Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File: VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier: 8Z1Dj7yqUkYflNOgCymJqez2LsMabZgmH4/e3BwXs+E=
Subject key identifier: C0:75:C4:7F:30:37:FB:68:30:CD:87:22:D4:9D:BC:48:FF:B7:F6:1F
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 019E1CEBB37B24F532D5D219E1BBA3C32F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number: 028E
Signing time: Tue 12 May 2026 16:01:09 +0000
Manifest this update: Tue 12 May 2026 16:01:09 +0000
Manifest next update: Wed 13 May 2026 16:01:09 +0000
Files and hashes: 1: TboL8PiKmGO2xSdCzYOzLLLsrgo.roa (hash: L+TeEKzIHBiCwRJJ12WlexzFz32tqwEp+pqXfiwcHm0=)
2: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: CuTRq6sKb7mH4QBIqO/QcfBsPeCL0To2ZNUIFG2cfyM=)
3: fepTS1XefYM5Mm0VJMMPSN02wxo.asa (hash: VKdt4tdwgcz86/Usr6Qv72R8qP1GifrjrQfQv6ap4/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b3:7b:24:f5:32:d5:d2:19:e1:bb:a3:c3:2f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: May 12 16:01:09 2026 GMT
Not After : May 13 16:01:09 2026 GMT
Subject: CN=c075c47f3037fb6830cd8722d49dbc48ffb7f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:c3:ac:1f:8e:ef:ed:c9:f9:1a:e7:aa:38:
6e:59:0e:e1:1b:18:22:1e:02:71:c0:29:c6:97:44:
58:d0:86:19:ba:2e:e1:dc:09:25:9c:40:ad:45:fd:
a6:3e:f2:3d:e5:3f:32:65:42:4b:a7:ff:50:7e:48:
f3:61:10:b4:e1:cd:2d:ee:8b:56:24:13:88:30:8e:
0b:ec:45:37:ec:df:5a:63:da:d1:7e:9c:8a:da:02:
5c:cf:e3:5c:ac:dd:7c:a1:40:ed:98:18:ae:1b:e3:
22:21:a4:e8:55:1d:6a:34:10:f4:c0:ca:30:fa:d8:
d6:ad:94:7a:6d:f8:c6:21:8e:de:58:a0:5e:57:17:
17:14:6b:3f:97:9c:4e:3c:84:40:d4:fb:a3:e2:40:
ab:28:ea:e8:fd:0e:d7:88:50:4c:8e:10:4b:5d:44:
3b:3f:7e:15:e1:65:a4:24:39:a9:24:47:45:0c:46:
2b:da:7c:67:83:24:6e:be:e3:b1:5d:9a:aa:ba:a5:
c1:76:b1:63:50:62:df:0e:bf:61:d9:f1:0a:23:e7:
26:52:e7:17:13:59:75:ca:6f:ef:6e:e2:1a:0f:b3:
70:a6:55:68:b8:58:b3:dd:e5:79:7e:94:5c:2f:59:
0e:a1:ae:2e:12:6f:f0:72:bd:26:56:37:62:a3:ef:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:C4:7F:30:37:FB:68:30:CD:87:22:D4:9D:BC:48:FF:B7:F6:1F
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:79:35:56:20:42:ce:f7:0f:c9:3e:54:5d:f7:bc:b6:19:fa:
52:71:cf:45:a5:7f:4e:4a:09:c0:a2:03:cb:da:bf:2d:52:fb:
c7:80:5b:71:e3:eb:a2:2e:d6:73:a4:9f:30:88:2d:37:eb:5d:
71:32:11:33:5a:ff:61:9a:5d:70:2f:f2:48:f1:35:be:82:34:
7a:10:9a:a2:02:5f:62:42:20:d3:b1:99:56:ea:59:09:b9:fb:
a2:15:e4:2c:5c:8b:98:80:44:0c:00:20:f0:48:d5:56:be:e9:
5d:a4:c3:70:16:8f:cb:e6:ee:20:6f:e1:09:27:6e:26:c8:94:
33:b9:d3:b4:d9:b2:41:1e:6e:60:09:85:98:28:ee:a9:77:57:
42:8f:48:90:ad:82:27:3f:5e:b9:a6:c4:7d:59:22:7f:31:80:
0f:9d:26:c1:7b:dc:36:d2:be:0b:82:ef:30:c3:d3:40:3d:40:
03:ed:e8:82:92:36:a6:06:ee:74:f5:57:0e:4c:fa:2e:fd:5a:
f9:79:f4:e0:00:b4:d9:0a:76:a2:83:8a:c7:38:68:8d:13:4e:
00:b3:e9:63:f9:89:c2:d0:62:c8:a4:ee:78:46:a3:57:cf:b4:
b2:b9:50:0b:fe:7c:46:c2:d6:2b:e5:e0:23:5f:a9:a3:d4:b8:
54:36:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:10 2026 by rpki-client