Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: zwa3Hu0RSi7pvZBQ9c8DS7gvi7D9r+grAiT7m3z6Kzk=
Subject key identifier: 0E:FD:A8:27:E4:87:52:D1:8A:0D:F5:08:19:B3:E2:96:99:C7:F7:09
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 01A05AB3008B706B523E6D4FBBACEE3A7788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 059A
Signing time: Tue 01 Sep 2026 02:01:15 +0000
Manifest this update: Tue 01 Sep 2026 02:01:15 +0000
Manifest next update: Wed 02 Sep 2026 02:01:15 +0000
Files and hashes: 1: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: CEaYG+n0zgzVK3Ch0oMH9FWlM9q3hXQjxrJE9Tqgqck=)
2: uqb13WcH-sHQrFpv4PbFThoSkmk.roa (hash: z4r6mb25fzWJDdqfWlcYfompTywQy1djheMADUOlVYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:b3:00:8b:70:6b:52:3e:6d:4f:bb:ac:ee:3a:77:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Sep 1 02:01:15 2026 GMT
Not After : Sep 2 02:01:15 2026 GMT
Subject: CN=0efda827e48752d18a0df50819b3e29699c7f709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:d6:8d:fb:94:56:06:5c:2d:08:22:a1:bc:
f6:8c:8c:3a:ea:ba:ca:15:49:e4:0e:f4:b2:e1:de:
74:55:8d:fa:e9:1d:e9:bb:3b:e0:2f:19:8e:06:a9:
c4:d1:61:54:bb:ba:86:4e:52:53:76:1c:33:ec:58:
f6:cb:c7:98:33:5e:ae:84:e4:29:f7:ad:79:7c:81:
5d:ab:94:94:55:0d:1f:00:86:89:02:b3:59:75:86:
24:34:62:ff:44:b6:9c:4a:38:19:fa:a7:88:e4:53:
68:a5:f2:48:ec:c4:96:a3:1f:8e:26:f0:6a:e2:39:
ce:a6:2c:60:6f:b8:08:84:a1:49:1a:ea:cf:df:2d:
cb:1b:51:46:d5:15:0e:e1:09:ea:61:01:16:93:87:
44:b9:00:fd:bc:79:f2:8a:2f:b7:43:6d:7b:d9:b3:
00:70:60:a9:7e:d9:9f:18:7e:02:34:a8:88:b2:ec:
2e:ac:71:45:92:8c:91:4d:9a:ac:3d:80:11:2c:57:
57:18:b1:eb:f2:62:49:ab:f9:94:7a:1e:73:ae:53:
c3:93:f7:7c:7a:b9:88:4a:9f:50:24:e4:b5:fc:cf:
43:b2:ce:23:37:34:d8:4a:c1:ec:2d:99:2a:0b:ec:
5d:e0:42:ab:97:9b:e4:64:8d:8d:26:13:6e:a0:b6:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:A8:27:E4:87:52:D1:8A:0D:F5:08:19:B3:E2:96:99:C7:F7:09
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4f:41:59:12:15:a6:0b:a5:60:b0:59:67:ce:92:c6:fb:29:
a2:d4:d0:cb:9f:92:95:2d:34:b9:b5:5a:51:4e:66:af:a9:dc:
d2:f9:72:e8:0a:15:af:df:52:9b:27:07:24:e7:21:b4:ad:0b:
8b:81:1b:6a:a4:b9:80:97:3d:a4:67:4a:ba:71:66:d8:3b:d5:
18:53:bd:21:a7:f1:b3:c9:9c:4a:9c:08:a0:b5:94:ec:9b:f0:
90:f4:c2:69:8b:35:27:a6:7c:7c:b4:f5:87:b1:19:c2:a4:8c:
b2:85:d9:ef:66:26:61:43:ef:89:ec:47:58:30:40:e4:3a:b9:
7f:db:fd:45:9e:ff:73:26:6a:3f:e2:a6:e3:c5:4a:bf:8d:63:
d3:09:84:9a:43:b9:0f:55:a8:9e:2f:63:f9:51:7b:fe:30:9b:
89:46:09:0b:1e:85:6a:25:5f:63:25:93:4e:aa:8a:fc:e0:61:
e5:89:b4:04:2f:2b:ea:78:99:a0:f9:bf:0a:90:dd:6f:55:13:
b3:f9:bf:7a:16:c1:ad:05:9b:1b:da:75:f3:3e:2d:5d:8f:ac:
bc:35:58:be:b9:90:ba:28:12:ac:52:94:dd:24:a3:28:2b:d6:
36:d3:54:eb:00:b5:f5:5f:49:42:71:3c:5f:a1:80:f6:71:81:
ea:8e:81:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBaswCLcGtSPm1Pu6zuOneIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWMwZGRlYzMwZTI0ZTQ1N2UxNmU2NTA3ZDIxOTcyODMx
MDg5M2QwHhcNMjYwOTAxMDIwMTE1WhcNMjYwOTAyMDIwMTE1WjAzMTEwLwYDVQQD
EygwZWZkYTgyN2U0ODc1MmQxOGEwZGY1MDgxOWIzZTI5Njk5YzdmNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BrWjfuUVgZcLQgiobz2jIw66rrK
FUnkDvSy4d50VY366R3puzvgLxmOBqnE0WFUu7qGTlJTdhwz7Fj2y8eYM16uhOQp
9615fIFdq5SUVQ0fAIaJArNZdYYkNGL/RLacSjgZ+qeI5FNopfJI7MSWox+OJvBq
4jnOpixgb7gIhKFJGurP3y3LG1FG1RUO4QnqYQEWk4dEuQD9vHnyii+3Q2172bMA
cGCpftmfGH4CNKiIsuwurHFFkoyRTZqsPYARLFdXGLHr8mJJq/mUeh5zrlPDk/d8
ermISp9QJOS1/M9Dss4jNzTYSsHsLZkqC+xd4EKrl5vkZI2NJhNuoLb9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA79qCfkh1LRig31CBmz4paZx/cJMB8GA1UdIwQY
MBaAFFSsDd7DDiTkV+FuZQfSGXKDEIk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEt
MmYwNjU1ZjAxMDI5LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEtMmYwNjU1ZjAxMDI5
LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk9BWRIV
pgulYLBZZ86SxvspotTQy5+SlS00ubVaUU5mr6nc0vly6AoVr99SmycHJOchtK0L
i4EbaqS5gJc9pGdKunFm2DvVGFO9Iafxs8mcSpwIoLWU7JvwkPTCaYs1J6Z8fLT1
h7EZwqSMsoXZ72YmYUPviexHWDBA5Dq5f9v9RZ7/cyZqP+Km48VKv41j0wmEmkO5
D1Woni9j+VF7/jCbiUYJCx6FaiVfYyWTTqqK/OBh5Ym0BC8r6niZoPm/CpDdb1UT
s/m/ehbBrQWbG9p18z4tXY+svDVYvrmQuigSrFKU3SSjKCvWNtNU6wC19V9JQnE8
X6GA9nGB6o6BDg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:33 2026 by rpki-client