Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier: 3xjsqbNLmrpVCEva1exkfnBVpyTcH/DR58lsovaNNNQ=
Subject key identifier: A9:DB:7E:1E:E4:07:6C:A8:80:D9:B8:0A:90:E2:17:25:38:8C:2A:40
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial: 01A089E73B3E118B505E8E637066F0A70D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number: 024D
Signing time: Thu 10 Sep 2026 06:00:27 +0000
Manifest this update: Thu 10 Sep 2026 06:00:27 +0000
Manifest next update: Fri 11 Sep 2026 06:00:27 +0000
Files and hashes: 1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: nqVC17FB7edNrNRmZg9su+C/zJzGAhbZsQafyRB9NVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:3b:3e:11:8b:50:5e:8e:63:70:66:f0:a7:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
Validity
Not Before: Sep 10 06:00:27 2026 GMT
Not After : Sep 11 06:00:27 2026 GMT
Subject: CN=a9db7e1ee4076ca880d9b80a90e21725388c2a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:0e:d6:76:7c:91:9e:16:94:45:e7:6a:2a:
2a:6a:b4:d8:a5:29:08:44:3e:a2:2a:47:45:47:8e:
7f:96:b7:15:1c:7e:29:2e:5c:6f:2b:e7:01:4c:ae:
f5:62:2a:f3:19:d0:4c:da:fd:28:bd:bf:df:f8:1c:
d3:43:f2:a8:5e:94:df:64:c5:13:a6:a9:57:50:8f:
4b:0b:3e:68:09:aa:1e:f7:57:2e:8d:d9:ca:d1:78:
09:ea:db:9e:aa:06:f7:cf:6a:32:db:e6:20:9a:88:
81:5f:f6:d8:c1:4a:df:fa:11:44:36:82:6d:8b:96:
05:ff:e7:ec:aa:fe:d1:22:6c:07:92:9d:d8:ba:10:
3b:c6:b9:36:85:0c:26:1f:3f:8e:ab:ac:0a:bf:e9:
0b:89:b4:ef:18:83:ad:02:bb:a5:df:46:d9:43:91:
42:eb:eb:85:ba:43:12:d4:4c:37:0b:cb:3c:63:7a:
b2:93:06:e9:0e:46:00:50:67:b4:8a:d4:d6:8a:e8:
27:c6:fb:4a:e0:20:c9:18:23:18:05:e0:a8:d1:6e:
2a:c3:f3:df:b9:70:91:02:15:4e:b8:76:7d:cc:c2:
8d:c1:4d:5a:2d:d4:a0:55:de:ae:16:6c:a7:2d:d9:
69:c5:fd:0f:2e:ef:96:ac:4b:28:4b:be:6b:00:b6:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:7E:1E:E4:07:6C:A8:80:D9:B8:0A:90:E2:17:25:38:8C:2A:40
X509v3 Authority Key Identifier:
keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f8:76:c5:44:d2:61:61:7d:ee:c4:ab:91:9b:f7:4d:da:ba:
e8:e7:84:43:2f:b6:00:fe:1f:d9:95:ff:50:91:ab:0e:e6:64:
2f:b3:e4:44:19:2c:2c:d3:ec:3a:10:eb:31:9e:4e:46:1a:7c:
1b:8d:79:dd:12:cc:83:1e:89:33:11:75:d4:92:24:38:5c:fc:
a5:b8:07:c2:97:21:9f:0f:a2:5c:fb:75:d8:fe:85:a2:75:c6:
70:2a:66:25:4a:dd:38:3d:e6:d7:ac:f4:e7:3e:f5:c6:25:d8:
a0:8c:b8:ad:b8:33:ca:d6:57:b4:5e:8a:fd:fb:5a:db:a9:c7:
26:af:32:4b:dc:4a:00:01:79:a4:48:71:d1:35:4f:61:a4:41:
b9:8f:e8:fb:85:ee:26:3a:b5:dd:20:6f:72:8f:50:5f:31:da:
dc:5f:44:ec:53:9a:c9:dc:9e:87:9d:49:79:c6:1f:22:46:95:
5c:a9:38:15:a2:44:48:76:bd:f3:1f:ce:b3:db:1b:a8:f0:1c:
3f:4f:5e:91:df:cc:e0:7e:46:d3:ee:c3:21:a9:5e:9d:aa:73:
74:c4:79:e5:4a:03:73:26:43:63:24:12:61:ae:e4:bf:4c:42:
6d:a9:af:96:2b:ab:73:e1:d1:29:42:5d:9c:29:41:78:0f:03:
5c:de:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:40 2026 by rpki-client