Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
File: VP1dZagmaMyV9_7_VdUbcNGpneo.mft (raw, json)
Hash identifier: qGLxZkuJ4H9+qBuF9YKxm79kPY0NmyPeFh/uA4DUXg4=
Subject key identifier: 39:4C:B0:30:7E:B5:3B:7B:15:72:95:BC:1E:1E:A5:64:8A:F6:10:C4
Authority key identifier: 54:FD:5D:65:A8:26:68:CC:95:F7:FE:FF:55:D5:1B:70:D1:A9:9D:EA
Certificate issuer: /CN=54fd5d65a82668cc95f7feff55d51b70d1a99dea
Certificate serial: 01A1A524E4AE99C4442F6102E9F63351D290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
Manifest number: 0253
Signing time: Wed 04 Nov 2026 06:00:20 +0000
Manifest this update: Wed 04 Nov 2026 06:00:20 +0000
Manifest next update: Thu 05 Nov 2026 06:00:20 +0000
Files and hashes: 1: RvkZEoK0HyizIOoF3aDu_3nGrKE.roa (hash: BJ0nBnlY8vQ8ef9j08YqNE70rnN85bh90GtAddLxkHI=)
2: VP1dZagmaMyV9_7_VdUbcNGpneo.crl (hash: 9pcBui0IiAUOvRME2U2CBiZmFlEb2korrJP8FG1ZZtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:24:e4:ae:99:c4:44:2f:61:02:e9:f6:33:51:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54fd5d65a82668cc95f7feff55d51b70d1a99dea
Validity
Not Before: Nov 4 06:00:20 2026 GMT
Not After : Nov 5 06:00:20 2026 GMT
Subject: CN=394cb0307eb53b7b157295bc1e1ea5648af610c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:66:4d:fe:86:42:c4:bd:bf:b3:46:ec:6d:
4e:61:10:25:24:d2:07:3e:75:b2:19:a8:91:bb:04:
74:49:48:aa:06:d4:53:ec:ac:09:31:63:89:1c:2f:
5d:ef:9a:3f:5f:e7:92:98:2b:6b:96:ec:4c:6b:cb:
02:75:7f:a5:9d:2a:80:75:d5:22:a0:7a:2f:b4:a5:
61:6f:b2:d9:34:12:4b:bf:84:6a:6d:43:7c:98:23:
82:33:da:6b:69:88:bd:0f:3a:72:56:17:3a:2f:d3:
75:fa:ce:d7:62:28:b1:72:f3:91:e9:34:15:09:7e:
95:63:8d:d0:e4:8e:ff:65:80:7b:ab:93:15:a8:32:
72:c8:b5:66:88:e7:2f:f3:bc:42:a0:d6:fb:37:83:
fd:36:03:30:b6:a7:b6:bf:72:27:27:22:13:1f:54:
97:51:5a:08:2d:69:50:79:9f:75:51:c5:db:57:3c:
5b:c0:4e:0e:31:bd:82:bc:ea:53:0b:75:3a:95:23:
f4:a7:49:9c:90:85:b3:67:90:07:68:ab:5b:8f:0e:
a7:88:7b:97:6b:b9:b9:ee:8c:c1:f5:eb:55:05:d2:
7e:cb:f0:56:9e:c1:5a:22:42:73:56:6e:cb:ac:b0:
2d:29:11:30:65:03:64:7b:b5:8a:97:d4:1a:af:e5:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4C:B0:30:7E:B5:3B:7B:15:72:95:BC:1E:1E:A5:64:8A:F6:10:C4
X509v3 Authority Key Identifier:
keyid:54:FD:5D:65:A8:26:68:CC:95:F7:FE:FF:55:D5:1B:70:D1:A9:9D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:85:29:4b:46:4e:cd:53:e9:e6:3a:f1:f6:df:3f:a4:1b:
8d:21:e2:5c:62:bb:bc:37:15:f2:83:65:33:ea:cb:7e:8f:7b:
0d:13:7f:3e:07:15:df:5e:3d:59:ed:a7:43:96:99:65:c5:cc:
ae:98:7e:d1:35:a8:e0:64:f2:12:62:9d:19:0f:c0:ce:3d:6b:
fb:48:5d:f2:de:b8:32:88:c5:38:34:cf:03:fa:f2:98:7d:26:
04:8f:2f:f0:1b:4a:58:0c:8a:8d:c5:17:31:3a:55:80:50:29:
cc:70:2d:60:0c:3e:ed:a6:6d:9c:92:6f:3e:ff:6d:23:c5:d9:
61:c1:7e:4d:17:5f:fb:a1:c5:f1:5d:e3:2e:a3:be:67:3a:44:
b0:e3:95:f0:2d:08:12:a9:93:2d:93:33:c3:9b:ad:b0:b8:a6:
87:15:6a:cc:54:3a:d7:ea:5c:06:33:5a:32:ac:c8:52:24:08:
82:1b:da:3e:19:17:b2:16:94:e2:4c:4f:2d:70:84:4f:f8:80:
bc:2d:03:46:d0:49:10:48:8d:d9:3e:de:49:98:de:f1:20:7e:
9c:e3:ae:94:25:48:62:52:24:e6:73:3a:56:28:50:58:1d:58:
1e:df:7f:e5:89:10:ff:ed:50:df:91:b0:a6:06:45:12:72:4f:
3c:ea:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:59:15 2026 by rpki-client