Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier: fZgH9OJ3U5xRDZkB3UOkMTMtL5OcPt6MuzMi15iZy3Y=
Subject key identifier: BF:49:29:EF:22:29:04:54:FE:B6:C1:B9:A4:72:AB:32:2C:CE:E7:2F
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 019D2960CB0CA5022BF79182DAF1428AECDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:42 +0000
Manifest this update: Thu 26 Mar 2026 09:01:42 +0000
Manifest next update: Fri 27 Mar 2026 09:01:42 +0000
Files and hashes: 1: Q56vED3-1_h936Q-ifWJs53c2GY.roa (hash: OY22bFuEd/zv+11Gst6hYDrj07QiCcY3HPOcMh0b7Ks=)
2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: ePk8jjVynJSiyLdjvygMzVmzSZk+36zL5MfgcrS3vVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:cb:0c:a5:02:2b:f7:91:82:da:f1:42:8a:ec:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Mar 26 09:01:42 2026 GMT
Not After : Mar 27 09:01:42 2026 GMT
Subject: CN=bf4929ef22290454feb6c1b9a472ab322ccee72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:ea:cd:6c:12:31:85:f0:71:ac:95:6e:1e:
a4:9b:22:24:33:ee:fc:77:3b:9d:ef:fd:7b:3e:86:
a6:d8:61:45:c5:cc:b3:91:42:24:a0:cd:ac:b7:98:
7b:f0:ef:ab:40:67:49:70:86:a8:64:dc:9c:2a:ac:
b9:26:95:86:28:9d:94:71:7c:07:b2:44:8c:08:6d:
3d:65:df:91:bd:a1:00:73:65:87:c5:03:73:7c:9c:
b0:f2:1b:3e:02:ee:ea:19:87:a5:98:4d:c1:6f:aa:
b7:2d:be:3a:7a:45:9d:ae:3e:eb:91:98:c7:c3:23:
6e:54:96:84:e7:eb:d6:bf:b6:20:75:f1:c6:6c:5b:
66:72:2f:3c:28:d3:93:a1:95:76:2f:1c:19:80:dc:
6f:d0:e4:30:30:10:f5:39:a5:19:3e:d2:66:5c:52:
a4:7b:c1:2c:7e:fb:93:40:1b:e7:e4:43:11:ea:2a:
ca:9a:89:c9:58:a1:a0:18:8e:84:47:39:04:3d:81:
c1:73:29:06:00:e9:ac:d9:90:2b:ec:d7:af:de:af:
15:fc:df:ed:8d:57:ce:73:44:01:ee:86:94:6c:c3:
42:36:24:d9:61:77:ee:4e:55:fa:9e:41:6e:2f:87:
1d:33:11:8d:79:c3:42:1b:60:42:6f:d6:a7:bd:6a:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:29:EF:22:29:04:54:FE:B6:C1:B9:A4:72:AB:32:2C:CE:E7:2F
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:33:11:51:40:f6:90:3e:c9:5a:86:d0:94:36:b8:ed:ab:c1:
ce:87:47:70:ab:18:93:21:2d:af:90:60:2e:8c:85:c0:d0:41:
47:fe:c8:72:1e:54:5b:7f:eb:42:12:d2:7a:7f:c8:b4:20:8c:
e6:44:63:a6:2b:ad:91:e3:fa:7c:a7:2e:b3:a3:b1:55:b4:62:
e0:96:a3:87:98:84:8d:c4:c9:08:f7:a8:a2:70:38:cb:2c:ec:
82:4b:5b:20:b0:c9:e2:51:17:a7:28:b7:c2:1f:f0:be:5e:6f:
aa:cd:a8:ba:80:15:e6:75:81:62:a0:1d:24:5a:0b:ba:a2:34:
b8:60:fc:7d:6d:53:cd:2c:fc:dd:35:b0:2f:1a:f4:e0:95:01:
dd:b8:68:2b:25:4a:ae:90:c5:09:e2:02:df:39:f8:68:75:60:
dd:9a:bb:04:b1:a0:47:c4:44:e0:81:b0:65:08:24:ac:2a:d2:
0c:33:99:3b:c1:7a:4a:1b:31:07:8d:b3:a1:0f:9e:f6:87:60:
71:83:ad:f3:01:fc:3d:28:49:f4:cd:44:94:e6:4a:88:95:32:
b7:a2:ea:cf:17:87:55:5e:fb:a8:82:16:2a:15:b9:84:53:1c:
c9:4f:55:65:68:a3:72:e0:63:69:3d:d5:ad:77:dd:cd:92:1b:
90:4f:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:58 2026 by rpki-client