Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: fDLEreCMt+rCnYbi9WMfk5uprtR+Uj0jPDR6eJs2mkY=
Subject key identifier: AD:8F:4B:9C:1F:2F:72:B5:64:07:76:7D:DC:1A:8C:38:D0:17:C0:41
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 01A106264067671906F00446EE54AB712EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 09:02:12 +0000
Manifest this update: Sun 04 Oct 2026 09:02:12 +0000
Manifest next update: Mon 05 Oct 2026 09:02:12 +0000
Files and hashes: 1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: h6Ik6a5MZEmTAFbqIHLqLBzG1ihvRxc4eI9v51YrM3Q=)
2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:40:67:67:19:06:f0:04:46:ee:54:ab:71:2e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Oct 4 09:02:12 2026 GMT
Not After : Oct 5 09:02:12 2026 GMT
Subject: CN=ad8f4b9c1f2f72b56407767ddc1a8c38d017c041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:aa:e4:44:a1:6a:0f:f1:4e:e1:d5:d2:cb:
5a:df:1a:26:a5:8d:bb:da:0f:81:a7:aa:53:44:bc:
ef:a7:8e:f3:4b:c9:c9:ef:9b:eb:3d:56:e6:64:9e:
f8:f8:55:34:5a:52:85:36:c8:b7:87:c9:c3:c9:f0:
65:31:bf:1f:9a:16:fc:4f:70:64:23:e8:5e:04:90:
b4:3f:d5:c3:cf:c6:b0:96:24:5f:00:4c:60:5f:2e:
5a:ac:43:86:51:24:4b:2d:89:17:5f:7d:07:66:f4:
5f:ce:b2:64:60:17:12:33:f2:11:ba:3b:2e:fc:2f:
0f:1b:68:fa:a3:15:8a:14:21:00:9d:d7:2d:ec:a6:
48:59:79:0b:e7:2e:9f:10:5c:eb:38:fa:d6:e7:f8:
28:44:b6:c7:12:7c:7d:79:23:db:8a:a8:c0:1e:ad:
f9:75:0e:ec:da:0a:83:ba:db:be:28:dd:00:22:7c:
f7:bc:d2:1e:20:6e:2c:3f:eb:e1:8f:0d:48:d1:be:
e6:e5:2d:89:9a:39:54:e6:af:ec:41:73:33:d5:69:
5b:6f:6f:44:cc:a3:3a:84:cb:43:6c:35:f7:0a:c1:
f2:41:e9:4c:f8:17:8d:7b:6b:03:df:be:59:d4:ab:
8b:46:b4:85:c8:07:0f:53:68:49:62:50:46:91:1f:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:4B:9C:1F:2F:72:B5:64:07:76:7D:DC:1A:8C:38:D0:17:C0:41
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:83:90:fc:10:5f:cb:5e:c7:de:fc:61:c8:d1:d7:c0:47:50:
37:e2:7b:e0:49:53:34:06:be:10:a3:8a:c8:bb:44:90:02:49:
46:f6:5c:99:d8:f2:59:44:44:95:69:48:80:6e:2a:51:77:6c:
cd:e0:74:88:e5:e8:e8:4c:b9:4a:74:82:eb:48:22:c8:e9:f7:
2d:23:cf:25:31:b0:93:44:bb:74:63:78:ab:5f:43:c9:dc:9a:
27:4b:b5:be:f7:92:b6:a6:6d:da:44:91:74:0b:cf:ce:4f:8d:
c2:60:47:25:08:82:68:c9:6c:92:a8:fd:ea:b8:ab:d2:b3:9d:
4b:4f:2c:49:b7:b9:01:74:78:24:34:96:b9:da:37:f6:17:66:
c7:36:68:9e:6d:1f:43:a1:c5:1d:cc:b9:57:91:19:ed:d8:14:
65:ac:77:60:be:75:23:5d:d0:59:5e:e8:c6:8c:61:e6:fb:bd:
1a:57:82:90:e0:84:33:eb:b4:16:e2:c3:9e:17:b2:8d:1f:03:
f1:a3:a4:22:3d:97:3d:97:d2:b7:98:44:26:d2:19:85:5d:73:
e5:c0:a9:36:02:c4:e9:67:5f:84:f4:52:2d:8b:cd:7a:71:80:
27:8d:e4:01:1d:c4:83:d9:ac:25:bf:82:77:f2:bf:96:87:ae:
08:01:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:12:04 2026 by rpki-client