Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: Yku2Dnijx9YVMFZOY/t596fF7AG0ei1MHpox9D0+w4k=
Subject key identifier: 43:11:90:3A:CC:DF:81:77:8B:25:02:D8:A2:72:7C:AA:7B:93:E7:F7
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 01A15B8C53411210054F96A01A893F453B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 061F
Signing time: Tue 20 Oct 2026 23:01:25 +0000
Manifest this update: Tue 20 Oct 2026 23:01:25 +0000
Manifest next update: Wed 21 Oct 2026 23:01:25 +0000
Files and hashes: 1: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: kxI1s1qyT/Al09laroLrUjCS88s/nbHSb02XIqRFiys=)
2: uqb13WcH-sHQrFpv4PbFThoSkmk.roa (hash: z4r6mb25fzWJDdqfWlcYfompTywQy1djheMADUOlVYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:53:41:12:10:05:4f:96:a0:1a:89:3f:45:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Oct 20 23:01:25 2026 GMT
Not After : Oct 21 23:01:25 2026 GMT
Subject: CN=4311903accdf81778b2502d8a2727caa7b93e7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:6e:88:78:3d:0f:1f:04:50:64:85:8f:f4:
90:e6:2e:cb:6a:5d:fc:86:1f:22:5b:60:b4:38:2e:
d1:c2:c7:0c:2a:03:97:a7:17:f3:46:bd:64:64:4e:
b3:a9:76:7d:f7:3a:bd:9f:05:a6:c8:4e:89:02:cf:
26:8f:8f:30:6e:1c:59:f6:2f:f6:84:3e:55:fb:38:
f7:51:1e:5c:a6:01:7d:c9:1f:80:8f:9f:c5:67:48:
f2:d1:f1:56:54:e9:53:db:98:57:70:7c:6e:9e:95:
44:ab:20:da:6a:73:eb:fc:30:bb:6a:4c:98:19:d6:
75:75:fe:44:cd:a5:9b:a4:6f:63:b1:96:bb:82:c0:
b2:ac:65:ce:96:dc:a5:17:b0:90:87:6c:ed:18:fa:
8f:68:41:81:a7:cc:0b:6d:7c:48:48:f1:0f:87:f5:
1e:11:e6:96:99:38:38:a5:e2:3f:f2:c3:18:78:77:
ac:97:1c:d8:99:41:3e:d4:54:c7:df:bf:4f:71:d7:
26:a8:a5:48:6f:07:84:de:72:1e:80:df:b7:27:39:
56:db:cd:3d:69:16:80:64:92:c1:5b:ca:f6:e3:13:
ff:3e:48:a5:0d:de:90:ef:78:be:58:ad:43:73:4f:
d6:db:f7:24:52:67:7a:bc:5e:b8:c7:85:ee:66:76:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:11:90:3A:CC:DF:81:77:8B:25:02:D8:A2:72:7C:AA:7B:93:E7:F7
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1e:e2:4f:de:d5:66:ee:df:9f:3e:d8:41:8d:c0:77:17:9d:
cb:a5:98:43:fb:21:89:82:b5:f6:b6:61:20:d5:d4:db:10:df:
93:6e:b4:fe:1b:6e:26:bf:ad:1c:d3:8d:71:61:7c:a9:f3:0d:
f6:2e:22:1f:29:3b:c1:87:b6:22:a1:cf:a1:62:09:1b:a7:29:
46:55:c1:e5:54:62:58:28:33:a3:35:b4:3c:ab:8d:f4:51:e4:
e6:78:4e:50:9a:bd:d6:d8:4a:41:ba:92:bc:e3:95:2f:5b:3e:
3e:c2:a8:1c:fc:16:72:65:ef:33:ea:71:df:c4:51:e9:a9:d4:
9f:09:bb:58:03:bd:d4:92:c8:3c:d7:ac:41:44:74:a5:a9:5e:
ac:b5:63:17:dc:bb:df:6f:63:86:3c:49:29:03:7a:d2:14:6e:
78:81:30:86:f7:03:3c:fd:92:1a:a5:c7:65:69:fa:72:2c:f8:
8a:a8:c7:10:e5:f7:69:3e:30:52:be:62:be:2c:c3:31:8b:be:
a7:b0:b9:57:1a:f3:f2:e9:3a:c1:98:c5:3c:f3:6b:cf:da:18:
05:f3:f9:53:81:47:aa:c4:d9:89:bd:42:2f:f6:62:90:6f:be:
15:3f:86:c6:49:79:cb:a1:6f:23:f9:14:bf:66:4c:5c:fe:7c:
96:4f:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:52:04 2026 by rpki-client