Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File: VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier: 3fQA+TeozkZn2ULopPp8cvbM38bQjDfetPRfn8Cj0bQ=
Subject key identifier: 98:78:30:FB:6C:4C:9F:22:77:68:F3:E5:58:E4:3E:E0:7B:35:75:D1
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial: 01A17C9788AE53D32A51AEC8D113C3D04DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 09:01:07 +0000
Manifest this update: Tue 27 Oct 2026 09:01:07 +0000
Manifest next update: Wed 28 Oct 2026 09:01:07 +0000
Files and hashes: 1: Ib0Ol3nFOYIDYH3957HPZoQwY64.roa (hash: NuhOlS+BLbt/74LFrOD5mSh8QUGvts9CSbc+WHsVsPE=)
2: J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa (hash: Bfl8ObvmfqtyBp5KbMoNS07tnVUojBcqdmR2bkync4I=)
3: PDGpMhI2hhzaEunrKmCMvh1sj_o.roa (hash: QUb67JZzKC8hODXF/OgGrllY6z+k5+rpZer5JCC+7YA=)
4: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: ByB8ZsI+NUrg2cjsEL2/LFlZTuFwIGYsYcA0RDUuwwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:88:ae:53:d3:2a:51:ae:c8:d1:13:c3:d0:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Validity
Not Before: Oct 27 09:01:07 2026 GMT
Not After : Oct 28 09:01:07 2026 GMT
Subject: CN=987830fb6c4c9f227768f3e558e43ee07b3575d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:bb:90:da:09:29:a0:35:5e:ff:04:90:d3:
64:55:0e:58:0c:b2:26:0c:b5:79:41:66:55:da:5b:
4f:22:a0:b4:59:9b:39:6e:4b:f9:0c:c8:c3:93:0a:
3d:80:81:f9:45:69:71:9e:b6:ce:10:21:bc:0f:ab:
c9:ee:5c:93:fc:2d:77:6e:a0:67:e6:6f:51:19:d2:
77:62:22:cc:c4:7f:db:cd:a2:9b:b1:bd:2b:4c:21:
56:be:54:58:3f:3a:75:6d:ba:69:dd:69:cd:e7:0c:
b8:d4:f2:9d:e2:7b:a0:36:e8:79:e7:42:06:95:35:
db:21:d2:38:c6:af:43:a0:d4:11:a2:1f:dc:24:e4:
01:84:6d:36:a3:e2:12:d0:99:85:42:7e:9d:e0:e8:
68:84:f7:22:55:55:de:e4:13:b3:14:0e:5c:5c:0a:
9d:c7:86:cb:0c:90:ae:25:60:2a:98:68:56:72:36:
9e:78:f5:c2:c6:e3:7a:ec:b1:61:1f:93:05:76:48:
9a:d9:4b:76:e5:a2:21:ee:b5:47:00:a4:d8:0a:97:
8f:59:5a:1f:fc:3d:74:4a:84:02:bc:ee:bf:92:13:
27:f6:d6:d0:2a:58:70:1b:d8:bd:d2:81:c6:43:5e:
20:bf:63:bf:28:f9:aa:4c:c1:b3:8c:8c:b2:40:08:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:30:FB:6C:4C:9F:22:77:68:F3:E5:58:E4:3E:E0:7B:35:75:D1
X509v3 Authority Key Identifier:
keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:72:52:25:09:ee:12:d8:a8:81:2b:71:33:61:8a:09:96:83:
d1:e3:a3:e8:0e:c4:2b:3d:bd:be:27:e8:5d:1c:54:f7:f0:8f:
1b:e9:8a:28:d2:8d:02:d9:60:ed:10:9f:57:2b:83:0a:48:0b:
8b:ca:1f:84:74:fd:77:cb:2b:57:cc:34:5c:5b:58:e0:eb:32:
b4:7a:6b:a2:b2:ff:ac:3d:f6:de:35:c8:26:f7:27:fd:fd:de:
1f:25:2e:4b:96:18:2b:b8:bb:90:8a:96:6d:24:1f:b8:c9:d3:
05:92:d2:56:cd:09:66:bd:8b:34:c0:75:c4:35:05:30:83:58:
63:47:9e:81:95:bf:51:71:43:f9:a9:d0:1b:ec:6b:80:2d:a3:
ed:21:07:52:a5:05:60:4b:3c:7b:85:dd:20:9e:52:c1:b9:be:
ee:f7:a0:0d:92:1e:b4:5d:21:33:62:1f:9d:18:46:dc:17:71:
ea:e8:19:03:1d:a8:ad:f4:07:39:1f:99:8f:3d:4e:52:73:8a:
b5:74:55:86:46:ad:4f:04:f8:46:29:7d:a5:7a:b3:cd:56:32:
38:93:66:6a:3a:e8:e9:ae:1e:37:26:e9:b3:c0:b5:79:cf:d6:
6e:a0:99:b6:10:c7:4e:1a:ff:40:8a:9a:bf:b6:d3:c4:63:c6:
4b:9b:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:41:47 2026 by rpki-client