Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File: VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier: AN00sAYLzEer29RIl6g1ZStvll636CZnbL2FU+5QTKc=
Subject key identifier: D5:55:AE:BC:89:6E:85:95:46:30:95:FE:C3:CB:F1:F1:2F:C0:2F:16
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer: /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial: 01A0F59FC07FEC3011721FF76E733AE8BDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number: 02B7
Signing time: Thu 01 Oct 2026 04:01:22 +0000
Manifest this update: Thu 01 Oct 2026 04:01:22 +0000
Manifest next update: Fri 02 Oct 2026 04:01:22 +0000
Files and hashes: 1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: sqM2NSUe29KCxVSFgsrOO/3CQbAScpynAm+J34NUfMg=)
2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:9f:c0:7f:ec:30:11:72:1f:f7:6e:73:3a:e8:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
Validity
Not Before: Oct 1 04:01:22 2026 GMT
Not After : Oct 2 04:01:22 2026 GMT
Subject: CN=d555aebc896e8595463095fec3cbf1f12fc02f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:12:32:e2:fd:86:28:f1:96:ac:33:bf:0e:
f8:7f:9b:ef:ec:5e:31:20:d4:f0:58:49:2b:19:ec:
3e:74:be:d0:4f:6a:df:9d:b2:10:33:ad:35:10:0a:
b7:d3:d0:29:24:ce:a4:e0:fa:c0:f2:32:ee:f4:e9:
3b:4c:4b:11:c8:fc:46:6b:9a:e1:98:a8:e2:d6:02:
58:76:fb:1e:b4:f0:04:69:10:2f:24:a0:40:17:af:
27:3b:0c:ca:63:54:b9:94:c7:fc:93:67:cb:c2:ef:
f0:d9:b9:0f:90:70:cd:90:eb:34:51:08:bb:f4:e8:
a1:ba:ab:75:8d:b7:52:74:bb:29:44:bb:04:f6:e6:
52:f1:21:01:d0:80:4a:46:4d:3e:a7:c8:31:cc:7b:
50:0b:a6:a3:26:7a:0c:af:0f:00:bb:68:7a:a6:6c:
2b:bb:25:3f:9b:ce:0f:f6:59:84:8a:7d:ca:65:aa:
60:fc:8d:72:d7:5d:98:91:fc:66:27:1b:a5:77:91:
de:4b:ae:c5:3a:42:48:08:37:19:7e:ec:eb:79:17:
ef:11:c7:c1:44:de:9b:68:69:4d:ab:f6:b3:5a:5a:
2c:9f:6b:23:d5:1f:84:6c:23:a7:71:1a:a5:4d:19:
3c:7b:e3:b6:9e:b0:1c:35:1c:cc:77:08:53:88:99:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:AE:BC:89:6E:85:95:46:30:95:FE:C3:CB:F1:F1:2F:C0:2F:16
X509v3 Authority Key Identifier:
keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:04:1b:48:58:f3:c3:64:4c:99:7c:55:12:42:22:72:b6:bf:
23:5a:72:7d:84:50:16:8f:c5:ef:c4:39:f6:fd:81:e3:a4:a2:
1c:94:c5:3a:19:af:2e:c8:9c:9d:51:46:35:4b:2b:ac:66:9c:
da:7a:8d:3f:df:d4:6d:57:9a:48:e5:4c:44:47:79:d2:aa:64:
e5:e4:d1:e0:9d:d8:06:26:2b:12:01:41:84:ca:cd:60:f8:59:
86:0a:09:56:c0:a0:56:df:2b:3f:23:de:d8:96:35:4d:94:22:
85:0d:da:d8:b0:bc:fa:b7:d0:7e:6c:fc:aa:35:77:5c:ed:61:
0a:ad:b1:51:76:02:74:af:16:01:8c:01:d6:1a:7d:15:49:7b:
c6:60:ba:21:2a:aa:ae:ea:ba:b0:0f:7c:98:24:3e:a5:e6:6f:
15:bf:67:2d:4a:5d:f7:32:14:84:e9:44:ff:b7:e5:5c:9a:37:
54:57:f1:48:e3:19:0c:df:6d:11:44:90:af:d7:ee:50:31:b1:
44:d4:c3:5f:de:38:1a:38:13:3c:ce:39:31:fa:e6:2f:b5:6e:
59:63:0f:8e:e8:d7:1a:89:50:b8:1f:b9:80:5a:9f:c4:3c:10:
ee:8d:98:72:29:42:fd:a4:55:42:73:2c:ef:33:59:4f:ac:f9:
b6:f5:17:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1n8B/7DARch/3bnM66L3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDJhMGMzOTgzOTE3NjhjNjE4MWE3M2YxYjQyNmM3NTRl
MTc0Y2EwHhcNMjYxMDAxMDQwMTIyWhcNMjYxMDAyMDQwMTIyWjAzMTEwLwYDVQQD
EyhkNTU1YWViYzg5NmU4NTk1NDYzMDk1ZmVjM2NiZjFmMTJmYzAyZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0MSMuL9hijxlqwzvw74f5vv7F4x
INTwWEkrGew+dL7QT2rfnbIQM601EAq309ApJM6k4PrA8jLu9Ok7TEsRyPxGa5rh
mKji1gJYdvsetPAEaRAvJKBAF68nOwzKY1S5lMf8k2fLwu/w2bkPkHDNkOs0UQi7
9Oihuqt1jbdSdLspRLsE9uZS8SEB0IBKRk0+p8gxzHtQC6ajJnoMrw8Au2h6pmwr
uyU/m84P9lmEin3KZapg/I1y112YkfxmJxuld5HeS67FOkJICDcZfuzreRfvEcfB
RN6baGlNq/azWlosn2sj1R+EbCOncRqlTRk8e+O2nrAcNRzMdwhTiJleJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVVrryJboWVRjCV/sPL8fEvwC8WMB8GA1UdIwQY
MBaAFFTSoMOYORdoxhgac/G0JsdU4XTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgt
NGMyMzhjNmYwM2M5LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgtNGMyMzhjNmYwM2M5
LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAQbSFjz
w2RMmXxVEkIicra/I1pyfYRQFo/F78Q59v2B46SiHJTFOhmvLsicnVFGNUsrrGac
2nqNP9/UbVeaSOVMREd50qpk5eTR4J3YBiYrEgFBhMrNYPhZhgoJVsCgVt8rPyPe
2JY1TZQihQ3a2LC8+rfQfmz8qjV3XO1hCq2xUXYCdK8WAYwB1hp9FUl7xmC6ISqq
ruq6sA98mCQ+peZvFb9nLUpd9zIUhOlE/7flXJo3VFfxSOMZDN9tEUSQr9fuUDGx
RNTDX944GjgTPM45MfrmL7VuWWMPjujXGolQuB+5gFqfxDwQ7o2YcilC/aRVQnMs
7zNZT6z5tvUX9A==
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:30:34 2026 by rpki-client