Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: CvoXu67gc43tEAiKODHqKCUYJ6qaQVxP3Qvub4Ch6S0=
Subject key identifier: 43:32:B4:46:4C:E3:3E:15:8D:BD:B0:E8:9B:D7:26:B6:00:38:FB:AA
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 01A15853C4B0E8BDFCD19AEE541376612894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1594
Signing time: Tue 20 Oct 2026 08:00:47 +0000
Manifest this update: Tue 20 Oct 2026 08:00:47 +0000
Manifest next update: Wed 21 Oct 2026 08:00:47 +0000
Files and hashes: 1: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: W3tC8tPM6mSXAIjcKrjS5JltL2rcAN61x+4dWuC0QKk=)
2: goMtqeZ06_gfRxaMBYsSmQJp9A0.roa (hash: L0+SJN0D4g5LkzBrfZ59YxipE2RzS3w7EIiCj6QiH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:53:c4:b0:e8:bd:fc:d1:9a:ee:54:13:76:61:28:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Oct 20 08:00:47 2026 GMT
Not After : Oct 21 08:00:47 2026 GMT
Subject: CN=4332b4464ce33e158dbdb0e89bd726b60038fbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:32:2a:dd:dc:97:37:f1:9d:f5:8a:af:ef:
19:97:73:62:6f:25:9d:ec:cd:c2:97:1c:07:48:4a:
2e:b2:fb:0f:05:23:e8:cc:c5:52:96:c4:8e:dc:39:
62:d2:45:df:44:61:fe:66:d2:af:b0:dd:6c:0b:b8:
fd:4f:fe:71:cf:f5:b3:8d:26:98:c7:ed:33:d3:9f:
7b:3d:f7:de:16:99:d4:eb:19:f4:93:9e:26:b0:bc:
59:3c:88:ea:b3:c5:7e:63:0b:2d:06:e0:52:36:06:
c8:4d:28:74:de:86:77:f2:65:ab:35:fe:97:a4:40:
aa:13:19:14:c5:d4:0d:ff:e5:3b:08:97:94:8a:4a:
64:02:48:a9:7f:c0:21:9d:3f:cd:2e:42:ac:7f:db:
35:c9:25:cb:00:36:1e:f0:47:5f:06:d1:fe:af:25:
a3:27:6d:6c:fe:82:e8:7c:0e:36:ca:b6:42:2d:31:
d3:45:fc:3f:b9:ee:1f:d1:7d:4b:10:53:3a:4a:49:
20:5b:3a:69:90:a3:96:80:4a:5d:9c:f5:8c:7b:e4:
5c:cb:a4:70:75:df:46:8c:ff:f2:9d:59:17:a1:a0:
99:dd:f5:91:89:a8:13:93:d9:18:57:d1:f9:f6:2b:
c8:7a:9e:f2:36:73:ab:3d:a1:45:93:ac:7b:f5:c7:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:32:B4:46:4C:E3:3E:15:8D:BD:B0:E8:9B:D7:26:B6:00:38:FB:AA
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ff:d3:c5:93:3a:75:82:c5:64:3c:b1:e5:2b:9e:ed:58:0e:
76:33:85:b7:d3:d9:90:44:4f:0e:df:f8:44:37:80:49:cc:84:
12:2d:5c:79:65:72:0d:96:fa:6e:31:2f:a2:ee:68:6b:4c:37:
3b:90:c9:14:d2:8f:83:95:55:6d:6c:c3:1f:55:7f:c9:f3:c2:
6d:4d:0a:ed:39:d6:a6:40:d5:f7:ee:a9:df:62:a8:d4:ef:12:
82:a5:93:85:3e:e0:30:c6:78:cb:fe:99:2b:dd:82:e9:bc:2e:
ed:b8:e6:d5:5c:00:32:ef:35:dd:21:5f:91:0d:43:e6:b0:b1:
28:ff:1d:62:67:08:09:e4:09:ca:63:70:93:34:33:3f:06:fb:
ad:85:60:b6:68:ec:c0:06:fb:c4:77:65:13:57:30:9b:7c:71:
58:28:64:53:fe:b9:33:46:56:07:b8:71:69:05:d6:a5:29:f2:
86:53:0d:15:30:fa:4f:ef:23:e2:44:93:9a:33:43:b7:e3:49:
64:e5:5d:be:cf:26:0e:2f:5d:ee:70:62:c9:35:d1:5f:71:e2:
c7:a7:2b:06:b5:cc:bb:34:e9:f6:0e:fc:4d:b8:86:d1:f4:3f:
92:95:ef:fa:b6:da:27:d9:06:81:cc:b8:ab:e1:9a:dd:9e:37:
e6:84:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:24:36 2026 by rpki-client