Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File: VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier: WtJpy0tJPMo/UAkLzr7ZxO10AEDVfxx6bX+FZ+7QRRs=
Subject key identifier: 1E:A8:C0:AE:EA:31:EC:1C:9B:C5:A7:65:0A:0C:47:9E:B8:89:15:C1
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 019D8FF2A822C5EE04105EA6C42544170FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number: 0245
Signing time: Wed 15 Apr 2026 07:02:17 +0000
Manifest this update: Wed 15 Apr 2026 07:02:17 +0000
Manifest next update: Thu 16 Apr 2026 07:02:17 +0000
Files and hashes: 1: TboL8PiKmGO2xSdCzYOzLLLsrgo.roa (hash: L+TeEKzIHBiCwRJJ12WlexzFz32tqwEp+pqXfiwcHm0=)
2: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: a9LnETjHvndjf3eRW5neBWF23pmjcbYP8lRQ5zrV5Ss=)
3: fepTS1XefYM5Mm0VJMMPSN02wxo.asa (hash: VKdt4tdwgcz86/Usr6Qv72R8qP1GifrjrQfQv6ap4/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:f2:a8:22:c5:ee:04:10:5e:a6:c4:25:44:17:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Apr 15 07:02:17 2026 GMT
Not After : Apr 16 07:02:17 2026 GMT
Subject: CN=1ea8c0aeea31ec1c9bc5a7650a0c479eb88915c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:6f:c3:b0:83:82:49:f8:bc:c2:72:01:ed:
48:7c:51:03:c6:5a:d7:49:8e:6f:fa:a6:a9:85:ad:
48:99:7e:14:fc:50:47:fb:99:d8:95:36:02:bf:01:
f5:95:94:96:b6:94:7b:7e:7c:75:ec:3d:b7:a5:a8:
9d:0c:0d:17:7d:df:d1:8e:95:eb:c2:56:b2:c3:45:
80:b0:33:78:f6:df:61:d5:f5:1d:d1:d9:55:7d:42:
16:04:98:19:e0:fb:31:6e:a4:7c:21:17:fd:bb:4e:
3d:68:d6:d5:e3:64:56:2b:a3:46:18:df:c7:43:74:
b8:c1:e8:83:d6:cc:b0:74:a3:77:e4:4c:a0:fa:ea:
a8:9a:5d:d4:f7:21:9a:88:2b:9a:83:c3:93:c1:fe:
9f:56:58:80:5d:22:df:ce:90:06:88:65:3e:71:f9:
ac:59:30:be:14:95:ed:5e:5f:a0:3b:3c:6d:44:19:
65:fc:1b:fc:49:80:bf:0e:81:57:45:1a:7b:18:f1:
5a:0a:5b:90:31:89:d3:30:c8:84:15:86:7f:c1:2f:
8f:66:cf:9d:41:3a:ab:5f:30:f3:8d:c2:59:c2:68:
5b:5a:e8:38:e0:51:f9:1f:21:94:01:05:26:fd:91:
dc:f8:7d:91:89:7d:ca:a0:85:d0:81:91:89:24:3b:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A8:C0:AE:EA:31:EC:1C:9B:C5:A7:65:0A:0C:47:9E:B8:89:15:C1
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c7:40:99:fb:ab:fb:bc:a2:34:15:37:56:12:fd:ec:cb:fc:
88:7e:a1:50:06:84:77:ad:6b:af:c2:ab:6a:df:ca:2d:eb:5f:
0c:7f:b9:b1:5f:7a:c7:54:d5:5e:2e:07:e7:42:cf:6a:7d:49:
c4:c0:da:b8:a0:e8:bc:4c:c9:e3:6b:42:72:38:93:6d:ee:38:
07:69:f6:c8:c8:1c:44:c1:35:f9:f3:1a:c9:6f:c2:dc:d8:2a:
fc:ae:62:3d:44:39:88:2d:b1:6b:4d:3b:ff:56:8b:de:33:54:
19:7e:b8:4d:85:82:14:5d:86:35:d9:97:43:ee:a3:25:ca:fc:
ad:b6:15:45:8e:7a:da:89:e8:2d:e6:9b:b4:28:65:ee:e4:ba:
75:72:a2:ba:be:31:87:e1:8a:ad:c7:62:d6:70:5e:ac:36:a8:
e6:1c:94:30:c8:ac:1b:3e:bc:8c:6f:5e:36:8b:15:84:8b:c6:
0b:f2:38:57:94:97:be:27:5b:95:1c:3d:fa:51:a6:43:09:08:
50:88:8a:f5:57:08:e7:0f:2c:93:a0:06:c6:8f:75:2c:0c:cc:
c0:ac:02:22:69:ba:c3:aa:e3:f7:1c:f6:e4:f0:5d:91:10:e1:
b6:6d:53:95:ea:3b:27:c8:13:57:0e:52:8c:21:d5:6e:5a:d9:
7e:05:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 13:42:24 2026 by rpki-client