Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: buLA4ggZbKF9KdV6vBmx+SqaL8p6Zs8kO/8IlEz0YuY=
Subject key identifier: 0D:2F:56:56:25:C1:95:DB:0A:5F:41:BC:54:FD:D7:09:D5:2E:73:C4
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 019D2A0490C77FD4711CBED81F045028BC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:35 +0000
Manifest this update: Thu 26 Mar 2026 12:00:35 +0000
Manifest next update: Fri 27 Mar 2026 12:00:35 +0000
Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: k5Xr2N6hNH+b/4InFc8oHxLeJ1902JSG6NvNhv1dfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:90:c7:7f:d4:71:1c:be:d8:1f:04:50:28:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Mar 26 12:00:35 2026 GMT
Not After : Mar 27 12:00:35 2026 GMT
Subject: CN=0d2f565625c195db0a5f41bc54fdd709d52e73c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:56:ca:40:e3:4e:45:27:02:14:d4:23:54:
c7:61:02:ec:d5:81:88:a5:f3:71:5d:bc:03:83:1d:
75:21:b2:d3:0c:96:8e:c4:5b:68:1f:3d:54:c5:cc:
9c:ba:ec:60:6e:76:73:b5:f2:f4:5b:76:32:da:33:
5e:c1:94:b6:06:1c:79:66:8e:2d:ba:ba:8a:55:61:
d1:d2:86:e1:b6:5a:56:ef:33:c9:95:88:c3:e0:69:
42:e2:49:39:48:93:69:ea:da:00:e3:39:49:19:17:
ec:01:b0:b7:1e:01:35:e7:b6:cb:fd:5c:a1:c2:8b:
51:80:f3:b0:df:6f:81:ce:e8:1e:0f:8a:9a:b8:d1:
9d:c0:57:51:9e:a0:19:ca:48:90:33:28:6e:81:62:
74:06:60:5e:94:4f:08:8e:34:5f:24:bf:cd:35:51:
0b:51:43:c6:bb:b3:91:64:03:9c:a5:58:50:fe:a3:
d9:c4:a3:9c:c6:32:b6:f1:fd:a3:1d:09:47:62:ea:
ab:5f:ff:49:1b:03:ca:79:70:a8:34:0d:b1:87:5b:
38:9e:36:44:63:a5:75:f4:2f:59:6b:25:2a:9b:86:
1c:0b:1e:c8:5a:2f:8f:58:25:b6:33:50:36:e0:fa:
10:1b:d3:e0:f0:ca:a9:cb:66:8d:d2:2c:62:b8:dd:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:56:56:25:C1:95:DB:0A:5F:41:BC:54:FD:D7:09:D5:2E:73:C4
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:46:82:ea:eb:25:f6:4a:97:a6:1e:7f:96:5f:f6:96:2a:3f:
91:08:97:b0:1f:25:0c:13:21:cd:52:7a:8d:e6:a6:6a:8f:2c:
36:f3:12:ad:92:55:b0:02:0f:58:fd:fa:f1:e5:a8:66:f6:2c:
77:fa:ce:8d:64:fd:32:d2:10:38:75:55:ef:42:2f:ac:e1:60:
93:52:ae:50:8c:ad:49:2a:2c:98:77:4c:f1:74:04:ea:f1:c6:
a9:d2:80:23:ee:ba:fc:88:b3:67:1f:9a:53:04:7a:d8:df:c2:
37:d6:3f:ac:22:23:bb:4e:33:b3:42:a2:00:ac:f7:d2:d2:83:
5b:88:21:9a:a2:68:80:0f:60:cb:87:d2:fc:b8:f2:c6:31:9a:
7d:f7:8a:75:83:e8:26:db:e6:25:97:4a:d0:bd:b7:86:da:ef:
58:b6:49:b0:60:1e:76:b7:b6:c8:47:b4:00:7d:4b:c3:68:49:
f8:4f:c5:2a:c5:4b:0b:07:a7:6b:2e:1a:72:f6:80:35:88:f8:
37:22:c5:af:27:d0:b6:05:8d:4c:ee:ca:9b:11:4a:2d:50:31:
cd:32:a0:db:82:da:d6:ca:3c:20:7b:79:10:8d:55:ad:f5:90:
0e:10:b8:c4:51:b3:bd:65:29:18:0d:11:ac:96:66:64:d6:ca:
25:8f:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:27 2026 by rpki-client