Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: +dyk7dM1MHnF54MCu24v3B984VhygXlg4rf7hu89YJg=
Subject key identifier: 1A:74:EE:5E:F4:46:25:09:3E:80:5A:F6:A9:14:DF:61:FA:9C:FE:EB
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 019D375251A9DEEB3FC75F212C567A82DB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 1022
Signing time: Sun 29 Mar 2026 02:00:34 +0000
Manifest this update: Sun 29 Mar 2026 02:00:34 +0000
Manifest next update: Mon 30 Mar 2026 02:00:34 +0000
Files and hashes: 1: 2oHiZnjzT420MbEkQGJ7v40Fe9I.roa (hash: Czu1tA9q/Wmcp0lOrzTS/3SnNIxEWPYmLWHdzKOsNLk=)
2: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: iyuYufEqNkvg4HqCIAt5g40lD7L6ZdJgBaT21P7rpc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:51:a9:de:eb:3f:c7:5f:21:2c:56:7a:82:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Mar 29 02:00:34 2026 GMT
Not After : Mar 30 02:00:34 2026 GMT
Subject: CN=1a74ee5ef44625093e805af6a914df61fa9cfeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:36:d4:c3:50:0e:41:ca:16:86:78:74:77:
7b:bc:3a:44:a0:30:45:14:cb:68:e1:d7:dc:0d:73:
cc:16:5a:df:79:be:72:63:d8:89:85:fd:e3:8f:c0:
fb:6e:32:6d:5c:1c:52:ae:6d:fa:c4:ae:c5:41:67:
c0:47:2c:b5:75:29:1c:21:89:81:78:bf:42:67:81:
9f:9e:3c:88:e9:aa:94:a2:57:c3:0c:3a:dc:2d:45:
53:d1:90:0c:c5:93:40:26:c1:10:73:87:43:0a:c1:
2f:a7:3f:07:9b:72:f7:4c:31:14:ed:92:b0:83:d6:
08:3a:d8:44:42:e6:37:2e:b6:55:76:08:d1:5a:ed:
05:45:de:e3:33:cd:55:2c:21:1c:c3:d3:93:71:d6:
3b:ad:01:58:dd:de:bf:5a:4a:6c:04:ce:2a:1b:a6:
ae:d9:ce:7a:a2:00:94:27:4f:81:da:1a:8d:5e:db:
53:4d:4f:d7:fc:07:09:31:d9:c3:63:76:c9:7e:53:
01:51:b1:c3:59:6e:aa:d3:c3:2f:59:1b:47:b2:0d:
dc:b3:91:da:e2:a9:50:f9:cf:5d:c9:78:e1:e4:3f:
6c:d7:91:43:56:70:86:1f:36:06:d4:df:77:7e:cc:
70:f8:cb:ec:0e:e9:f1:78:83:c6:2d:20:69:17:a4:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:EE:5E:F4:46:25:09:3E:80:5A:F6:A9:14:DF:61:FA:9C:FE:EB
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b9:65:3a:c0:3d:3d:d5:67:57:99:a5:8e:ea:82:e6:fa:75:
b3:f3:22:c6:e1:cc:1d:66:23:b3:f7:10:05:de:c0:b9:0e:ce:
5b:d8:17:95:f2:d7:72:46:77:c4:85:17:8d:fd:aa:b4:ec:b7:
59:a2:d1:b2:06:a7:33:d1:b8:a1:2b:22:a4:e6:a6:34:3f:d2:
24:e9:7e:d0:70:7a:c5:fb:de:ab:f9:73:d4:fa:02:e5:87:4a:
05:c3:ba:6a:1e:eb:59:0d:2d:f7:5f:48:0f:43:8a:03:98:9d:
c1:27:70:39:10:62:c0:64:7d:94:da:11:81:06:88:95:19:32:
a7:39:16:67:97:bf:24:92:4d:df:f3:11:a2:ea:a0:9b:49:79:
c0:ef:3b:08:0f:51:ec:76:89:65:1f:1c:f8:1e:5d:21:66:8c:
f2:65:98:ed:18:76:60:3c:9c:b7:f4:69:02:90:d2:18:26:84:
71:0f:44:69:ca:07:a9:d2:ab:c4:67:12:a0:47:93:c1:e5:0b:
ab:50:6b:0c:78:92:56:93:d1:25:88:a5:9f:9f:fc:25:fa:29:
a4:e4:07:b8:d7:58:68:3f:4b:0a:53:4b:0c:f5:4a:d0:9f:ad:
c4:e9:e5:4d:22:e1:ec:92:e1:e7:4c:6b:41:ff:06:08:aa:0a:
74:df:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:29 2026 by rpki-client