Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
File: VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft (raw, json)
Hash identifier: cLVYbPh6s7ZttWf7Bd3bzIplX9wxm3JN6IpVwSjq6go=
Subject key identifier: 4F:FD:CA:88:DB:05:AA:54:E4:C9:CB:D6:1B:FF:B5:55:D1:C8:FB:89
Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d
Certificate serial: 019D28169242B62F9DBFBEBEE9A4E8F9FFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
Manifest number: 0477
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 24NDosuGOzoLKVetD4UFYNcQ4SA.roa (hash: x73nU2X10gXdOf1oB089+xGubJOyS5xtYbEaoPCCv+4=)
2: VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl (hash: eOfPBIARJxXAqeCHEES23XqByCDOQTrlN3kjRVcJkDk=)
3: ixPSDov5is1CTdWPuI6nUpxYEdo.roa (hash: j30+Tn85DLKw4a0VclBr/LX3MiFqXcwbshmPsr6R/Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:92:42:b6:2f:9d:bf:be:be:e9:a4:e8:f9:ff:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=4ffdca88db05aa54e4c9cbd61bffb555d1c8fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:a4:92:2e:60:65:c1:d7:a6:e4:6b:95:35:
13:2e:a1:5b:f1:c5:cd:4d:dc:33:fc:bd:44:1e:b8:
0e:d4:32:10:41:90:00:8e:71:de:82:2c:ad:bb:1b:
61:09:45:cb:65:5d:cd:eb:7d:a8:f6:cd:91:b8:8d:
70:47:30:74:ca:c5:f3:1c:86:9a:ef:3c:0a:04:1b:
70:5a:39:75:62:65:2d:c9:d2:3f:c0:5c:7e:43:11:
90:a0:ad:b6:78:29:40:77:02:91:75:76:fd:d1:fd:
c8:60:4c:94:fe:6b:df:8e:b4:0c:53:6b:89:b9:01:
5f:db:de:70:80:0c:3c:a1:e1:f3:2a:6e:08:f0:22:
e1:a2:c6:a4:69:92:75:75:9a:98:cc:47:a5:ae:2f:
76:27:94:ec:2b:37:b7:51:8c:8a:0d:04:b7:f4:90:
a9:9a:ae:5f:d5:83:e8:37:0f:ad:78:02:ff:d8:27:
38:16:1b:b2:5d:9a:bd:4f:94:e5:52:41:cd:8b:c7:
ed:fb:eb:a8:f3:56:cf:21:33:50:c4:87:9e:b1:d5:
af:20:83:e2:e2:6b:a8:b7:c3:9b:8f:c7:1b:d4:a6:
16:7e:b6:db:37:33:3b:d8:8a:22:f8:1e:e0:78:f3:
b3:13:ef:7e:01:62:44:0d:7c:7b:f3:06:d2:79:86:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FD:CA:88:DB:05:AA:54:E4:C9:CB:D6:1B:FF:B5:55:D1:C8:FB:89
X509v3 Authority Key Identifier:
keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5b:a2:6e:3b:48:af:8d:8a:de:ba:6a:7c:8f:c3:5e:be:35:
b7:0b:19:77:42:e2:9b:d4:dc:45:0b:11:b5:0c:bf:b6:7e:f5:
19:3e:07:c9:77:f1:c4:ab:e9:a4:01:c7:3c:45:ae:e6:a8:83:
f4:01:f3:68:77:90:c5:af:65:ca:d4:9f:09:f2:cb:45:d0:c4:
a4:0d:ee:ea:38:e2:e1:2d:e2:c3:38:e1:e2:da:4d:00:62:da:
42:45:75:d4:29:b4:a5:80:83:24:5d:6b:bd:37:88:b1:c6:f8:
58:e4:b4:88:31:65:bb:8f:0b:1e:94:e3:01:93:84:73:ba:49:
cc:7f:73:be:22:39:c9:81:c7:c3:50:65:57:fd:02:48:3d:a0:
19:04:c2:df:24:57:41:5a:06:b4:3c:8e:a0:ee:5d:9d:66:3f:
93:1b:4d:93:22:d1:16:be:06:f5:b5:4f:3d:41:07:a2:5b:40:
60:99:50:f8:cb:93:10:b0:df:dc:37:22:16:09:28:d4:73:fe:
7b:82:23:4b:02:bd:e9:3b:17:8e:0f:c0:e2:09:21:5b:7e:c5:
4a:5b:c8:af:3a:94:b7:54:70:3c:dc:1a:d6:bf:61:f2:2c:3f:
e8:5e:43:09:89:4e:2a:09:b4:d4:e6:9e:8c:e5:28:f6:6b:b4:
d2:5e:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:39 2026 by rpki-client