Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier: BU13RW2fonZim9urCHvYbnxnyEzwpflTByVDkQrLhDA=
Subject key identifier: 31:60:B4:51:77:D9:67:B1:EF:49:0C:A5:94:D2:C2:FE:9B:94:79:45
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial: 019D273A832712691B9E51C53D66A9ADD2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number: 07AA
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: CT3ATZ/HGA/J4Xkv/vRp+0hqqtTi7KN2HSjpy75qij4=)
2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:83:27:12:69:1b:9e:51:c5:3d:66:a9:ad:d2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=3160b45177d967b1ef490ca594d2c2fe9b947945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e2:a4:00:b2:df:50:bd:12:ed:20:ae:4c:5e:
d0:c1:73:58:e1:3a:ee:97:1c:28:9a:df:67:d9:52:
7e:06:67:7c:b7:6d:43:bb:94:9c:52:17:59:32:e9:
ee:6f:04:a8:58:e7:db:40:90:ee:c2:5c:c5:a9:e6:
4a:e6:36:f9:28:d8:54:fd:85:0e:19:05:07:3e:c3:
de:30:6a:12:89:d6:5d:1a:3b:94:8e:2c:af:55:a0:
d4:19:20:0d:3a:36:a7:51:5f:0c:33:19:d6:eb:b0:
ee:70:1d:8e:7c:4a:b1:6d:4a:91:9e:25:32:d9:3f:
f0:ac:88:68:42:86:0e:76:50:0a:50:5e:b6:91:8c:
5d:0b:ed:c9:ed:c2:9a:15:2a:ba:ae:75:07:5b:84:
bc:ae:b4:d0:cd:6c:c7:a5:af:e7:f4:2b:ed:90:7a:
cb:ec:04:9a:4b:53:a1:75:4c:7a:5c:27:1f:1f:4e:
13:1b:b3:e4:91:3b:92:f3:e0:68:c3:08:2e:0d:65:
eb:c2:ae:fa:07:06:14:e3:87:97:c1:39:17:69:97:
d6:5c:4f:54:4d:8e:f9:00:2b:c8:76:36:08:ac:a2:
ad:cb:8b:59:33:85:64:bd:80:06:fe:c9:4a:8d:e4:
10:90:3d:af:fd:95:f9:1d:e4:c9:06:78:a9:e3:11:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:B4:51:77:D9:67:B1:EF:49:0C:A5:94:D2:C2:FE:9B:94:79:45
X509v3 Authority Key Identifier:
keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:84:01:da:6c:c2:0d:67:07:45:e9:a0:8b:68:ed:c0:07:75:
0a:d2:33:58:64:62:a6:21:b6:a9:b7:4f:a5:6c:90:f7:c2:b2:
b7:8f:81:c6:d8:c3:34:75:90:43:6b:4b:59:1d:b0:c3:b2:92:
f3:47:bf:81:fa:d1:3f:76:90:46:b4:35:e6:6e:83:24:a4:30:
70:67:a2:16:e8:8f:85:b8:cd:16:6d:04:5b:8e:2f:b9:0c:a2:
00:10:bb:83:09:2d:c5:1c:4f:e4:a0:0d:22:07:83:cd:4d:b8:
ee:3f:5b:7b:07:91:c6:11:38:81:ea:ff:51:9e:2b:61:85:8e:
2c:86:53:87:cc:3f:fd:80:2d:8c:cf:c8:fb:68:a3:98:4d:b3:
0b:f5:c2:b5:27:49:45:e0:e7:71:7c:21:ff:40:70:e0:40:cc:
d1:d4:17:03:92:d0:39:87:f7:92:e7:1a:46:1c:0a:ab:90:b1:
9a:a2:f6:01:47:6e:54:7b:88:4f:6c:b7:c0:2e:79:9d:e6:d7:
69:d8:3c:4f:cb:c4:59:55:6f:42:3e:83:a3:e2:d9:7e:c9:09:
9f:7c:7c:3c:2f:20:11:09:cc:eb:47:51:6a:88:3f:c9:76:8f:
e3:37:f8:7d:8c:76:64:c9:31:e2:6d:a7:27:31:9e:90:f4:08:
98:00:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:32 2026 by rpki-client