Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File: VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier: d2bFaqiDUG8tXklL6A6lpFA1YwA6LfImk3EqTMlk6yg=
Subject key identifier: 87:6D:6F:3D:00:78:24:63:00:2A:6F:C9:C6:6A:3C:B3:16:60:36:5A
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer: /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial: 019CC1F33044ECA3D7D55C8703F8B6B79982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number: 8A
Signing time: Fri 06 Mar 2026 07:01:06 +0000
Manifest this update: Fri 06 Mar 2026 07:01:06 +0000
Manifest next update: Sat 07 Mar 2026 07:01:06 +0000
Files and hashes: 1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: 3Qm+y+kg7PCrsUZ86KMNwSxeZ0HXDNlDUmrIjNHVX2M=)
2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:f3:30:44:ec:a3:d7:d5:5c:87:03:f8:b6:b7:99:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
Validity
Not Before: Mar 6 07:01:06 2026 GMT
Not After : Mar 7 07:01:06 2026 GMT
Subject: CN=876d6f3d00782463002a6fc9c66a3cb31660365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:54:8f:64:c1:da:0a:e7:1b:9f:35:fb:b1:
a7:6f:59:2b:13:7a:1e:8c:de:9d:d7:91:22:93:1e:
6e:96:56:d9:8c:28:55:73:3d:99:06:bf:7a:5a:68:
29:2a:67:80:7a:d5:49:d4:6c:02:2b:1f:f1:eb:a3:
11:68:47:2f:2b:71:8b:92:ee:78:e8:c6:8d:ba:51:
04:0b:b4:50:3c:31:e2:23:a8:f5:bb:3f:68:74:95:
8c:23:b4:28:49:e8:8a:a8:e9:1d:d2:2d:03:20:55:
b6:5f:a5:06:70:bd:ef:3b:39:39:a6:1e:57:20:3c:
7b:77:02:41:2a:f2:b0:6c:00:bc:c2:c9:03:0c:fd:
e2:cc:8d:6b:86:6d:7b:bd:25:ce:aa:0a:ee:44:ca:
40:d4:77:88:3d:cc:50:49:4c:46:58:c6:bc:0e:2a:
5e:9b:63:05:95:e0:58:08:20:32:39:54:e4:52:47:
e2:01:85:64:c1:36:61:f3:62:0a:8a:b3:73:2e:de:
37:2d:f9:39:3b:96:eb:76:27:30:7e:e6:ea:9d:4e:
10:d8:24:b5:42:0c:c2:00:c1:fd:26:04:ed:a7:58:
72:3b:21:eb:1e:68:a1:45:c2:c9:23:53:52:ab:4b:
2b:29:5a:be:34:36:02:13:5c:e3:e6:ad:da:61:b2:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6D:6F:3D:00:78:24:63:00:2A:6F:C9:C6:6A:3C:B3:16:60:36:5A
X509v3 Authority Key Identifier:
keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:22:79:21:27:43:c8:f4:e1:74:2b:15:16:80:2b:85:cf:
67:44:29:8b:7d:c1:e0:17:c9:a2:6b:97:33:94:e0:e3:ce:a9:
64:d6:9a:b8:5f:3b:e1:42:e6:38:f5:55:b9:86:39:1a:53:e0:
69:04:10:fa:82:33:7f:51:eb:70:21:b7:3f:db:8d:90:78:df:
f9:ea:29:76:06:e1:26:0a:50:81:63:c9:9e:9a:74:4c:27:5b:
0e:ac:09:27:d3:9e:9f:5e:18:a6:42:77:90:95:5c:7b:23:ef:
af:4d:70:5e:e8:a3:0c:05:d8:1d:56:df:82:b1:0e:ab:24:4a:
3c:57:75:26:c5:f4:d1:55:0e:9a:d9:09:29:53:53:8b:c1:70:
13:3b:31:f6:46:05:64:9f:f1:b8:5e:35:92:9d:e9:0a:2d:c4:
52:31:18:45:5e:11:8e:d7:78:83:d9:d5:38:c3:66:6b:47:20:
f6:9a:e5:9a:a9:64:b1:49:bb:06:20:82:a2:ed:9f:c0:df:69:
45:4f:39:7e:3a:49:06:4a:08:82:9c:6e:98:07:86:ef:24:3c:
df:d9:85:63:da:49:a6:56:66:97:74:4f:3a:fe:68:37:26:9b:
49:95:63:8e:a8:6e:ee:8f:4f:b7:06:ff:90:77:6f:85:c1:c3:
05:39:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:04:33 2026 by rpki-client