Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: 3np/rQxAIqCsvj/MAvd2Fymk73cta2Nv8z47ObYGuEs=
Subject key identifier: 24:88:54:2B:5E:EF:7A:58:B2:31:40:95:84:FC:61:88:FE:F3:23:D7
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 019D382E36511F73FB8B2AEDC5D8093F1471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 95
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: 63+IY6t+ndsvYxtRrtVprllYULZtreDVOF0ScfJr6jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:36:51:1f:73:fb:8b:2a:ed:c5:d8:09:3f:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=2488542b5eef7a58b231409584fc6188fef323d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:09:02:a6:83:dd:62:af:49:0f:2f:23:7b:
20:cb:12:57:8d:87:96:5a:98:cc:3d:75:89:48:5c:
2b:c6:67:69:36:84:89:d9:ab:2d:88:4c:ef:0d:ea:
ba:1f:83:2b:f7:01:e5:77:d6:d8:d0:e4:f0:8a:16:
94:2d:5f:f5:a4:e5:25:59:39:94:e8:26:02:fc:0c:
51:fc:41:d4:77:9f:1f:3e:60:5b:9b:bb:a6:89:e4:
46:ee:e2:41:ef:5b:69:e1:9a:63:dc:c1:3f:fc:ed:
34:37:4a:dc:d4:4c:4e:73:2e:78:86:87:e9:c5:9b:
2d:6b:48:a0:25:97:ab:66:20:36:a1:1f:98:61:54:
1d:07:6b:f3:b0:ce:87:3f:1c:2a:ab:b0:c9:00:74:
9c:31:2c:4c:3b:4a:58:d6:e1:a1:15:c9:e6:5c:97:
50:2d:18:0f:d6:d0:f9:ad:71:e9:94:a9:be:41:7b:
36:a2:29:68:04:b1:00:bb:e5:2c:15:fd:c0:56:2c:
8c:25:5c:ea:1d:ff:a5:a9:89:df:92:ad:1f:74:37:
0a:07:b3:d9:b4:81:aa:40:b5:4e:9b:f7:81:9a:f8:
ee:92:58:01:15:fe:6c:4d:76:77:ce:7d:8c:20:9b:
22:96:64:84:28:37:6d:9f:16:28:92:6f:df:86:ba:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:54:2B:5E:EF:7A:58:B2:31:40:95:84:FC:61:88:FE:F3:23:D7
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5b:38:30:f5:20:ed:99:1b:a7:53:1a:d2:40:6c:23:8d:24:
da:38:12:9f:6d:e3:0a:d8:89:b6:4e:ab:35:71:3b:d9:76:3e:
dc:22:47:ca:0c:d2:11:85:82:2e:73:c0:b6:ae:6d:62:cb:db:
47:9f:e4:9f:b2:eb:27:34:2b:20:50:2f:6f:45:02:d6:2c:54:
9d:cd:c1:e4:d7:54:5d:e2:3b:79:b8:73:3d:0a:a5:92:db:d5:
23:10:44:50:1a:85:9d:c4:48:0e:4a:4e:b5:5e:cf:98:41:c3:
26:e8:51:00:42:13:8b:2f:68:d2:a2:d8:7a:dc:86:53:45:56:
d4:a6:f2:ce:7a:bb:ea:8a:85:67:fd:06:e2:38:50:37:24:6d:
89:e0:8d:8b:ea:48:11:04:48:50:09:e1:e6:ef:0d:56:0c:b2:
f8:8f:00:cf:08:15:c6:5c:36:98:55:77:0e:9d:5d:4e:b1:19:
90:ae:32:7d:3b:f9:6e:19:1b:4b:a5:6e:53:f9:ef:d4:a8:b0:
ea:bc:78:21:79:e1:ba:23:9e:76:d0:a2:37:a7:fe:c1:bf:9c:
2c:db:06:01:f9:42:e5:9a:1d:7e:ff:bd:bc:27:e5:ae:e1:38:
04:23:2f:bf:d2:c1:4c:f8:d7:57:84:b8:c9:f1:05:bb:e1:9d:
63:60:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:15 2026 by rpki-client