Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json)
Hash identifier: 9g2Q33swvUWjg09IlyuITJhOc+1f2xuxVx4v59QC0P8=
Subject key identifier: F0:38:38:FE:50:9B:34:97:86:1F:13:FB:63:60:A9:CA:E5:08:FA:5C
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial: 019D288491749A7623B8A2365AC84292719A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
Manifest number: 012A
Signing time: Thu 26 Mar 2026 05:01:09 +0000
Manifest this update: Thu 26 Mar 2026 05:01:09 +0000
Manifest next update: Fri 27 Mar 2026 05:01:09 +0000
Files and hashes: 1: O6tTo-EzouZEbfBpVRGby5BcpW8.roa (hash: e+5cW5Q75TnsiB3DdCMBwxBeOV1HRtuc8+8HpOCCAs0=)
2: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: +DojSXLITiL4UEcMFyylkXi/JQMI0Y0dZPuYe9aQlm8=)
3: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:91:74:9a:76:23:b8:a2:36:5a:c8:42:92:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Validity
Not Before: Mar 26 05:01:09 2026 GMT
Not After : Mar 27 05:01:09 2026 GMT
Subject: CN=f03838fe509b3497861f13fb6360a9cae508fa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:f7:2f:75:5a:db:0d:af:2d:20:c4:78:f1:
bb:26:0c:f9:f0:3f:d3:5d:7b:c5:d9:17:cc:7f:7b:
2c:48:a5:36:c6:2f:13:57:ff:97:0c:43:61:92:59:
97:07:4b:1f:80:89:7b:26:81:7c:e7:72:1b:45:79:
4b:eb:ac:05:a6:1a:d6:ce:4c:95:7d:6f:df:ac:8a:
44:ac:6f:00:37:f9:2b:3e:c7:f3:7f:c6:52:38:e3:
91:ae:b1:66:3d:c5:d4:53:a9:a5:0b:21:9c:ba:fa:
47:88:21:da:ba:7a:d9:44:f2:03:57:7a:90:ff:75:
c2:4b:69:9e:13:de:44:ed:f8:fe:6f:6b:0b:c0:56:
f7:3a:7d:89:ae:23:3a:fe:e6:d5:30:54:df:9d:e0:
04:d5:cd:f6:7a:80:da:01:65:12:b4:08:37:6a:2b:
58:94:ea:07:f5:13:ba:99:e9:ce:87:44:ec:f3:ed:
55:4e:ba:db:a7:36:ff:a6:e0:cd:a6:55:03:95:b1:
46:3c:76:df:80:1a:a2:f3:b4:73:0f:b8:c3:d1:2b:
de:73:2d:b2:e6:81:ba:9e:f8:11:55:6e:04:53:1b:
e1:a4:74:47:04:8f:fd:26:57:26:6c:c8:99:84:f5:
a4:ae:7e:1d:ee:76:40:29:e2:52:97:89:0c:e2:d6:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:38:FE:50:9B:34:97:86:1F:13:FB:63:60:A9:CA:E5:08:FA:5C
X509v3 Authority Key Identifier:
keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:04:74:a7:ec:00:21:bd:60:d9:96:ba:32:c3:11:eb:d2:bb:
66:8a:df:f6:37:2e:6a:39:c6:57:f9:19:a4:c5:96:6a:8c:1c:
08:7f:88:fd:2e:be:ab:7f:ec:af:0d:df:ac:3f:b4:2b:e8:2d:
b7:64:99:63:07:e6:b7:b7:c3:c6:da:ae:fd:95:0d:9f:6e:d5:
a6:51:03:3f:32:61:2f:68:1f:b7:3e:37:ce:9f:7f:f2:0c:6a:
0b:1d:92:25:6c:2b:fc:d3:2a:2a:01:77:67:e0:da:f4:d2:8d:
27:1f:34:05:6e:04:88:e2:84:b1:f9:54:d9:2d:08:40:c6:0a:
a4:94:60:3d:01:fe:55:3a:02:b6:cf:d6:9f:78:95:f8:29:62:
fc:16:02:ce:50:5f:58:db:70:0d:f3:63:bf:12:b5:36:3e:2f:
30:c1:2e:f9:51:d5:43:fa:4d:32:bb:0e:54:17:18:d7:c7:b1:
86:c2:04:ef:31:bf:92:9e:94:9f:9b:08:9e:f0:7a:1b:29:ee:
a8:e0:b0:74:bf:da:99:02:da:12:d4:90:e7:4d:89:f8:b6:31:
c8:0b:3c:0b:5e:70:6a:d5:da:57:ed:23:48:cb:46:c6:b0:7b:
dd:77:b4:5f:31:38:47:e3:61:5d:4b:da:94:df:e5:dc:c6:73:
82:97:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:01 2026 by rpki-client