Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: rrIEMJAghfJb6boiQ/2mb7qKKb4kvfRkIJAOAzMHGJQ=
Subject key identifier: 86:43:A6:D5:66:D7:07:78:E9:B5:71:FE:F1:89:38:1B:FF:AF:8E:CE
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019D3753258FE973A5CFE925060A72CC0ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 1283
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: DG1DzmcPxm8Zg5hdfvqf8UuxETLZk/MF5Rat75gVqFw=)
2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:25:8f:e9:73:a5:cf:e9:25:06:0a:72:cc:0e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=8643a6d566d70778e9b571fef189381bffaf8ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:21:0f:68:98:bf:e7:6f:69:01:b6:23:b4:
11:4f:fb:68:0a:f1:ab:aa:8e:31:5f:55:73:80:c1:
15:8d:35:2f:26:60:26:9a:99:58:2b:97:d8:73:b3:
82:1b:16:12:a1:05:dd:7f:47:83:11:ca:4f:2b:98:
a4:91:07:4b:0d:8b:d2:3e:db:4f:e7:9d:32:b1:99:
4d:d6:7f:c6:1d:85:ac:22:99:01:d2:20:8b:c1:a0:
eb:91:66:f3:6c:19:32:93:a2:86:af:85:02:00:46:
06:5b:63:c7:a4:60:93:5e:39:14:8c:e7:3d:49:e5:
e9:a4:4a:84:a3:c0:08:84:15:1a:24:f0:e6:ac:dd:
0e:9d:30:18:59:56:e6:bc:ff:ac:81:07:37:61:af:
6a:ee:90:d7:5d:cf:18:87:76:0b:9d:9a:45:9f:9a:
50:85:04:08:0f:0e:1e:99:ae:28:4a:a2:87:19:fc:
5e:f4:d2:cd:0f:c9:f6:14:eb:89:fc:fe:53:39:d3:
5b:17:bc:f7:6d:20:6d:f6:38:68:78:9d:ef:26:c4:
62:47:0e:e5:b4:0f:74:37:c8:fd:39:4a:90:74:a5:
94:8f:6b:9a:b5:90:f0:c1:c8:67:d3:e5:46:4d:0c:
d6:e5:d0:0e:66:3c:18:31:6e:fd:4c:a1:1c:2f:70:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:A6:D5:66:D7:07:78:E9:B5:71:FE:F1:89:38:1B:FF:AF:8E:CE
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:66:3b:8b:ea:12:ea:18:f8:db:52:31:44:12:cd:51:5a:e6:
79:9f:cb:6c:77:f5:1b:f0:cb:14:93:f6:99:e8:2f:2f:21:ea:
ac:33:16:f9:3b:8b:df:02:f0:d3:f8:56:11:39:49:6d:02:4b:
45:f1:0b:ae:d0:77:5a:83:95:db:16:3c:e5:28:c1:19:7c:de:
ba:4b:ec:d5:41:ec:6f:b4:14:dd:14:80:be:60:0f:a6:16:ef:
e7:51:e2:bc:21:37:7d:35:d2:6d:b3:bc:2b:f1:c6:60:88:8a:
e0:55:ca:f9:dc:e6:25:a5:19:8b:d3:51:e4:00:4a:8a:6f:38:
54:88:f4:e5:43:16:6a:5f:21:60:76:19:14:81:6a:39:c8:16:
b1:79:40:01:fc:aa:89:ad:bb:e1:90:54:c9:bd:bc:81:12:29:
e1:f7:7d:5f:af:60:17:86:64:96:d8:b0:b4:f0:d5:f8:3d:df:
8a:0d:2d:2b:07:27:bd:97:1b:61:6e:21:63:37:ac:72:24:7a:
9a:2f:9d:13:e4:04:c7:01:6a:ff:48:8a:6e:d2:1e:99:6a:89:
98:e8:d2:75:e2:77:ad:9a:31:95:a4:a7:d4:f6:cf:66:eb:c5:
3b:bb:dd:d0:b2:69:dd:6b:3d:51:24:8d:06:6f:7c:1e:58:53:
a4:0c:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:27 2026 by rpki-client