Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: vqV2p4GGp9rtks040qDtR3/HumowJoBUapnhevH5G/E=
Subject key identifier: 67:70:C2:BD:60:9D:F4:E7:1C:D2:61:AA:B0:EE:08:DE:99:16:09:CF
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019E1F7EF7484CE3C81BC4DD0796093FD512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:01:14 +0000
Manifest this update: Wed 13 May 2026 04:01:14 +0000
Manifest next update: Thu 14 May 2026 04:01:14 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: hrXgWs8wD+YZgYn8E1SyfxKDsn2R+jNEubCoNMvVSzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:f7:48:4c:e3:c8:1b:c4:dd:07:96:09:3f:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: May 13 04:01:14 2026 GMT
Not After : May 14 04:01:14 2026 GMT
Subject: CN=6770c2bd609df4e71cd261aab0ee08de991609cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:5d:8d:64:85:15:fe:d3:c5:08:f8:53:4c:
45:4c:70:26:06:c7:af:49:a6:c5:84:a4:c0:a3:61:
e7:c2:9a:a3:79:c4:9d:37:3a:be:62:df:49:97:fb:
3e:d3:7e:a5:ee:83:6c:c3:64:08:d7:00:36:7f:34:
15:ab:61:7b:be:ae:a5:c3:0f:d3:a5:92:93:a1:79:
3f:86:5a:81:19:e8:67:e6:98:2c:80:fa:b7:25:99:
8f:9b:b2:71:df:48:6e:0d:0b:45:70:39:f5:1b:9d:
35:32:84:f6:44:1b:b7:a3:66:11:ba:16:ac:9d:03:
e5:0e:5c:c7:4c:1a:36:6c:90:d7:40:97:15:7c:b8:
d0:12:bc:f9:36:a7:a9:df:2e:ea:30:c2:37:10:d5:
8b:2d:b4:20:db:af:c7:2c:3d:df:a7:9b:4c:b2:75:
fa:bc:8d:74:27:15:d9:29:2c:e0:f7:a2:3c:f0:9d:
f6:e7:25:18:c6:04:70:d5:2b:3c:0b:73:cd:0e:4f:
26:08:e5:31:79:9b:97:df:97:dc:a4:ea:1e:f8:d6:
72:6e:01:24:b1:19:e0:1b:a9:af:df:d7:48:f6:5d:
09:e6:96:fb:6b:08:89:a9:12:c6:76:70:3b:a9:b9:
e7:82:c5:38:6c:14:56:b9:84:a2:eb:32:3b:58:69:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:C2:BD:60:9D:F4:E7:1C:D2:61:AA:B0:EE:08:DE:99:16:09:CF
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:6e:4f:93:b9:31:e8:37:c6:5c:99:af:ef:b2:fa:4a:78:
32:9d:ad:99:0a:95:59:bf:69:f5:02:f6:0c:de:13:02:d1:52:
d5:75:f5:01:3c:e3:57:c6:8d:53:28:92:78:bb:33:bc:2a:f6:
3f:12:1c:09:4a:84:c0:80:78:91:76:f6:6c:80:40:8c:9f:b5:
8d:0a:ef:5f:d7:81:d2:3a:03:69:a9:e9:44:60:19:d2:43:65:
22:70:f0:46:b3:a7:05:98:23:6f:19:53:e4:c3:8f:04:6c:3e:
f0:5f:f3:68:df:b5:b2:58:5a:5d:4f:ff:53:fc:a2:7b:db:3a:
68:95:ae:83:a0:38:28:74:12:f7:2d:99:a9:4f:d2:3d:75:1c:
0c:de:69:e1:1f:a5:bf:f9:a0:08:ba:a3:38:0b:82:c6:7a:65:
fc:34:d7:87:a9:57:4c:d4:e2:8f:21:57:96:70:0a:75:55:34:
ea:28:da:fb:3f:31:34:c3:fc:73:23:57:59:d6:50:df:c9:e7:
66:b7:aa:5e:18:12:72:4c:37:e5:1b:f4:65:00:78:a3:3c:5b:
3d:38:ba:58:33:40:dd:62:51:ce:e0:54:f5:3f:e0:ac:59:82:
5a:27:9d:74:6e:61:85:72:1f:a1:b8:de:2b:d0:c7:c4:da:0b:
93:e3:ef:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:52 2026 by rpki-client