Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: +ZCgXkpvfHJn7i+mReqWc/RJEc3dFsuurD197UBKS2M=
Subject key identifier: 64:28:42:68:2D:50:60:8D:F1:B2:6A:BC:71:2A:2B:BA:41:2F:02:D6
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 019D32635E1DC498347B70C3A5EA3C689BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 92
Signing time: Sat 28 Mar 2026 03:01:05 +0000
Manifest this update: Sat 28 Mar 2026 03:01:05 +0000
Manifest next update: Sun 29 Mar 2026 03:01:05 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: YuP1o7CaE+QM9I8eWalmmzm3aobf7wnFmnU4Ts82LD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:5e:1d:c4:98:34:7b:70:c3:a5:ea:3c:68:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Mar 28 03:01:05 2026 GMT
Not After : Mar 29 03:01:05 2026 GMT
Subject: CN=642842682d50608df1b26abc712a2bba412f02d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:f7:98:02:cd:86:fc:b7:d4:42:a6:87:2c:
fb:74:8d:91:ec:1c:d4:d6:79:0f:c6:d0:e2:bd:6d:
2b:9a:ed:12:aa:40:78:b8:b7:91:93:46:13:41:84:
9e:9f:af:01:8d:c7:32:d5:c4:2b:02:51:d3:c1:45:
43:af:84:ab:85:12:65:04:bd:e3:d7:b7:36:9a:ba:
5a:e6:5a:2a:d7:49:41:30:92:9f:c3:e2:42:36:ef:
04:6e:4a:50:42:de:27:03:10:ae:79:3b:19:a6:32:
4f:32:8a:79:9d:cd:b8:1f:40:82:23:94:38:0d:f2:
72:a6:b1:2a:73:05:6d:ad:e8:1e:4e:f6:aa:40:25:
fa:54:ee:e8:44:b3:c8:9e:72:f6:d9:2d:4c:20:0d:
e1:8e:a0:d8:b1:96:c7:02:ba:68:90:72:05:04:d9:
92:39:0b:33:83:4a:34:06:1f:f0:76:2c:61:0a:b8:
f5:f4:5f:c9:b7:06:29:01:e6:70:3b:08:40:fd:bf:
65:c3:e7:9e:98:04:ef:45:a2:ec:29:a9:03:e5:c3:
b7:78:e7:c3:60:9d:a6:68:91:75:68:3c:d8:a1:be:
d7:4a:a2:72:70:3d:84:94:61:66:13:dd:06:cc:86:
38:81:bb:d8:6e:ee:7a:9a:77:14:82:e8:f6:81:7d:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:42:68:2D:50:60:8D:F1:B2:6A:BC:71:2A:2B:BA:41:2F:02:D6
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:11:bc:38:4f:23:a6:e3:07:c7:a4:c3:d0:b9:ca:59:1d:1b:
14:d2:7a:08:fd:bc:b1:67:b3:b1:ac:6d:0b:79:42:a1:a7:c9:
25:52:e6:67:cb:2a:4d:2e:33:51:fc:cb:d8:8b:a5:cc:29:00:
12:4c:70:30:65:4f:5f:78:36:cd:cf:06:f4:5d:a2:e4:72:9c:
72:0f:61:9c:b9:b2:41:50:cc:b1:ff:fe:22:25:cb:c2:65:23:
ef:81:33:1c:18:4e:b2:de:17:e0:96:7a:54:26:78:20:9b:75:
2e:50:56:58:54:b1:40:ad:6d:02:58:16:60:44:b5:ca:27:1d:
bc:c8:2b:3f:21:3c:26:31:bd:3c:01:03:bd:65:88:60:42:f2:
c0:af:6c:89:6b:3d:2a:c5:d8:42:eb:a2:23:0a:17:ba:6b:99:
d7:d0:ab:b8:0b:0b:f8:0d:78:ad:e8:ca:16:00:57:ab:b8:24:
84:3a:d0:96:9a:8c:fe:43:a7:38:89:04:8c:ce:06:eb:8c:cd:
48:9e:6c:de:b5:24:fe:0b:28:86:99:55:d4:8d:2e:fe:be:17:
42:ac:be:27:02:21:92:d9:1a:68:e5:f3:78:94:92:80:cc:d4:
92:b3:ac:a4:4a:10:48:5e:d0:60:09:e3:ad:ff:fc:b0:3f:ba:
bd:d8:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:48:56 2026 by rpki-client