMOVfJbARV9sXqQ1VY=
Subject key identifier: 45:9D:A5:93:99:43:06:D1:E3:28:6B:6C:38:B3:C4:8D:07:47:5F:E3
Authority key identifier: 54:3D:02:17:97:41:37:2E:18:28:11:E1:85:2D:58:4E:FD:CF:7B:A2
Certificate issuer: /CN=543d02179741372e182811e1852d584efdcf7ba2
Certificate serial: 019D265FDC18CA19220D4B075F2490AE4E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
Manifest number: 01E5
Signing time: Wed 25 Mar 2026 19:01:49 +0000
Manifest this update: Wed 25 Mar 2026 19:01:49 +0000
Manifest next update: Thu 26 Mar 2026 19:01:49 +0000
Files and hashes: 1: Fy_kBKAocVc7jtPlVbDqYtHNv9s.roa (hash: a/ss+VdANtzcl58C/RfHYCmqghXWHPFdvwMC2v2lX7w=)
2: VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl (hash: pUDo2JTLXeUP4vmUgNQpQMUCTRqxC9vc3uj2P03HIRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:dc:18:ca:19:22:0d:4b:07:5f:24:90:ae:4e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543d02179741372e182811e1852d584efdcf7ba2
Validity
Not Before: Mar 25 19:01:49 2026 GMT
Not After : Mar 26 19:01:49 2026 GMT
Subject: CN=459da593994306d1e3286b6c38b3c48d07475fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:f6:f7:48:af:84:99:b9:1b:5a:9b:1a:10:
67:6a:10:c3:8c:2c:ca:9d:64:7b:7a:cb:71:2b:f8:
dd:95:60:22:ef:0e:dc:72:dc:02:23:32:91:7d:3e:
ea:63:77:a9:7e:d4:e4:5a:94:12:2a:f4:01:ad:e6:
42:ba:b2:bb:74:f1:07:b3:f0:bb:83:4c:17:a0:61:
70:3d:b7:ec:ad:35:ca:23:7e:c7:48:8b:69:07:f4:
09:15:47:81:32:e8:f2:ef:0a:cd:42:36:89:4e:03:
62:b5:bf:c8:90:b8:f6:75:9a:80:e4:82:d5:53:1d:
f9:bd:8e:3d:58:d3:c2:92:de:c4:6c:fb:ab:8b:ad:
23:78:07:3f:d6:50:85:72:1e:ef:43:fa:42:2a:4f:
9e:d0:bf:03:04:19:b6:6e:e9:b5:e3:d3:a4:41:f8:
ab:b3:f7:7e:6d:ef:59:8e:5a:19:59:0e:25:5d:8b:
f2:37:27:54:4a:3e:a8:d0:73:9b:39:ef:6b:ce:31:
5a:cd:32:ea:f5:3c:5d:03:f6:a8:49:42:4b:ba:fc:
53:f2:bd:39:ee:14:13:5d:d5:7b:b1:83:5a:89:16:
bb:9d:c9:e6:5a:42:95:5a:d7:ff:b2:82:03:84:5c:
ff:40:85:77:d0:21:36:16:c0:e7:b5:c3:9e:2d:96:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9D:A5:93:99:43:06:D1:E3:28:6B:6C:38:B3:C4:8D:07:47:5F:E3
X509v3 Authority Key Identifier:
keyid:54:3D:02:17:97:41:37:2E:18:28:11:E1:85:2D:58:4E:FD:CF:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e6:90:2a:95:c8:83:ab:54:fd:95:e9:73:9e:a5:b6:73:d1:
3d:62:a6:69:71:81:90:92:16:db:cd:4c:48:36:42:60:f3:70:
41:9d:30:5b:85:6c:a8:f6:c2:a3:46:be:ff:04:6b:93:86:02:
42:b2:78:43:87:df:38:a2:6e:c2:df:1b:15:a3:c7:63:a6:09:
ba:94:ed:1d:1e:19:8b:48:0d:96:3b:6c:fb:b2:2d:e9:b9:93:
14:0f:fd:68:a2:7c:c0:f5:95:64:fa:a9:fc:3d:8b:58:62:47:
c8:31:b9:95:ec:72:0a:af:5a:f3:23:0c:6e:9d:d6:a0:7c:85:
3b:0b:53:d8:5f:00:9d:c5:43:87:53:14:c6:e6:10:84:f8:df:
d7:a3:9b:c1:b0:0b:78:a2:2c:8a:ca:d8:fa:e2:cc:d7:0f:7f:
6e:76:ce:dc:94:e8:f9:22:2c:2e:a8:8e:04:2f:9e:12:d3:88:
23:ef:0f:cc:47:15:24:a5:30:df:64:1b:88:d8:d2:44:63:fd:
36:c9:85:00:42:93:08:c1:13:d2:ca:8b:cf:62:f1:e3:78:39:
7a:aa:98:87:0e:98:43:09:91:53:d2:e0:d2:e0:17:bd:0f:67:
55:a4:b6:8b:3d:d4:59:88:dc:3e:ee:8a:0b:8e:0d:3b:44:3c:
29:7e:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:36 2026 by rpki-client