Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: N2SHRt78aaNb18igdw7cUEY3kWpXiroRWcm6rg6+Gpc=
Subject key identifier: 09:0D:F5:42:95:E5:BE:52:E7:32:2A:86:D4:D0:32:53:21:AD:A6:32
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019D3A8AF9980CB96B2CDFF58C03094C48E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 03C1
Signing time: Sun 29 Mar 2026 17:01:19 +0000
Manifest this update: Sun 29 Mar 2026 17:01:19 +0000
Manifest next update: Mon 30 Mar 2026 17:01:19 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: fb8G16TEyJgazuqo4TQoLEiyxaiWyNWjHhPC1VEt0oo=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:f9:98:0c:b9:6b:2c:df:f5:8c:03:09:4c:48:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Mar 29 17:01:19 2026 GMT
Not After : Mar 30 17:01:19 2026 GMT
Subject: CN=090df54295e5be52e7322a86d4d0325321ada632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:d1:a7:20:a6:1c:04:e0:0a:c5:a7:1c:81:
45:cc:91:76:8a:94:3e:89:78:50:62:af:2f:29:86:
c6:eb:a6:3d:68:69:3b:6a:8f:d3:fe:11:08:dc:07:
8c:78:33:25:92:1a:b9:f3:e2:5d:0e:4b:93:75:b6:
df:e0:3a:a4:c5:9a:2a:7c:b0:67:df:13:32:3a:71:
b6:24:8d:c1:6a:76:16:d0:fc:f3:be:8f:f7:09:28:
3d:39:d6:e5:38:b9:19:a1:3c:04:93:30:28:b7:7b:
c4:f5:fe:81:b6:8d:5e:e9:aa:13:fc:18:c5:bb:7f:
7e:5f:1b:78:e9:80:b3:5a:f3:33:97:d1:fe:71:0a:
39:b7:c1:09:61:67:f5:2d:ab:a0:33:9c:5d:c5:5b:
11:13:bc:04:1d:35:b2:98:f3:71:b6:8a:c5:7d:b5:
0d:e3:b5:3a:3e:28:ea:0e:85:0d:22:c1:4b:e8:77:
0a:32:9f:29:9e:4c:0f:1d:61:92:5b:16:f9:91:16:
fa:4e:f5:25:d3:ca:a1:98:4c:86:be:44:fc:8d:b9:
3e:02:38:da:dd:c7:35:89:80:4d:4b:cc:f2:74:4d:
55:bf:5b:47:7b:25:dc:37:b6:ee:00:0a:8d:31:4b:
e8:d1:22:9c:5a:8c:b9:06:35:6d:23:5f:35:67:40:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0D:F5:42:95:E5:BE:52:E7:32:2A:86:D4:D0:32:53:21:AD:A6:32
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ad:8c:6c:1a:ce:d3:4e:b3:ee:80:f5:dd:74:f2:b6:4a:32:
4e:ea:76:24:8f:0f:3e:cd:7c:86:af:fb:63:76:c8:50:8c:f2:
8c:65:d4:31:2d:21:84:48:d0:86:01:45:32:94:c8:3b:c5:83:
16:1f:b2:6a:db:7c:e3:bd:09:d4:db:14:67:87:74:4f:e5:20:
6f:82:d6:d5:68:52:a0:5e:54:a0:4d:1c:b8:c8:24:58:16:8e:
7a:db:5e:f0:d7:f3:14:9b:53:88:23:66:60:31:7b:42:38:65:
8e:fe:06:a4:a3:cb:53:dd:4f:58:ff:ca:37:e3:7a:40:37:e3:
35:e7:03:34:b4:b1:e7:9d:8e:f6:3a:79:5f:0c:fd:94:91:e0:
72:a2:68:1f:76:27:a3:d8:09:45:32:ed:00:99:21:1e:2f:b6:
df:d5:03:b1:df:79:40:8e:e2:15:1a:30:b6:d6:b1:3f:28:42:
99:c5:fc:76:51:7e:08:4e:2c:36:6c:76:2d:95:ab:2f:9a:dd:
57:fe:8b:6f:b2:e7:77:bd:25:89:42:64:e6:f9:71:d0:e3:7e:
a0:f4:40:ac:7f:49:7d:3d:f7:08:b8:63:bb:44:6d:7b:fc:4e:
a7:a7:c4:36:e5:13:cb:d7:5c:95:00:2d:90:79:89:24:46:bd:
f5:3f:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:50 2026 by rpki-client