Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: PkcvAKVMieq5DC24eDYZyelgFQD/3aNKVE/l1/UCzxo=
Subject key identifier: 96:7E:D8:7E:C3:A7:4F:E6:31:3C:6C:D7:F9:5B:48:DF:37:F4:D1:3D
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 01A1DBDDAA7841A68520CB842B77A457F2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 02FC
Signing time: Sat 14 Nov 2026 21:01:39 +0000
Manifest this update: Sat 14 Nov 2026 21:01:39 +0000
Manifest next update: Sun 15 Nov 2026 21:01:39 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: oTDzqae1kDWTmZAxTxWcyHt4zZtsujb/NXiEMFe9i/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:aa:78:41:a6:85:20:cb:84:2b:77:a4:57:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Nov 14 21:01:39 2026 GMT
Not After : Nov 15 21:01:39 2026 GMT
Subject: CN=967ed87ec3a74fe6313c6cd7f95b48df37f4d13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:f5:1d:16:9f:6e:94:e6:92:bf:5e:cf:5d:
3f:bb:5e:63:e1:63:aa:91:f7:9e:13:9f:49:38:34:
0a:52:e9:11:83:28:cc:64:9e:b5:9b:14:17:0d:9c:
66:c5:f3:47:9c:f4:8b:65:a9:85:01:d8:37:eb:5d:
15:d7:23:ce:60:45:a1:de:87:d0:a1:b5:55:f5:45:
c5:51:c8:6e:4f:0c:18:21:73:6f:ec:6f:96:46:24:
22:bc:25:c7:12:32:0a:45:b0:1d:86:fa:ab:82:c0:
b9:fe:1b:df:26:56:27:30:80:ec:6c:d8:83:c7:9b:
a0:6d:01:95:37:c1:40:e9:37:06:8b:0f:97:1e:5a:
77:6a:8a:3b:4c:3d:10:8d:fb:39:8e:44:a2:00:9e:
db:9a:30:97:16:e6:a6:5f:e9:1e:3e:5e:d7:8e:32:
3c:25:3c:fe:05:cc:76:51:14:2f:f7:7d:bb:d3:19:
5c:fc:9a:b2:00:86:de:32:f9:f5:62:d3:23:42:5f:
cb:7f:04:e3:b6:3b:d3:1c:e4:e1:dd:a4:14:de:00:
b6:57:94:06:db:41:04:3d:ce:36:44:ca:68:2e:a4:
07:c6:58:29:8f:02:0c:59:62:e8:d2:5a:df:37:ac:
f7:d1:53:2b:64:c5:a5:92:27:11:f2:d8:d3:ed:6e:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:D8:7E:C3:A7:4F:E6:31:3C:6C:D7:F9:5B:48:DF:37:F4:D1:3D
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:00:5d:9d:99:97:53:1d:ce:01:31:9f:0b:a3:e3:d1:5a:
5f:18:03:b7:93:58:d8:7b:2c:dc:09:9c:c3:b7:47:97:c4:e2:
e0:f7:40:6b:11:e3:2b:a0:98:fa:df:7a:5c:ad:99:20:3a:35:
fe:f3:8e:c3:9a:e6:8a:dc:79:2b:e5:1f:04:e2:5e:98:8e:d9:
8e:4f:a4:d2:5d:9b:46:53:2a:c1:7a:e4:cc:43:6a:e9:80:b6:
37:63:48:dd:fe:10:3c:88:b7:1d:63:42:84:96:79:90:91:42:
84:67:1e:2d:2a:12:4f:8c:44:88:35:80:15:b1:b2:60:d1:c6:
a5:b3:cb:5d:b9:51:c3:d8:43:de:73:e6:ce:df:66:31:99:3a:
db:df:7d:45:6d:44:0e:9a:ad:f6:55:92:d5:16:7d:78:c0:f5:
a1:4e:63:b7:7c:58:e5:bf:bd:c8:fc:81:b2:91:f3:5a:29:de:
4a:1f:1f:1c:a3:01:5b:29:6a:d8:cf:bc:c1:c0:a9:db:42:75:
15:c8:02:30:1d:11:43:ab:3e:b2:43:72:4c:74:97:d0:ef:9d:
4f:ad:f9:cc:c5:ff:92:09:98:c4:30:66:54:96:f8:06:4e:17:
40:62:42:c3:75:91:e5:14:3a:dd:b5:80:94:8a:3d:38:b3:a9:
a1:64:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:37:55 2026 by rpki-client