Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
File: VKzhXkXvtaAGDAZeJ06o46-wJes.mft (raw, json)
Hash identifier: XhRbWibmIGN4xvkbCpwyE5Wz5UI8SoMGhcYi+7nxHzE=
Subject key identifier: 91:8A:F5:1C:29:F7:C6:B7:9A:D7:95:65:20:FC:46:22:A9:88:09:E2
Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Certificate serial: 019D25BAADB3E5F3FBBD3375ED4B92903E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:01:24 +0000
Manifest this update: Wed 25 Mar 2026 16:01:24 +0000
Manifest next update: Thu 26 Mar 2026 16:01:24 +0000
Files and hashes: 1: 7Br6QJMiBJoDhVb_EXiCriWN_AY.roa (hash: gsWLGvyw0Im/+vXwSUKiwI1f5wizI+ESV/TWVUu641o=)
2: VKzhXkXvtaAGDAZeJ06o46-wJes.crl (hash: bog1sDkzxZay8LmgWBu/JXM51MNofyzGQHmed0X/8Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ad:b3:e5:f3:fb:bd:33:75:ed:4b:92:90:3e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Validity
Not Before: Mar 25 16:01:24 2026 GMT
Not After : Mar 26 16:01:24 2026 GMT
Subject: CN=918af51c29f7c6b79ad7956520fc4622a98809e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:f5:f5:b1:14:96:a1:84:ea:89:83:09:90:
73:03:26:48:ab:0e:d3:99:4e:f7:e9:72:65:6d:3f:
83:5f:b7:34:1c:54:67:98:3f:65:f9:41:2f:7e:7a:
f7:da:7a:db:cb:98:76:f9:ae:80:38:5c:68:44:52:
06:30:1d:34:72:5c:d1:10:da:6b:27:70:9d:f8:22:
b4:76:64:87:94:d4:a5:62:6b:69:88:0c:dd:f6:41:
9a:4e:cf:72:cf:e6:d8:fd:41:c9:aa:cc:a1:69:b3:
5c:ac:0e:37:3c:73:b4:06:d1:46:d5:2d:d6:93:b8:
96:5f:68:c6:10:ff:ae:a9:b6:83:66:3c:cc:8a:a9:
69:3e:77:f2:25:e9:cc:e8:f5:f2:d7:b8:ab:6f:f4:
95:9e:b2:be:04:2d:ec:0e:e8:ff:da:41:8c:d5:1a:
50:70:08:95:0c:2e:48:c4:31:cf:95:02:df:cc:ea:
e3:d9:17:b1:10:fd:34:de:f5:c0:72:9c:11:68:46:
9e:3e:4c:fb:13:cd:ea:2f:62:fe:c8:91:1c:ce:80:
7c:b6:06:73:e2:b6:72:8f:ab:87:d8:a0:89:a9:a7:
e2:b3:c2:ce:63:8b:77:5c:75:f0:7b:bc:5f:97:29:
1c:3b:99:f8:3d:67:7c:39:c6:aa:29:52:ab:18:70:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:F5:1C:29:F7:C6:B7:9A:D7:95:65:20:FC:46:22:A9:88:09:E2
X509v3 Authority Key Identifier:
keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c4:30:50:62:a9:a3:8b:fa:b1:e4:e2:8b:8f:e5:4b:13:d1:
5c:e5:9a:36:db:9f:0c:5c:f2:c4:6d:70:d8:65:63:ca:90:2a:
fe:66:de:05:42:86:af:91:f2:a4:dd:a3:8b:68:28:e6:64:ab:
95:68:08:df:b4:71:34:b1:a3:10:38:73:24:78:b6:f6:65:2d:
76:97:45:ab:4e:14:2b:3b:b4:b5:3c:e2:aa:a7:7f:2e:d9:bd:
75:3e:bd:1b:db:54:32:4b:2c:cf:13:0a:5a:54:fa:5b:a4:2b:
46:08:33:1a:f2:93:72:85:08:29:25:ac:aa:4f:c4:d6:ec:a5:
68:68:9f:0c:8a:91:0e:f1:93:f9:cc:b8:5f:82:b0:11:83:79:
70:9c:85:cf:b8:bc:3b:4d:86:6a:13:5f:e2:83:19:2c:ce:24:
a3:fd:c4:81:d8:6e:d7:08:be:99:e5:79:4f:d1:5a:1f:bd:ac:
8d:0f:94:e1:0f:dd:9e:5b:b4:32:14:df:da:ce:b8:d2:0c:0c:
d9:8c:18:3b:87:87:03:c0:94:b9:64:bd:26:6e:0a:93:bc:5a:
70:6e:fc:43:79:b7:19:38:80:d2:e5:ef:c2:a1:63:09:d5:63:
fb:3f:22:f9:af:be:5f:f9:24:de:09:e6:c5:2d:6c:fd:1e:61:
67:83:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:16 2026 by rpki-client