
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: kFU2r4Wrkw4VW0t/jBEmLLG8jkk5uMMfVuR1IQFgdU8=
Subject key identifier: 8A:3C:F3:B7:9B:95:5F:B3:32:A0:F9:E7:E6:BE:22:A7:42:30:21:1E
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 01A001384A3F497D1D70079E68B7AECE7422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 0531
Signing time: Fri 14 Aug 2026 17:01:01 +0000
Manifest this update: Fri 14 Aug 2026 17:01:01 +0000
Manifest next update: Sat 15 Aug 2026 17:01:01 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: VMFc43TPKVcy998YzTKppzlKigixNabfHw286eeSLoU=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:4a:3f:49:7d:1d:70:07:9e:68:b7:ae:ce:74:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Aug 14 17:01:01 2026 GMT
Not After : Aug 15 17:01:01 2026 GMT
Subject: CN=8a3cf3b79b955fb332a0f9e7e6be22a74230211e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:a0:a7:18:bd:bf:a3:58:fe:9b:f0:f0:8f:
9a:43:0f:34:75:52:de:fc:82:84:12:e2:a7:df:02:
d1:ba:a4:ca:3c:d9:0e:a5:a6:f7:24:25:88:e9:e7:
e8:73:e9:06:a9:8d:fb:6d:57:c5:63:1e:a4:4d:78:
11:c6:f5:1a:26:92:e7:3d:5f:b9:3c:90:64:17:88:
8c:73:06:fe:9a:02:e2:89:fa:a3:1a:f6:69:f4:d7:
47:41:01:ea:4a:f3:ed:a1:27:9e:fa:94:6b:f1:4b:
63:81:92:e2:c3:b4:30:cf:ef:79:dc:4c:a0:9f:c7:
5a:f2:a5:08:f8:c9:90:cd:c5:2e:34:d2:ef:73:94:
b3:a0:16:ad:77:19:84:af:3c:ed:27:3a:06:55:ac:
dd:0a:72:0e:49:30:d9:d9:39:41:fe:46:e1:25:0e:
44:eb:46:f8:de:ea:eb:88:f0:29:bd:03:ef:b5:97:
4a:6a:c9:53:be:48:2c:62:88:66:89:06:6d:7f:95:
9a:77:e5:93:55:c9:ce:e9:df:4d:ca:10:3a:b7:e0:
a4:ec:e3:82:95:60:24:29:a6:86:70:8d:ce:97:96:
a4:60:65:95:9f:c6:a5:4c:bd:54:2e:50:48:88:85:
be:68:26:5c:01:1f:0c:7f:a6:2d:a7:32:c9:34:f2:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:F3:B7:9B:95:5F:B3:32:A0:F9:E7:E6:BE:22:A7:42:30:21:1E
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:07:d4:dc:73:6c:21:48:13:99:39:c7:1f:c1:7e:c7:73:42:
1c:32:81:aa:34:8e:1d:26:e0:36:07:e2:0a:ef:61:33:28:71:
5a:2d:8a:5f:a0:f0:47:9b:ce:70:ef:5f:3a:c3:c3:33:44:47:
3a:cb:ec:b5:5e:9a:4c:e6:e3:73:f3:d8:bb:4a:46:70:7b:e4:
59:c7:0b:f6:87:ba:08:47:89:cb:d6:92:92:28:14:72:bb:d2:
3b:c5:68:9a:00:4d:6e:bc:6e:75:24:00:53:fc:a3:c8:7e:44:
b6:bf:34:e5:45:36:64:c1:a4:17:6c:36:65:70:47:dd:84:5a:
57:e6:44:e5:57:49:07:29:27:5d:d5:33:d9:ae:86:71:7d:68:
6c:82:ba:64:5a:bc:8a:d3:44:57:f5:d0:17:ae:8e:0a:86:77:
78:f1:94:5e:90:7a:d7:84:8f:f1:0b:17:02:04:18:4e:71:f2:
f1:7a:e1:d9:3c:0c:6b:4b:4b:6b:39:a6:0b:d9:de:4e:65:d7:
1b:3a:03:17:82:fa:52:93:31:83:b3:93:86:ad:0d:a8:d7:49:
01:dc:aa:2e:a4:e3:eb:7d:c0:a1:1c:c5:d8:3b:d2:64:e8:34:
94:da:06:5e:dd:cb:a7:ec:5f:f5:fe:bb:55:a6:03:1c:71:83:
70:4f:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:27 2026 by rpki-client