Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File: VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier: nieqXr14arrtRw0X//10avT/01WBthyLOZ6uiUntdCo=
Subject key identifier: 1D:4E:12:23:E7:55:E0:25:E5:F5:18:49:1C:4B:26:53:27:98:43:02
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer: /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial: 019D29CE63A7EBE61D4350E92F9446BB16CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number: 09CF
Signing time: Thu 26 Mar 2026 11:01:24 +0000
Manifest this update: Thu 26 Mar 2026 11:01:24 +0000
Manifest next update: Fri 27 Mar 2026 11:01:24 +0000
Files and hashes: 1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: 3g+mIwg7qpSF1kiUwdg7x8HEqKaQdBN9oBRS3RcUHaU=)
2: t2Gg0PTvd5lsW3SGsnAPx7-yRi0.roa (hash: Qa5YolQYkhRDzAfNGYYljMdC9amMCOp6hX293alM/xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:63:a7:eb:e6:1d:43:50:e9:2f:94:46:bb:16:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Validity
Not Before: Mar 26 11:01:24 2026 GMT
Not After : Mar 27 11:01:24 2026 GMT
Subject: CN=1d4e1223e755e025e5f518491c4b265327984302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:a2:c5:4a:af:28:31:71:d1:7d:70:57:1e:
3c:45:06:47:e2:a9:95:0b:24:6a:dc:19:ab:33:14:
98:35:88:1a:45:21:76:0d:b9:89:a3:0d:d7:86:a4:
b4:c6:db:fa:f0:e0:6d:b6:c4:67:01:ef:fb:64:43:
f9:08:cf:7e:20:41:7b:0b:21:d4:07:88:cb:10:c4:
41:70:52:e9:c9:46:44:38:f9:6e:b0:2f:30:ff:f4:
21:7d:f7:ec:2d:7f:d3:8d:68:70:3e:87:af:9c:9c:
fc:72:78:09:19:12:c7:e9:9b:3c:58:04:47:ee:48:
da:93:6d:63:64:75:1a:f3:76:b4:47:0a:38:6f:77:
86:29:5e:80:00:73:e6:30:d8:e5:cd:11:b7:43:b9:
d1:d2:94:01:f1:59:7b:08:ff:0c:81:eb:0e:e8:aa:
91:c3:fa:85:f3:36:18:83:e7:17:98:ce:1c:c4:88:
e6:d4:63:63:4e:33:ed:5f:0d:52:cc:c3:21:58:31:
97:5c:07:85:e6:57:b0:16:d7:94:be:d2:c5:10:ee:
bc:30:83:71:50:58:d6:52:7b:6a:34:b9:fd:c2:24:
23:a4:65:53:1e:1b:04:9d:63:af:03:99:33:b9:04:
f3:cf:44:d5:8e:e3:a9:56:6e:e7:69:89:43:c3:06:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:12:23:E7:55:E0:25:E5:F5:18:49:1C:4B:26:53:27:98:43:02
X509v3 Authority Key Identifier:
keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:24:44:f5:5e:58:dc:2b:39:cf:e4:1a:06:84:35:7b:e4:
d4:b8:8c:9a:a1:6b:bb:c8:63:c2:b9:61:be:c4:72:f7:1f:a2:
5a:79:a6:81:2f:51:69:26:1e:5c:fa:5f:34:cc:5b:dd:b0:56:
a6:81:6d:49:38:41:af:f1:41:e0:02:e5:67:0a:9a:f7:15:f9:
2b:01:a1:c7:72:4e:df:91:3a:32:78:c8:27:56:bc:c2:da:4c:
54:75:57:5d:56:ed:a4:06:8e:a9:2c:05:14:25:c6:db:f9:73:
ea:d3:0a:05:3a:52:9c:a0:b8:1b:35:23:99:ac:22:aa:0c:ad:
30:f2:23:0b:09:67:43:c4:71:84:0a:3a:4b:09:b8:df:47:87:
a1:a2:11:ab:83:02:d8:35:ef:20:82:9d:80:65:89:50:1c:80:
3b:12:3a:6b:07:1d:47:a3:00:7d:b2:e3:c8:b6:e8:88:17:1b:
56:06:25:a3:65:a2:c2:27:62:cc:6a:da:0a:a8:0e:ca:cb:59:
fc:5f:30:4d:51:6c:27:24:09:2b:24:8c:f3:35:91:b4:3b:03:
12:1b:f3:21:d3:d8:d7:6e:a1:35:a2:20:b2:42:0e:6e:b4:10:
8e:20:9b:da:fe:55:c8:5d:e8:e5:06:ed:be:c6:37:f7:f6:6c:
a2:16:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:01:26 2026 by rpki-client