
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: j4cm3TVTA8cvbyXjaF+8AE+ojVmTCqA7Wr8by/loRKs=
Subject key identifier: 88:25:54:A6:EB:68:32:97:54:73:CD:0F:16:C0:AF:02:E1:50:59:BC
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 019DECDBB86671059E4458218E7ED752E23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0C5A
Signing time: Sun 03 May 2026 08:01:55 +0000
Manifest this update: Sun 03 May 2026 08:01:55 +0000
Manifest next update: Mon 04 May 2026 08:01:55 +0000
Files and hashes: 1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: Vqvcnz/CNJ4ZnDejlY2SKlK+3pmuGL1LqZCK7vu8p40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:b8:66:71:05:9e:44:58:21:8e:7e:d7:52:e2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: May 3 08:01:55 2026 GMT
Not After : May 4 08:01:55 2026 GMT
Subject: CN=882554a6eb6832975473cd0f16c0af02e15059bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:8a:86:6b:db:9c:dd:64:14:e1:39:58:2f:
88:ca:75:eb:0a:2e:ed:5a:fb:95:5d:45:1d:3d:d4:
a8:fb:26:8e:93:f9:0b:5f:91:93:3e:e9:45:03:bd:
55:0f:d7:56:09:5a:62:93:47:f3:a3:92:63:74:45:
23:84:4c:d6:6c:10:28:e5:b6:74:e4:64:94:fd:6e:
e2:12:15:dd:aa:8b:20:7b:34:20:4a:ee:95:bb:16:
fd:ae:76:3a:b4:ea:a6:11:88:56:63:5f:43:20:67:
53:23:ea:68:48:b1:0a:ed:d7:f1:2f:8f:b4:f5:f0:
ce:62:ef:b7:05:10:64:73:14:dc:79:2c:8d:13:5a:
bc:24:e8:96:f1:8b:1f:4c:d4:a6:07:b5:46:60:14:
f6:e6:a4:ff:eb:c9:db:0d:7d:1d:2b:84:f7:3a:68:
c7:1f:ae:07:5d:5d:ac:58:69:b2:eb:3e:db:17:47:
6f:5f:bf:d9:6a:a4:69:5d:03:9a:2e:7c:46:37:d7:
68:70:e3:97:aa:71:30:db:54:aa:30:3d:e9:9b:69:
68:32:30:fa:e9:84:e0:f7:6e:5a:35:6a:5b:e3:73:
b8:77:77:7e:72:c6:9d:27:87:2b:f6:15:51:6b:fe:
4e:5e:35:45:65:86:91:2a:90:cb:c8:1b:e3:a3:be:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:54:A6:EB:68:32:97:54:73:CD:0F:16:C0:AF:02:E1:50:59:BC
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:34:3b:ef:4a:2e:bf:ba:5d:e0:66:dd:59:98:92:68:ab:a1:
82:0d:7a:22:9d:c5:ae:95:10:c6:c3:38:0f:6d:ee:a0:d0:ce:
1d:8b:39:fb:71:73:39:58:13:61:bb:2e:7a:47:e9:4d:d5:31:
79:9b:ca:73:30:52:bf:48:e7:21:40:9f:5d:9d:65:31:6f:d1:
16:9d:3e:2d:e7:38:ae:1e:c3:78:eb:82:75:46:dd:86:4b:e8:
e4:19:47:c9:c3:f6:ab:98:61:fe:4a:22:ea:ef:1b:70:62:52:
10:ab:02:70:bc:1a:62:9e:b5:ff:ee:9a:75:48:28:57:e7:e0:
40:2e:26:57:7a:6f:44:e6:84:2d:59:4c:8d:da:de:b0:17:ae:
77:21:7a:f9:70:60:36:12:6c:6c:af:91:34:55:d2:4c:56:ac:
8b:62:b2:76:da:dd:71:c7:7f:37:0c:f2:08:70:57:cb:d1:8c:
d4:49:62:e2:60:48:26:6e:23:8b:e1:32:9a:f2:07:6b:3e:1d:
cb:0a:e8:35:90:e5:45:8a:35:64:ea:07:03:d7:13:39:00:15:
92:58:8c:f1:d9:47:76:e8:2a:34:8f:63:42:a7:34:01:a8:7b:
86:d6:7c:0a:53:a3:c0:b4:10:9b:8b:94:16:54:f0:76:06:1c:
3b:d2:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:09:10 2026 by rpki-client