Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File: VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier: DQIdWkttUQIFvXrMuKisbzpu984waVSqW2+2IiwyqK4=
Subject key identifier: 92:CB:B0:97:12:8B:6D:44:55:D0:52:C5:42:D2:F7:95:88:89:3D:87
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer: /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial: 019DDDD614884A2870EA4C1FE9CA8F7BC03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number: 011D
Signing time: Thu 30 Apr 2026 10:01:27 +0000
Manifest this update: Thu 30 Apr 2026 10:01:27 +0000
Manifest next update: Fri 01 May 2026 10:01:27 +0000
Files and hashes: 1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: XJ78h+vSl22fVJlqUEYDGIW9ObUfn1/KFRh9TvESRM0=)
2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:14:88:4a:28:70:ea:4c:1f:e9:ca:8f:7b:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
Validity
Not Before: Apr 30 10:01:27 2026 GMT
Not After : May 1 10:01:27 2026 GMT
Subject: CN=92cbb097128b6d4455d052c542d2f79588893d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:b5:78:7b:48:8e:fc:b2:de:10:04:2a:68:
a6:2a:2d:f6:d1:ed:16:a5:63:20:69:57:fd:fb:8a:
a6:0f:a4:66:b8:be:22:78:f2:8a:f9:9e:a3:b2:8a:
40:b6:6a:0c:3e:ad:c1:cb:38:ec:b4:1b:d8:e3:1d:
7f:67:27:2c:86:38:03:88:42:5f:55:eb:63:de:be:
b4:76:88:40:e3:76:10:cb:6b:b8:cb:bb:76:6d:2a:
6a:d7:28:81:4e:e6:39:ed:a8:30:45:51:5a:f1:9d:
39:8a:12:83:0e:d6:75:87:4b:a4:85:13:a0:17:97:
4f:42:7a:b3:d9:b4:01:5c:46:89:7c:14:1a:a2:8c:
10:15:cf:9f:85:ea:c1:df:d0:6a:06:cf:3d:60:f1:
e3:3a:56:fa:e7:42:a5:a1:ae:04:e2:e9:a1:90:a5:
fe:8e:a8:ad:98:89:ac:58:b3:46:dc:09:39:00:b4:
ef:25:09:9b:cf:0f:d7:7b:47:16:d0:d5:49:27:de:
17:fa:11:be:2f:79:d4:7e:ae:38:62:25:c9:9e:b0:
85:2a:52:dc:f2:49:42:5c:44:ae:28:f4:f2:9f:28:
31:c6:4c:a2:20:7d:8f:f5:cb:76:e6:02:43:bc:58:
fb:d9:fe:df:9f:17:7b:4d:18:fc:ae:78:b1:90:e4:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:B0:97:12:8B:6D:44:55:D0:52:C5:42:D2:F7:95:88:89:3D:87
X509v3 Authority Key Identifier:
keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:dc:58:c0:0d:12:61:cc:7f:fc:59:89:eb:58:0f:fd:6b:
52:96:c3:d5:a1:8d:58:cc:ed:21:7d:aa:09:d7:d2:da:a9:8a:
17:7f:26:02:10:86:2d:bc:ee:3a:48:34:ba:44:1a:5e:2a:eb:
83:e2:94:ac:d8:f0:5f:af:9d:f7:27:5a:42:ef:98:d1:eb:45:
1a:9f:17:5c:11:dc:67:b8:7a:eb:bb:d3:13:f3:71:f7:e9:50:
2a:98:47:a2:9f:c9:50:f3:01:c7:7a:37:1b:eb:cd:0c:b8:bb:
1c:6a:af:b3:6c:61:94:37:e1:ee:03:57:ba:a9:08:0e:61:d8:
e9:62:30:f4:08:e4:ae:3c:9d:1c:9a:3f:b8:51:97:de:11:f6:
32:91:5f:e2:d7:ce:99:34:07:35:2c:cd:13:54:cb:9c:7f:3a:
8f:f1:03:b1:42:b9:15:1e:b5:8e:e2:6b:1a:88:ac:a3:d9:89:
c2:b5:3a:b5:55:ed:6f:ca:80:7d:da:1c:52:1e:57:2f:76:1c:
f7:85:7f:de:80:8b:e4:a1:c2:a6:3e:b9:e2:d3:8d:91:7a:be:
f8:17:50:75:51:df:ca:66:28:91:29:d9:c2:85:d1:2b:a0:81:
30:01:61:2f:db:36:01:8c:d5:2a:87:19:a8:86:67:56:90:b2:
7f:d5:d3:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3d1hSISihw6kwf6cqPe8A9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDJhMGMzOTgzOTE3NjhjNjE4MWE3M2YxYjQyNmM3NTRl
MTc0Y2EwHhcNMjYwNDMwMTAwMTI3WhcNMjYwNTAxMTAwMTI3WjAzMTEwLwYDVQQD
Eyg5MmNiYjA5NzEyOGI2ZDQ0NTVkMDUyYzU0MmQyZjc5NTg4ODkzZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4K1eHtIjvyy3hAEKmimKi320e0W
pWMgaVf9+4qmD6RmuL4iePKK+Z6jsopAtmoMPq3ByzjstBvY4x1/ZycshjgDiEJf
Vetj3r60dohA43YQy2u4y7t2bSpq1yiBTuY57agwRVFa8Z05ihKDDtZ1h0ukhROg
F5dPQnqz2bQBXEaJfBQaoowQFc+fherB39BqBs89YPHjOlb650Kloa4E4umhkKX+
jqitmImsWLNG3Ak5ALTvJQmbzw/Xe0cW0NVJJ94X+hG+L3nUfq44YiXJnrCFKlLc
8klCXESuKPTynygxxkyiIH2P9ct25gJDvFj72f7fnxd7TRj8rnixkOR/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLLsJcSi21EVdBSxULS95WIiT2HMB8GA1UdIwQY
MBaAFFTSoMOYORdoxhgac/G0JsdU4XTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgt
NGMyMzhjNmYwM2M5LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgtNGMyMzhjNmYwM2M5
LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi//cWMAN
EmHMf/xZietYD/1rUpbD1aGNWMztIX2qCdfS2qmKF38mAhCGLbzuOkg0ukQaXirr
g+KUrNjwX6+d9ydaQu+Y0etFGp8XXBHcZ7h667vTE/Nx9+lQKphHop/JUPMBx3o3
G+vNDLi7HGqvs2xhlDfh7gNXuqkIDmHY6WIw9AjkrjydHJo/uFGX3hH2MpFf4tfO
mTQHNSzNE1TLnH86j/EDsUK5FR61juJrGoiso9mJwrU6tVXtb8qAfdocUh5XL3Yc
94V/3oCL5KHCpj654tONkXq++BdQdVHfymYokSnZwoXRK6CBMAFhL9s2AYzVKocZ
qIZnVpCyf9XTPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:56:47 2026 by rpki-client