Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: LT6h7ooz2v7GlXrgUnzLxjGLi7WeqSyuI9loK04hiEQ=
Subject key identifier: 84:48:F2:7D:F9:7F:42:59:B9:5F:6B:08:F1:F3:1A:E3:B5:91:E8:B9
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019D39414E9D42740A043BF7B6E338C60103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:14 +0000
Manifest this update: Sun 29 Mar 2026 11:01:14 +0000
Manifest next update: Mon 30 Mar 2026 11:01:14 +0000
Files and hashes: 1: TJJ2gOjBREqpMzOZJTJ2VfBKc3M.roa (hash: peGM10woKh6oL0rMneWbTzD1iT6wAY2ntEnSy9KA6Lo=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: ipQ/cE1lZVfyiKfMNqwQRdIABsWkgEFqSJg38jRyCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4e:9d:42:74:0a:04:3b:f7:b6:e3:38:c6:01:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Mar 29 11:01:14 2026 GMT
Not After : Mar 30 11:01:14 2026 GMT
Subject: CN=8448f27df97f4259b95f6b08f1f31ae3b591e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:11:fe:83:74:98:7e:40:c2:cf:8c:dd:5a:
a2:89:f3:48:1d:87:91:a3:87:da:02:97:d8:8e:a2:
4f:bc:7e:f3:f2:f5:1b:b7:27:bd:24:52:d7:08:30:
a6:d4:17:be:3d:bd:00:14:7b:46:a9:e0:f7:e4:d2:
1d:ef:34:c2:56:a7:dc:f2:16:f9:08:91:28:4e:4d:
99:df:01:ba:8c:4c:2e:7f:db:f9:dc:9f:71:b2:01:
c4:c7:e1:53:ba:87:19:5f:40:14:b1:75:9e:5f:40:
59:51:3a:ca:58:2e:6a:d4:ff:71:18:05:c3:aa:0e:
d4:a0:cd:67:04:94:d3:20:c0:35:95:e9:e9:c9:76:
99:1d:06:a3:de:fd:b0:eb:87:a1:86:37:ac:28:78:
46:1f:05:62:07:cd:aa:36:8f:7c:a0:2e:dd:ca:0a:
cd:27:73:6a:fa:28:ff:89:f8:d8:b3:41:31:f9:fe:
58:a2:39:65:8d:8f:3f:62:f4:b3:0f:91:36:c0:b8:
c4:37:70:41:a8:fa:ef:fb:21:4c:8a:78:43:e3:35:
bc:ab:11:7d:d7:53:e7:84:84:11:4e:e2:00:18:7e:
a4:6d:24:df:11:32:43:1d:23:b1:9d:49:e3:ee:91:
0a:02:63:de:d7:a4:4c:ef:15:32:2e:8f:d4:ac:ef:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:F2:7D:F9:7F:42:59:B9:5F:6B:08:F1:F3:1A:E3:B5:91:E8:B9
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:1f:d3:e3:59:0d:3d:d6:7d:9f:23:c0:be:2c:c1:26:23:
5a:d9:3e:db:69:23:e2:6f:e9:b2:aa:27:b7:7e:e0:09:8a:97:
bd:4e:e9:ac:66:96:62:d7:17:6e:4b:01:1c:9b:95:4c:0e:7d:
89:1f:9e:4d:95:71:08:36:6a:09:1c:71:0b:b7:fd:87:67:e0:
33:4e:b7:84:aa:0e:d7:c0:c7:c4:d8:d3:ba:ae:ac:3c:e3:e8:
6d:d0:99:c1:e2:32:53:46:6c:51:b7:7a:63:d3:00:1b:75:3e:
bc:ad:bf:4a:b7:c0:38:67:c1:6c:8e:80:a0:b5:58:35:b8:dc:
70:17:e0:21:bf:46:c1:1c:29:3a:8a:75:30:f6:62:a0:20:b8:
cd:b0:dd:08:89:63:ce:b2:da:2d:f4:86:94:2e:4c:f4:3d:e2:
e3:da:1f:51:7a:26:1f:6b:4e:bd:f2:88:13:67:6a:da:57:0e:
3f:2b:24:dd:92:db:21:5a:37:ba:4d:ba:53:6b:da:b8:59:fa:
9e:23:72:7a:52:d5:65:6f:29:4e:0c:16:11:26:67:6d:64:7d:
91:bb:16:2b:8d:44:61:cd:0d:e7:28:76:86:5a:2e:63:5e:48:
d3:b1:b1:18:72:d8:4f:3d:19:12:ca:0c:99:40:78:13:f1:27:
9a:89:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:04 2026 by rpki-client