Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: fnKrOl+4gclg/UFBPPsl7AjyKfwdh9W9Y2easIGY7yE=
Subject key identifier: 4F:2E:B0:A1:F6:CC:C9:FD:68:A1:CE:60:0C:FE:0A:98:03:D3:53:6C
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 019D27725684AAA707CC2957DB70681AECBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 14B5
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: dzZpm9V86uHU+nVaZG96XvyP9fuUp3ITwUDfFPBL7tk=)
3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:56:84:aa:a7:07:cc:29:57:db:70:68:1a:ec:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=4f2eb0a1f6ccc9fd68a1ce600cfe0a9803d3536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:5c:6a:1d:2a:3a:e5:aa:d2:a0:db:b2:1e:
b2:c4:2c:c4:67:70:00:e3:81:91:6e:2b:66:e5:8a:
bd:14:66:5c:3f:fb:85:07:68:68:b3:19:16:d9:50:
ca:34:09:e1:0a:62:e7:1a:3c:f3:da:a1:83:c8:19:
48:97:ea:30:d2:c6:98:5d:1a:5f:e6:26:07:07:93:
dc:36:20:9b:fb:54:3e:f3:f8:ae:50:17:04:2d:45:
f9:90:4c:f4:5e:55:73:d6:02:12:11:8f:0a:a3:e3:
c2:7b:21:74:f2:b9:38:29:f3:b9:e1:3b:80:16:d7:
90:2d:ac:51:e5:13:56:72:40:9b:f2:65:2b:16:91:
07:83:dc:cd:7a:8a:6b:80:1e:e1:88:b4:4a:32:f0:
8b:d9:88:0d:ed:2a:a3:55:84:29:c5:5a:1b:96:93:
48:8c:93:51:58:fe:49:b4:ca:e0:f4:65:64:7d:eb:
5c:14:96:c4:47:ce:a4:33:f4:4a:25:01:01:8f:b6:
b9:d7:2a:a9:d3:a0:6c:45:ea:82:d6:23:77:10:68:
d2:af:9c:77:60:2e:5a:a2:a5:39:d3:0a:4f:57:75:
eb:ef:31:48:22:23:fe:0b:01:df:9e:56:12:ad:2f:
94:64:d2:63:db:ee:c6:5d:6b:54:a8:2f:d8:d2:59:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:B0:A1:F6:CC:C9:FD:68:A1:CE:60:0C:FE:0A:98:03:D3:53:6C
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:04:d9:fb:e5:18:6d:93:56:e4:1d:81:5b:03:12:f9:d9:
ac:5d:87:4c:9c:5c:82:f7:da:85:66:8f:6d:f4:82:ae:6a:f9:
0c:b4:19:8d:ef:36:d7:87:ae:bf:46:2d:06:a4:55:ef:90:70:
64:0f:27:9d:54:14:e3:35:07:15:5f:cb:5f:51:ae:c9:13:13:
12:b4:79:d1:9f:f5:3c:21:38:aa:2f:89:0b:23:9d:8d:09:80:
f4:6b:9e:76:f6:d0:07:c0:c6:cd:ac:99:71:24:7e:a0:37:c1:
e5:2a:53:60:33:43:41:77:3d:81:74:70:6f:6a:a2:3a:5e:2f:
1e:a0:0f:55:79:18:2c:b7:87:44:dc:99:4d:84:d1:00:28:be:
6d:d5:d3:b4:21:00:41:11:c0:ad:f7:00:be:19:db:e1:b1:ed:
7f:79:ff:11:7e:2f:bf:c2:ea:e6:d4:54:d4:53:35:cf:4c:a8:
36:58:af:eb:ca:64:95:97:1e:40:82:f4:c5:00:0e:dc:06:78:
b3:e3:5f:13:59:08:fc:72:64:d6:ee:3e:c7:03:23:c2:5a:05:
36:89:72:15:87:63:ab:6d:a5:eb:4c:40:1d:4a:0b:f1:0b:b4:
e8:f8:75:b2:55:f7:9a:6d:13:e7:ca:e5:3a:23:b7:65:4e:46:
fc:66:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:47 2026 by rpki-client