Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: EX9i4Q8A+tG0PRLtZUuwWHP9q8bmQa1TZB+5SKXD+AQ=
Subject key identifier: AC:D8:B7:80:F3:C6:10:EE:F7:CF:91:23:11:C2:78:37:84:0E:4B:FA
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 01A1483CA2C17FC457E64C7516EF9BBE6A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 149E
Signing time: Sat 17 Oct 2026 05:01:35 +0000
Manifest this update: Sat 17 Oct 2026 05:01:35 +0000
Manifest next update: Sun 18 Oct 2026 05:01:35 +0000
Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: gde+EzkoZVrxuDfKmerqNUe6kaZuHhZJGDV72mhyBRw=)
2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:3c:a2:c1:7f:c4:57:e6:4c:75:16:ef:9b:be:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Oct 17 05:01:35 2026 GMT
Not After : Oct 18 05:01:35 2026 GMT
Subject: CN=acd8b780f3c610eef7cf912311c27837840e4bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:c5:69:6e:dd:39:1f:5e:a3:f1:ee:82:34:
93:16:1c:81:b2:97:4f:a2:75:b9:0f:20:cf:b7:72:
83:8e:30:6c:28:c8:d2:c1:eb:74:bc:23:0c:1f:85:
91:cc:42:42:dc:96:d5:7d:7a:d8:6b:ef:46:c2:79:
31:6f:f8:0e:ab:0f:68:7e:dd:70:aa:38:c2:ff:e0:
6f:ae:21:84:a6:ca:04:5e:f2:fa:04:c2:5b:ac:20:
8b:a2:21:81:0a:c2:6c:ad:37:73:93:e8:90:83:8f:
b7:6d:2c:f0:2e:60:1d:09:44:91:81:35:18:60:15:
8c:c0:91:d7:9b:8f:43:74:54:1a:41:08:2d:34:5b:
b6:01:ba:d6:b0:89:f6:08:50:cd:51:ad:08:ca:f1:
9d:e3:b1:43:f9:ca:09:f3:17:d1:3f:66:61:0d:60:
e4:c9:75:44:de:f7:0f:a4:f1:a9:33:23:ec:71:70:
d6:1c:2d:09:67:b8:b0:ae:96:fd:a3:3c:f9:e2:17:
b4:67:9e:ec:c3:63:78:89:51:70:9f:fc:26:7a:36:
1b:4f:47:e5:b3:70:51:c9:51:78:69:17:42:a7:62:
6e:c0:ea:19:f3:8c:da:b4:6f:68:3c:78:79:aa:a0:
3a:12:71:5e:10:d9:dd:ef:59:3d:a9:65:7a:9c:96:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:B7:80:F3:C6:10:EE:F7:CF:91:23:11:C2:78:37:84:0E:4B:FA
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:b1:51:43:f6:c4:b3:bd:6c:5c:88:96:70:a2:f3:db:d9:
48:64:7d:f5:5f:08:b6:da:4c:db:a4:fd:32:e4:e0:23:90:bd:
b2:52:7d:80:10:a6:19:46:7b:5f:a7:09:1c:11:9a:58:a0:7d:
e2:11:a5:58:77:8f:83:a9:ca:e0:98:75:64:57:41:fe:79:0f:
f9:b4:05:17:c0:51:25:5a:c8:2b:95:12:a0:43:52:a0:3f:1f:
99:c7:a1:8a:05:01:13:7a:77:62:92:61:8b:ed:f3:f9:0d:fa:
4a:16:48:64:88:78:ec:2a:8f:af:09:c7:b5:5e:58:ef:32:00:
31:fb:c8:87:55:b3:d7:9c:f1:bb:d5:ed:df:1d:81:12:42:51:
cb:14:3c:ff:85:07:84:16:04:d1:b0:f4:7f:70:11:e2:5f:f8:
5d:70:b3:c6:ec:b5:92:4d:f8:98:12:49:e9:6e:f0:a4:d7:4d:
8b:49:b5:1b:74:d7:8c:28:b3:47:04:a0:44:c0:3b:15:d7:c5:
a3:bf:36:19:c7:16:b6:56:78:cb:73:c5:ed:7d:98:f6:44:00:
2e:52:9f:1e:b1:4b:cd:53:4e:53:65:09:df:8c:da:0b:e2:bb:
9b:99:1d:f4:55:f6:ee:e7:bc:23:28:27:c3:2a:cc:60:c2:df:
b0:42:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:05:31 2026 by rpki-client