Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: e/iWodFIf9yW7BwomY1I2tcvaY98G/3C9PX42mblbxU=
Subject key identifier: 06:27:42:5E:A5:2A:EE:47:B1:87:4E:71:74:9E:26:11:06:97:C4:80
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019E1F10C01E2D8D236AAAE9F53A9C6D12FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 12FB
Signing time: Wed 13 May 2026 02:00:51 +0000
Manifest this update: Wed 13 May 2026 02:00:51 +0000
Manifest next update: Thu 14 May 2026 02:00:51 +0000
Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: 7Oc9W9b52ozl6VwBNbPah0OiRNIX+WP39OvcPbd/xlY=)
2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c0:1e:2d:8d:23:6a:aa:e9:f5:3a:9c:6d:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: May 13 02:00:51 2026 GMT
Not After : May 14 02:00:51 2026 GMT
Subject: CN=0627425ea52aee47b1874e71749e26110697c480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:ef:59:c0:85:e9:e3:07:9f:0b:01:86:5f:
a3:df:56:50:5b:ac:0d:ae:bc:45:6e:a9:4f:e7:18:
56:e4:38:9b:42:b1:bf:0c:53:ac:89:d5:36:4f:e9:
61:45:f4:69:1f:54:2a:dd:a1:45:5a:51:90:88:0b:
21:80:d3:b4:bf:c8:d2:13:38:56:e7:82:59:86:06:
ad:81:60:91:2d:a4:3f:e8:30:39:7d:ef:de:f9:de:
68:23:a3:81:76:1d:be:c9:66:dd:36:f5:be:ac:74:
35:3f:2a:6b:d7:9a:20:d2:9a:bd:84:33:02:fa:3c:
4c:68:9f:55:48:e5:bf:03:a6:e6:76:5d:5d:81:a3:
5a:62:ab:89:7f:dc:d2:08:09:cb:56:36:fa:d1:bc:
b2:c2:d9:76:50:6d:a0:9d:7d:20:24:f2:3f:eb:a1:
71:85:1f:13:86:bd:12:9c:45:2c:bd:b7:24:f2:b0:
09:13:c1:53:34:43:b1:21:8a:bf:76:66:9f:da:ba:
0e:7e:97:dd:91:40:56:64:60:ff:7c:83:4d:63:c3:
12:c4:4e:8d:02:6a:f1:52:f3:07:f0:d2:d6:d9:23:
ee:a2:b8:22:8f:a5:66:af:ea:ea:b6:a0:48:75:ec:
d7:17:aa:c4:ed:cd:6f:a8:53:6c:7d:a4:04:79:52:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:42:5E:A5:2A:EE:47:B1:87:4E:71:74:9E:26:11:06:97:C4:80
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7c:f0:fd:1c:ea:f9:66:df:eb:43:9a:09:3a:5c:64:be:10:
1c:10:46:ca:f4:63:30:f1:4d:8a:4e:b4:b8:ae:5d:0a:16:05:
57:18:c9:7a:12:16:f6:af:fb:36:7a:28:cb:cc:3b:3c:41:bc:
fa:84:9f:45:91:26:43:8f:f4:e8:c3:1e:28:5b:a8:72:44:95:
f2:40:38:23:49:3f:43:fe:3a:45:a9:1d:36:32:0d:9b:c0:f7:
7f:a4:27:d3:23:04:02:72:e5:5a:4b:77:0d:00:92:32:ea:4d:
ff:72:8b:cb:db:35:19:1c:16:ec:c0:bc:64:80:9c:9a:6f:a3:
0c:72:b6:bd:5d:fe:0f:35:59:02:5f:f4:45:3d:bb:1d:37:1b:
00:43:e3:3c:0e:57:e0:22:98:8c:b2:ab:86:56:24:b4:a2:71:
b2:79:a0:c7:c2:c9:4d:f9:de:d1:29:7d:d5:14:ae:c7:ce:97:
39:c6:2e:a0:d3:8c:6a:f0:3e:3d:dc:58:1e:32:81:02:0e:fd:
a1:7c:22:1d:2a:5e:8e:22:20:73:3c:5a:6f:4e:ea:51:85:30:
bb:12:1a:2c:4c:e0:eb:57:ca:1d:af:d3:be:72:ec:bd:63:f5:
76:31:cf:16:e4:dd:e2:ec:7b:ed:08:95:ea:17:18:3a:25:b1:
d6:fa:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:20 2026 by rpki-client