Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: 5LhLFUINvVcBwJM/JXHqe0M5mD1553PcsnXt4Apo8m8=
Subject key identifier: 56:B6:47:72:4E:21:ED:6B:2B:B3:4F:9F:30:7E:C4:31:EF:DF:C4:3F
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019F916CDC316F4E76F1FAFF1F3D33DE8983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0D15
Signing time: Fri 24 Jul 2026 00:00:58 +0000
Manifest this update: Fri 24 Jul 2026 00:00:58 +0000
Manifest next update: Sat 25 Jul 2026 00:00:58 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: aA8fjG6zbJP9nI6KN7PlQQoVsBvp13M8IHZKO+0xGAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:dc:31:6f:4e:76:f1:fa:ff:1f:3d:33:de:89:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Jul 24 00:00:58 2026 GMT
Not After : Jul 25 00:00:58 2026 GMT
Subject: CN=56b647724e21ed6b2bb34f9f307ec431efdfc43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:ab:f1:7e:7d:7d:ce:e6:dc:9b:8a:fa:ff:
a0:f8:7d:05:c6:c8:02:6c:69:af:5c:c9:83:8f:6d:
0d:50:55:9b:f4:0d:65:7b:d1:43:0b:10:e4:cf:aa:
c1:8d:73:7e:1b:c6:ab:61:8d:38:7d:51:33:04:33:
3f:11:9c:1a:d0:80:2c:b4:fb:76:fa:90:ca:14:6d:
a8:6d:1e:5d:22:aa:ac:67:83:78:64:47:15:92:41:
00:a2:c5:2e:74:e0:ba:d9:ec:52:a2:5f:15:5b:c0:
eb:c8:93:e1:97:73:bd:c5:da:c3:97:51:26:2e:8e:
b5:e4:25:e6:ab:c0:26:38:14:66:2a:10:4d:aa:49:
d2:ea:cd:f6:bf:37:a7:e4:02:98:1a:e2:6c:6b:be:
4b:02:e1:f3:07:9e:a7:42:96:af:a2:28:3a:36:01:
db:e2:ee:83:53:80:e1:e2:c9:09:f5:2a:62:66:3a:
e1:e8:01:a7:85:db:fe:6e:0c:f4:7b:6d:7b:1b:9c:
69:4b:86:72:4d:9a:27:6e:3f:a0:e2:e8:12:34:80:
14:14:c9:cd:af:68:d0:1d:0c:68:0d:64:ed:03:9b:
be:82:0c:5a:a3:54:1f:df:d4:f3:8e:a8:3e:24:91:
86:21:3b:59:ee:d0:bc:12:74:83:bc:d2:89:d4:79:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:47:72:4E:21:ED:6B:2B:B3:4F:9F:30:7E:C4:31:EF:DF:C4:3F
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:0c:09:71:c6:fa:43:13:f2:87:a1:02:ce:ca:04:97:7d:7f:
26:b7:d3:a7:49:de:1e:0d:6d:4d:c2:30:4e:48:23:21:1a:8c:
88:ce:80:e5:d6:a4:d6:6f:d7:69:8c:e4:12:e5:fd:ba:7a:a9:
c6:d5:cd:c3:f4:a9:c6:62:7e:00:63:dc:28:ce:05:6a:50:19:
4f:18:93:22:ee:6d:81:72:91:ae:c9:1c:9b:29:11:b2:1f:c8:
e0:98:d0:2d:c0:86:59:98:bd:13:57:fd:5c:ea:ff:1c:be:fa:
4c:cc:53:4c:51:85:a2:6e:11:cf:89:35:26:a0:c7:ac:b1:fb:
99:7e:ab:df:6b:02:6c:70:45:11:bd:94:95:f1:7b:4e:f1:24:
88:0d:6e:24:89:1c:3b:da:60:46:69:4e:78:d6:af:29:25:71:
60:03:39:3b:63:6f:3b:ce:b0:97:6d:36:d5:f1:da:ae:6d:b2:
67:ca:f8:76:86:ba:a6:dd:b4:a5:d7:64:05:13:80:d1:8c:ae:
79:8a:65:cb:b7:31:a1:b2:40:7d:f8:b9:bf:6c:09:49:e4:6c:
b0:50:1c:d4:67:ce:01:de:61:bd:28:fe:f5:e8:d6:38:f0:7a:
ff:a4:b2:69:8a:b2:5d:7f:27:f0:52:fc:00:47:9c:6e:08:66:
a8:6c:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:09 2026 by rpki-client