Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: kFn/A8SKykVgeezQ06K3TKV/2lmpjk6tonKSP5S8C/0=
Subject key identifier: 8F:40:BC:D9:15:D2:97:FC:EF:A4:BB:3B:B1:42:1D:DF:4E:8E:A0:F3
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019E205AAF47544BE10E2FBD3291B36A6E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 0438
Signing time: Wed 13 May 2026 08:01:14 +0000
Manifest this update: Wed 13 May 2026 08:01:14 +0000
Manifest next update: Thu 14 May 2026 08:01:14 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: OH/sQrzZDikIGvHiGs7Wns9AZpXZ/Y/wkYLobJq9ib0=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:af:47:54:4b:e1:0e:2f:bd:32:91:b3:6a:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: May 13 08:01:14 2026 GMT
Not After : May 14 08:01:14 2026 GMT
Subject: CN=8f40bcd915d297fcefa4bb3bb1421ddf4e8ea0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:03:e9:30:99:23:33:80:c9:f8:b0:b6:12:
b3:88:8e:7e:57:bd:38:4d:24:27:68:1a:f3:1e:25:
0c:de:9b:02:ab:55:39:22:4c:3a:03:a5:1f:26:ab:
79:58:48:50:5a:6c:00:a7:f0:30:f3:4e:4c:9b:91:
6f:fe:ec:af:c7:1f:43:b1:b1:47:7b:5d:11:6e:e7:
51:6d:7a:12:6f:57:0e:79:7e:5f:31:45:4e:6d:f4:
aa:78:1b:76:da:50:0c:1f:62:f8:b2:19:71:16:62:
71:a9:6c:5f:38:0f:7d:50:48:3a:fa:e5:a3:f4:0e:
5f:c3:58:8e:6a:10:ae:0b:58:7e:a9:e3:73:db:56:
9c:95:18:4e:de:9c:79:b0:9c:6a:29:5c:bd:10:49:
e0:1c:db:d4:69:b8:3e:9c:d3:17:ae:94:0f:52:37:
d6:22:f1:7c:09:cc:db:da:2e:cf:ff:71:66:84:1a:
ff:20:de:f3:88:51:2b:1f:83:c8:79:c5:07:ce:ae:
65:4d:3b:0a:5f:57:77:71:10:c5:8f:7b:21:37:71:
83:60:e2:5b:9f:08:29:97:70:3b:97:5c:d4:dd:86:
9e:be:56:ae:d3:fe:ad:9c:fa:15:af:a7:16:f8:9f:
7c:ef:47:c8:14:4c:94:82:68:aa:a0:de:81:ac:68:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:BC:D9:15:D2:97:FC:EF:A4:BB:3B:B1:42:1D:DF:4E:8E:A0:F3
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:15:5e:73:f1:4f:83:ab:82:15:ae:57:74:34:cc:4b:96:45:
3d:e2:19:71:60:a9:93:19:06:10:0b:b0:8b:ca:85:48:ab:45:
1c:c6:fb:4b:e7:07:c5:f0:84:1c:35:bf:eb:76:b1:2a:9e:b9:
80:2b:39:19:da:d9:40:2e:8c:2d:99:4c:fa:d0:83:cb:f6:0c:
02:16:ea:8b:16:9e:eb:35:14:8e:59:0a:66:54:0e:21:23:a8:
83:bb:99:54:17:6a:8d:b4:c4:16:cf:9c:dd:bb:7c:6b:c3:9e:
41:5e:56:42:7c:25:40:2f:09:5e:e0:93:bc:91:72:8f:31:60:
10:0a:47:a5:dc:4f:3a:11:ed:ff:e4:90:6a:11:c4:db:41:5b:
b6:86:57:cf:dc:2b:c3:63:f0:11:4b:bc:8b:31:d0:7e:7b:c9:
ed:3b:f5:33:9b:21:9e:34:12:3e:d6:60:b5:fc:b4:6d:4c:e6:
d7:e2:ad:0c:78:5e:10:d2:3d:23:5a:8e:d5:97:07:4b:eb:67:
87:b7:77:bb:49:da:18:70:25:d6:ac:0d:a6:3b:a3:d9:a3:8a:
d1:01:fa:fb:ed:c1:11:9c:0e:64:81:67:e7:76:1f:8f:54:f5:
82:5c:3d:4a:54:aa:7c:91:d6:6d:a1:27:5f:7f:8f:ab:d6:24:
1b:57:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:22 2026 by rpki-client