Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: 0CJX2yocPzRJZQNbjfOu23/cKQk8uvkdqk0e6dcukZk=
Subject key identifier: D8:C9:6A:03:F8:00:96:1B:4D:E8:68:ED:5F:82:1F:64:5C:E6:D3:F8
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 019D29609F0F4B7F46CB3147F9A759B42403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 09:01:31 +0000
Manifest this update: Thu 26 Mar 2026 09:01:31 +0000
Manifest next update: Fri 27 Mar 2026 09:01:31 +0000
Files and hashes: 1: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: OKYvZZ1dV+5nmCy2Rt/icf228GEj8mjjqDyOnBavYxk=)
2: Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa (hash: nLLJAITVfYEFMYRyN3x5RMOELDek19fGEta6GIsZ1vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:9f:0f:4b:7f:46:cb:31:47:f9:a7:59:b4:24:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Mar 26 09:01:31 2026 GMT
Not After : Mar 27 09:01:31 2026 GMT
Subject: CN=d8c96a03f800961b4de868ed5f821f645ce6d3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:bb:e3:22:7a:20:6a:dd:10:f3:8f:82:44:
4b:e7:28:3f:25:43:3b:48:b1:85:87:d3:66:73:99:
00:ac:f4:ea:74:f7:2c:35:a1:81:da:55:e5:e4:47:
c1:77:29:f2:38:4b:d5:b2:9e:5e:52:9e:09:19:0d:
14:f1:17:c0:60:be:52:6e:42:72:86:da:2e:a8:d4:
56:ad:15:7b:d7:d3:e8:40:09:53:5d:b5:62:6c:60:
1c:38:4c:28:05:a9:72:ca:73:e9:ec:d6:0f:95:3b:
2f:95:65:18:03:b5:86:1e:6b:4c:76:30:d6:73:3d:
7e:ba:16:c2:b1:54:6d:af:47:1a:02:db:40:65:fa:
8a:ab:d6:1d:83:69:6a:3b:7b:da:f0:eb:5c:77:5b:
d9:ac:21:24:c9:83:82:c5:a1:d5:80:a7:b0:6c:b0:
f2:d5:34:2a:ee:4d:f4:7c:94:68:7b:f3:b0:24:b3:
da:05:2f:e2:00:2c:d5:7d:37:c0:0c:bb:12:54:ba:
53:fb:ae:05:b1:00:3b:30:e3:1e:32:57:8c:f2:49:
24:85:7c:c8:3a:79:6a:f4:c6:01:4b:9b:b9:c3:5c:
25:a4:c9:dd:51:84:2f:6e:44:f0:79:ce:26:6a:bc:
b2:8f:4d:da:7c:4b:cc:40:a0:2f:c8:85:f4:44:0a:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:6A:03:F8:00:96:1B:4D:E8:68:ED:5F:82:1F:64:5C:E6:D3:F8
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:62:8d:36:63:6a:a0:8d:5b:06:9e:79:2d:e3:b5:e1:7b:
62:73:04:58:f5:63:67:b9:91:77:1c:e9:11:a8:27:56:34:85:
0e:00:7b:01:5b:5e:99:45:95:33:0e:aa:d2:33:64:31:6f:6d:
b7:14:8d:3f:3e:49:64:5c:ed:7c:8e:ad:21:02:54:69:05:48:
b4:2f:ea:e8:4e:6a:0b:bd:40:f1:6b:eb:95:97:a2:56:1c:9c:
3d:19:3f:76:59:0f:11:30:2e:cd:15:4b:9f:87:fb:75:02:60:
8d:a8:e9:5d:48:d1:e6:7c:83:c1:89:96:2b:31:09:b2:f6:a6:
c6:fd:9f:48:3a:fa:fc:9f:97:55:14:fd:42:7b:f2:36:0d:38:
aa:2d:27:65:15:dd:4c:a9:f5:e9:65:42:11:ac:89:1a:be:ff:
4c:72:9d:8e:4a:63:d7:09:f9:78:38:99:ef:ed:7d:46:21:ce:
ed:b2:b6:e4:58:3b:c1:00:47:55:de:bb:7d:0b:29:5f:0d:c5:
50:e1:49:5b:07:be:f1:21:c9:df:23:39:df:eb:eb:1f:d7:b0:
ed:89:0f:f7:0a:d9:8b:98:f6:ac:f1:74:5c:dc:49:a1:45:57:
b5:29:d6:1d:93:7f:de:83:28:58:04:3e:a3:0a:c6:46:ac:35:
4f:83:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:43 2026 by rpki-client