Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: xyQydqoQPSdt1lO5rW/a4YIgDVgCJD2tYegkuyfGIQU=
Subject key identifier: E8:C7:89:0F:C7:15:EE:D9:A3:5D:CA:F1:B9:B1:DA:C7:AB:3C:3B:11
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019D273AA5A4117E431BEDEAD0063C9B413B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 03B7
Signing time: Wed 25 Mar 2026 23:00:47 +0000
Manifest this update: Wed 25 Mar 2026 23:00:47 +0000
Manifest next update: Thu 26 Mar 2026 23:00:47 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: ZQVtAc4Rf+c0byxv6swJMQOV0oS91j7P+3VC46K5rbQ=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a5:a4:11:7e:43:1b:ed:ea:d0:06:3c:9b:41:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Mar 25 23:00:47 2026 GMT
Not After : Mar 26 23:00:47 2026 GMT
Subject: CN=e8c7890fc715eed9a35dcaf1b9b1dac7ab3c3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:f3:0f:f6:f3:6c:17:6d:45:d4:6f:0e:77:
36:10:47:58:bb:76:a4:6c:e1:cc:d8:9b:8d:94:e1:
2c:45:27:90:10:3e:ac:19:78:56:35:57:34:3b:f4:
7c:1e:56:5a:b9:0d:88:d4:4e:b0:7f:4b:75:65:b3:
10:45:2c:c1:39:b7:ff:cb:e8:ea:a6:9f:f9:4b:4e:
5c:6f:08:50:5e:81:92:96:44:b9:a1:ae:69:11:4b:
e3:b8:f7:ee:bb:65:57:70:17:10:1c:83:31:55:08:
d6:65:8d:9d:3d:e9:55:9c:61:12:33:b3:b0:37:7d:
72:e0:52:f6:85:43:35:22:7c:89:b9:8d:73:c9:c2:
e2:88:84:95:74:7f:2a:14:6b:1b:94:21:3f:4a:4a:
e0:44:2a:40:81:c9:8c:f6:0e:ab:10:13:4d:29:9b:
54:a0:4c:c4:59:19:b7:24:e3:52:f2:78:75:98:99:
c4:8b:12:92:bb:25:86:f8:32:78:ae:51:a4:15:68:
c9:8a:fd:79:18:43:57:92:3e:f1:62:f8:61:95:ef:
11:23:6c:af:4c:75:80:ba:70:8b:6d:d6:55:d8:81:
f3:0c:17:80:3c:67:4a:61:92:e1:9f:0c:f3:8b:83:
73:f8:f5:b7:f2:fe:6e:7c:f7:37:e1:c5:6d:ed:6d:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:89:0F:C7:15:EE:D9:A3:5D:CA:F1:B9:B1:DA:C7:AB:3C:3B:11
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:32:90:33:37:88:b2:46:33:2c:32:c9:e6:0b:07:ab:92:2d:
96:c7:20:5c:bc:86:cb:aa:7c:08:d6:2a:65:13:e8:6d:e7:bf:
72:f2:ec:03:8e:64:45:fd:2d:b0:7e:14:c3:41:a4:e4:9d:1a:
02:07:ab:4a:b4:f1:67:dd:ba:db:61:d7:42:34:ea:e1:71:46:
5b:2a:35:96:52:87:3b:02:73:b3:53:b7:f5:45:3c:f1:cf:53:
38:35:78:51:08:df:b2:15:bb:fd:4a:30:0a:62:c3:2e:91:ea:
b3:29:7b:64:6e:e2:73:28:5c:83:a8:91:a1:bc:24:59:41:e5:
3a:06:db:93:bf:62:78:ef:1d:92:ef:85:62:9f:5d:1c:37:fb:
72:71:54:5c:3f:65:7b:3d:82:dd:f0:66:0c:db:36:75:44:10:
a4:9b:9b:cb:ac:dd:98:61:c6:f2:54:e9:30:51:e1:a7:50:31:
4e:e9:3d:04:fc:95:4d:02:73:87:1f:ca:31:12:05:a3:ba:4b:
13:ad:a6:ab:5c:98:2c:11:42:79:5b:c6:57:dd:de:fd:a7:54:
3a:8f:1a:5e:57:41:58:7c:a9:ac:02:dd:9a:e0:0b:d5:36:46:
e7:f7:d6:ae:20:f6:2a:98:3f:2c:76:bc:5b:92:b8:97:a6:18:
73:09:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:29 2026 by rpki-client