Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: gXz9KVaGjSAqLcQ2UjLG38swDJGtEY4imP9PNQwig3Y=
Subject key identifier: 17:02:96:E0:EE:D0:01:A9:0E:F1:52:42:6F:53:E6:65:99:BD:F7:49
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019D39410556C1EE67D91EC247513D3E50DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 136E
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: 7TfKI9zu75IFG2ZKuRFgLJzoQCrvf/1JCjUwu26Jatg=)
2: oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa (hash: fg5ldvtNVy0GA4pv1zrABZsjmX5v9/M80VbIZSFHe+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:05:56:c1:ee:67:d9:1e:c2:47:51:3d:3e:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=170296e0eed001a90ef152426f53e66599bdf749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:26:00:63:96:42:c4:70:e4:41:3b:9f:3a:
db:c9:87:03:f5:3b:43:f1:93:48:77:da:2c:a1:da:
2e:3e:3a:5d:81:36:0a:9f:b0:8e:bd:03:70:78:2b:
14:99:28:86:34:82:59:f2:09:21:45:85:c3:24:a6:
5c:59:d1:1d:f1:b0:63:4c:48:7a:27:75:a9:49:93:
83:5f:43:1d:66:9b:56:0d:39:dd:a8:bb:56:15:ed:
d3:4d:06:46:f8:62:d0:5a:94:c0:ee:80:13:78:92:
c1:fc:5b:61:7c:e1:3f:6b:bc:cd:3c:51:df:bd:90:
d4:fd:e8:65:ac:90:70:80:e0:29:34:34:10:7c:e5:
7a:95:65:d8:2a:c5:c5:2d:eb:44:1e:85:53:49:07:
10:df:12:8a:94:c4:65:aa:70:02:e6:50:c3:ce:76:
ed:9f:2b:4b:ad:34:44:31:70:bd:7d:48:85:cc:85:
5e:12:4a:02:c3:2e:11:de:cb:9a:45:ad:1d:03:81:
4e:cd:fd:bb:af:7c:35:c9:a1:01:6c:77:f9:e3:56:
4f:df:00:34:c9:e0:06:b4:6b:40:26:cb:e8:59:24:
bd:c8:aa:24:2f:a4:60:d7:b7:e8:0b:20:bd:32:49:
0b:4a:23:3c:9e:f5:d7:e3:28:17:00:b7:b8:9f:58:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:96:E0:EE:D0:01:A9:0E:F1:52:42:6F:53:E6:65:99:BD:F7:49
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3f:97:3a:92:fb:45:a5:da:ba:fc:60:ba:a9:b8:67:c5:26:
3c:11:eb:f7:75:73:be:5c:34:f1:e8:35:1c:37:db:b4:06:a0:
7d:38:5b:e1:ef:fc:38:2d:26:dc:fc:d2:6d:21:cf:a2:cd:74:
04:69:1f:7a:cf:d5:64:dd:66:83:6b:73:df:09:7e:2b:ef:45:
64:7d:1d:4d:48:30:98:9d:56:2f:92:fc:f0:64:41:ac:17:2f:
91:94:f3:28:11:bb:12:8c:59:73:36:de:d0:1d:dc:a3:8f:34:
4e:4d:d8:ad:1a:a7:e2:78:76:c9:d5:a1:0b:8e:83:0e:a0:ee:
75:8b:75:41:dd:7d:8e:ec:03:cf:b3:bf:b8:32:c2:ff:f9:3b:
9f:90:45:a1:c3:ee:6d:41:5f:2c:dd:f7:24:66:c7:87:e9:0f:
ca:e6:28:ad:d2:cc:66:04:42:1a:92:5d:b8:53:17:d3:1b:a7:
4d:6a:9c:d2:01:f9:cd:df:12:25:6a:9a:bd:f8:da:5a:f3:0a:
8c:17:05:4f:33:47:a2:2e:7b:84:0e:e6:bd:64:ca:e5:09:f4:
54:88:1d:4d:b5:2b:34:b1:c8:d8:75:02:91:3a:20:c2:bd:cf:
5c:01:d3:7e:2e:f0:ec:31:6b:d7:39:cf:8a:0a:27:40:b3:45:
6a:8a:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:33 2026 by rpki-client