Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: mdVeVzT+cIbSfO9rkEj9ECFw0ecjaIZYc+IxpefK7BE=
Subject key identifier: ED:01:34:51:FD:2F:46:38:BA:4D:1B:5D:3C:A5:DA:00:97:B6:B4:12
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 019D27E03D5D3856C183F33284947181E323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 06BC
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: UXXtGi4oxNDjahgVbsQFfeZIwU4.roa (hash: jdBHO4Fwd2CUANgRDo6QBZVoktY70KNazlVK3AC+4zE=)
2: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: 6M6jbWSrDQ1iIbvbwLBChr0p3cJu+UIN7fmhdNTbqcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3d:5d:38:56:c1:83:f3:32:84:94:71:81:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=ed013451fd2f4638ba4d1b5d3ca5da0097b6b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:c7:46:30:f6:86:72:58:71:f9:75:40:71:
cb:ce:3f:54:07:35:36:33:ad:5f:f5:2a:bc:14:af:
d1:97:93:03:36:cc:28:13:81:08:01:3d:59:11:14:
e4:22:b1:3a:a7:b1:14:ed:29:50:48:42:07:2d:0c:
97:20:50:eb:66:43:e8:66:e5:7c:50:1b:98:12:c2:
2a:35:c7:08:a4:f3:d2:b7:9d:67:d0:47:b3:c7:bc:
8c:70:8f:8b:bb:0c:ff:33:36:74:2b:ac:02:df:f9:
13:db:1c:35:f1:65:6b:08:e1:97:ed:9b:e6:ea:4a:
28:76:6b:30:26:27:8a:95:91:ce:b8:54:34:f9:f9:
84:78:0c:f4:5d:de:32:1c:e2:48:c9:fd:e5:00:db:
0f:c7:86:49:3d:33:0c:78:13:c1:4d:d2:f6:c2:cc:
02:75:6b:9e:c8:ea:d1:97:f1:77:a6:35:f8:e9:2e:
9b:7f:66:16:f5:7e:02:da:03:4b:8e:0f:45:4f:47:
b6:be:07:7e:7c:61:9b:10:19:4d:d3:a8:8f:ba:9d:
3f:0f:69:c9:ad:f9:8c:09:65:3b:e3:8c:64:af:89:
37:06:e7:2d:fa:c4:16:20:bb:ca:c3:88:f7:0e:30:
6b:cc:05:5d:17:44:03:32:3d:3f:15:54:e7:f6:c0:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:01:34:51:FD:2F:46:38:BA:4D:1B:5D:3C:A5:DA:00:97:B6:B4:12
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:68:69:f0:84:42:68:fe:5e:d2:81:54:da:9d:28:ee:d8:f2:
21:c1:03:db:05:3e:9c:11:87:d3:d9:7b:a8:82:9d:64:7e:fe:
29:e2:46:25:9f:71:5d:e8:44:aa:5f:f5:ef:e2:8b:b2:44:8f:
fa:cf:34:21:f5:85:35:47:d5:3f:fb:e5:76:ae:25:5d:82:84:
18:e0:32:60:ad:dc:a9:66:dd:1e:28:72:2d:aa:42:8d:69:71:
2f:d2:ad:7a:4a:91:98:fd:e2:75:c9:99:d5:fb:20:34:d3:2c:
cc:7f:43:b8:a1:5b:8d:5a:42:67:5e:b8:b1:23:82:81:e7:40:
28:78:ab:ee:10:19:b1:e6:e6:60:59:73:6e:2e:19:dd:e7:61:
7b:f1:49:21:8b:df:ec:a6:0a:24:eb:fc:b2:64:46:6d:eb:74:
75:1a:c6:31:f2:25:17:46:4e:b3:7b:ce:30:bb:7e:da:2a:a7:
27:44:fa:67:a4:37:82:28:54:a6:2c:15:d3:f7:16:7e:53:4b:
6a:a5:f7:70:03:d1:3c:7c:d1:e3:87:c5:c3:8d:6e:a2:2f:d5:
e4:54:c3:0e:18:92:bd:51:b1:98:ee:50:73:26:25:6f:f0:35:
7b:1e:58:e9:cc:d5:f2:21:29:e3:08:ca:f5:6e:1f:3a:5b:a0:
63:e2:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:26 2026 by rpki-client