Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier: WQmxusn4BwZmXQ2mjspUBjaoiYzsNqKIUKOi391/x7k=
Subject key identifier: E6:10:81:CA:7E:8B:8E:C6:74:19:F4:95:CC:CD:BB:CD:50:5C:0F:85
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 019D3A53B69B33EE59B98FF359F743C83E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 16:00:57 +0000
Manifest this update: Sun 29 Mar 2026 16:00:57 +0000
Manifest next update: Mon 30 Mar 2026 16:00:57 +0000
Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: 0sot+jvAwYhfDPoyMqInJPgSZ6jlB8pokGQBUY7Y35M=)
2: yC0tu0ZPT4RqHv0g-GiZ49yCtmI.roa (hash: gOGDU2RXqzQeLH1WmEbrGD4isYVlx+dkWghaOS6OSw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:b6:9b:33:ee:59:b9:8f:f3:59:f7:43:c8:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Mar 29 16:00:57 2026 GMT
Not After : Mar 30 16:00:57 2026 GMT
Subject: CN=e61081ca7e8b8ec67419f495cccdbbcd505c0f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:06:d1:9f:4d:d9:3f:ae:36:d8:87:39:8a:
dd:11:2a:66:bb:16:fc:2a:5a:b4:1a:dc:2d:ad:68:
3a:75:ce:2d:41:b6:8c:f1:be:db:25:65:9c:4c:54:
d9:f9:0c:e7:c1:59:d0:ef:23:6b:25:3a:57:2b:16:
68:11:a2:6a:72:9b:35:cd:18:1c:41:84:04:0c:9b:
21:e4:eb:41:14:06:ae:85:59:cc:5f:8f:68:e1:f6:
41:58:52:b3:c5:46:87:2f:79:eb:bb:bf:99:1a:7d:
41:37:7f:b9:68:40:11:e1:9c:6d:70:7a:a6:cc:28:
56:48:24:2e:9c:2d:0b:6b:f1:81:20:95:1c:44:37:
49:b5:06:85:b8:b7:68:15:93:71:5c:32:4f:11:75:
61:f9:36:96:a5:7f:e3:c3:38:48:82:89:b8:de:61:
27:5a:27:8d:3e:c0:7c:0e:07:d5:cc:2a:57:a5:36:
b2:4c:5e:48:f4:42:69:f9:1f:e5:b3:ca:2b:a0:78:
7d:91:53:02:cc:58:3e:98:10:0d:a5:8c:52:4f:ad:
07:a2:8b:d5:bb:99:d5:07:6e:55:cb:a5:e7:fa:3f:
30:1e:cb:12:2b:97:00:e2:ee:a6:56:21:19:9e:85:
c5:38:23:fe:d8:f8:c5:e8:19:39:b8:c4:c4:45:b5:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:10:81:CA:7E:8B:8E:C6:74:19:F4:95:CC:CD:BB:CD:50:5C:0F:85
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:f7:a7:d6:6a:7f:ce:1c:18:6e:01:3b:42:11:cf:4f:b6:
52:ee:3c:7f:16:38:87:0b:c6:8b:97:bb:52:31:dd:a5:16:79:
65:37:d6:5d:e8:e9:33:e3:6a:9e:d6:92:34:29:40:d9:32:f8:
dc:1c:b0:02:9c:3c:4f:fe:78:5e:a0:3e:7a:5b:87:a7:ba:cf:
53:1e:15:bb:38:e4:b2:9f:b9:ec:67:ae:16:74:fa:42:a1:1a:
ba:8c:50:be:16:bd:ef:0f:d1:74:47:54:e4:3d:cf:1c:fe:68:
02:d9:3e:15:24:3c:1d:81:2a:a3:03:c6:d0:25:69:ec:71:84:
90:8d:81:32:82:f8:ed:7a:aa:94:84:76:aa:47:80:5b:42:e0:
a1:65:00:8b:4f:47:a5:43:30:c6:3e:04:ae:83:9e:79:42:9c:
26:e1:d9:60:69:38:3a:7c:e5:17:54:8d:9a:17:d0:bc:de:61:
c4:3b:ec:78:a5:62:b5:72:e5:65:9e:bb:07:fb:60:52:af:eb:
f4:bf:03:d2:85:eb:ec:65:a3:ac:ab:eb:df:c5:47:2d:2a:31:
a7:9c:ef:f4:01:e5:24:1a:22:68:fd:1d:0d:6f:53:c6:98:f1:
c0:b9:f8:d6:92:35:89:73:3e:6e:43:c0:f9:65:41:5e:46:d6:
ba:1d:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:07:53 2026 by rpki-client