Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: 2m3f9myUOeJFh4yoq2U5xki2/4vq27xywg4PNSNX9F8=
Subject key identifier: B9:52:59:99:30:FD:23:B8:53:F5:AB:18:9C:4A:8D:C7:43:D5:DC:2B
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 019E1DFE8BD9A7FE97109A9CF2505CA0F45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 010C
Signing time: Tue 12 May 2026 21:01:21 +0000
Manifest this update: Tue 12 May 2026 21:01:21 +0000
Manifest next update: Wed 13 May 2026 21:01:21 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: miVAmfsUVD6KX4KCa+H8XLXgtUEHX2nAzFGzYB8eb4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8b:d9:a7:fe:97:10:9a:9c:f2:50:5c:a0:f4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: May 12 21:01:21 2026 GMT
Not After : May 13 21:01:21 2026 GMT
Subject: CN=b952599930fd23b853f5ab189c4a8dc743d5dc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:0b:9b:43:0d:8e:f4:e5:e2:77:15:09:a7:
1a:4a:a4:9d:82:c1:cf:42:02:5a:3d:f0:f0:2b:2f:
88:6b:60:50:44:17:e4:9c:dd:ca:42:db:44:4d:dd:
d0:87:75:77:18:21:c0:56:aa:3f:67:9b:42:ca:1f:
bd:f9:64:7b:2d:03:1b:21:85:7c:a6:3e:54:a4:8f:
ea:bb:47:4b:b9:d4:83:0d:d6:f1:f1:d6:4c:ad:43:
a2:11:d9:26:c5:ca:6f:7a:ea:49:38:17:65:09:fc:
fb:04:ac:f7:92:d9:43:a7:5e:66:12:f2:ae:b2:80:
e2:8c:f9:0b:60:12:81:9d:85:a4:0c:ba:c7:94:8d:
21:3a:ca:38:89:17:88:c9:f9:cb:96:18:f5:a0:ff:
12:69:d7:2d:2a:7e:6c:d3:26:6e:9b:c5:c1:cd:c5:
5c:33:34:b7:10:f1:2e:82:f1:66:1b:14:8e:c4:05:
df:6c:52:46:d5:ef:13:88:5b:ad:05:37:84:c2:9e:
20:1d:2e:c2:08:95:1d:4d:52:c1:8d:e9:a0:c8:d2:
ce:b8:97:d1:ac:ce:20:84:99:ea:c9:c2:e3:81:6c:
71:9e:94:1f:65:54:53:08:c8:0d:21:31:d2:62:2b:
71:c8:2f:09:40:71:99:2b:8b:bb:7e:80:17:ce:8b:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:59:99:30:FD:23:B8:53:F5:AB:18:9C:4A:8D:C7:43:D5:DC:2B
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:c4:38:83:87:34:77:10:d0:7e:a8:dc:56:3e:6f:8f:cb:
69:58:a9:77:88:a9:9d:a6:db:89:60:f2:55:27:82:54:1a:07:
cf:86:28:4e:7c:6d:20:57:68:98:2a:3b:4d:67:63:b5:27:9e:
ab:f9:6b:8d:a3:fa:da:62:ec:b3:62:0f:32:20:e1:73:f9:2d:
89:68:55:86:a9:5d:50:bd:54:c1:4a:85:ca:9b:46:9d:3f:3f:
b1:f1:d4:3b:03:b8:d3:e8:83:f5:25:21:13:b2:3d:7b:4c:6d:
7e:26:6c:cc:7d:01:c5:16:b9:8a:27:cb:f6:0c:a5:af:29:9f:
58:49:e0:54:79:79:cf:58:ec:6e:77:3b:25:cb:76:8a:40:9c:
23:14:95:cc:85:d8:e1:22:f7:96:5b:91:12:76:77:d9:ce:af:
a4:cd:fd:49:ed:3b:7e:86:9a:ae:de:11:25:5e:b3:04:79:28:
ca:9c:2a:1c:14:0d:01:9e:10:ac:0c:b7:f8:81:94:1e:f6:73:
59:14:95:4e:b4:ec:96:e2:cb:85:55:fb:e7:45:7b:72:44:b5:
e8:2b:d1:9a:1b:40:f4:ee:31:10:0a:5c:eb:75:bf:e7:bb:c9:
93:8a:44:a2:6e:d0:87:82:0b:9b:b3:46:8d:d1:6d:d9:71:70:
d1:e0:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:52 2026 by rpki-client