Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json)
Hash identifier: UOW8x1fupGyYpQdZCSBc9D83KiHnI40Wmk04vb4+kR8=
Subject key identifier: 06:F3:E4:D3:1E:20:B9:47:C9:75:49:2A:93:53:B3:60:2A:33:AA:FC
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial: 019E295DA884FB4DAD53964D10DAE461CFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
Manifest number: 01AF
Signing time: Fri 15 May 2026 02:01:04 +0000
Manifest this update: Fri 15 May 2026 02:01:04 +0000
Manifest next update: Sat 16 May 2026 02:01:04 +0000
Files and hashes: 1: O6tTo-EzouZEbfBpVRGby5BcpW8.roa (hash: e+5cW5Q75TnsiB3DdCMBwxBeOV1HRtuc8+8HpOCCAs0=)
2: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: r7XtpNEvmiK1f5jG9J3AD7meuCLMNcfi54Ji2LpWmhQ=)
3: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:a8:84:fb:4d:ad:53:96:4d:10:da:e4:61:cf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Validity
Not Before: May 15 02:01:04 2026 GMT
Not After : May 16 02:01:04 2026 GMT
Subject: CN=06f3e4d31e20b947c975492a9353b3602a33aafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:fe:cc:ea:48:a6:2f:1a:9c:9b:c0:53:c8:
5d:ca:81:e8:96:43:ca:b3:d6:0e:bb:18:0c:ea:a9:
fd:ef:48:87:a6:d0:ff:f7:7d:aa:55:81:eb:a8:b5:
6a:8f:a0:e2:05:a2:d0:d1:26:e7:47:69:9b:74:b5:
d7:f3:98:73:1e:7f:f2:0a:49:6a:44:fc:c7:56:e2:
bc:10:cd:67:76:5c:74:e4:12:82:25:77:f8:a6:4b:
e3:36:eb:4c:44:df:bc:f6:9f:a1:86:fe:5e:ad:24:
19:21:2e:31:ea:31:01:e2:5a:33:c5:54:df:ab:b1:
4f:ce:50:5f:3f:a0:66:e3:80:dd:e0:bc:32:0d:d1:
78:5e:9c:6d:36:b1:53:4e:37:65:0a:56:c1:2b:5e:
fd:30:58:35:6d:98:eb:dc:78:2c:83:5f:b4:1b:e0:
72:ec:0a:9c:8a:79:4f:6f:bc:91:5a:4f:0c:1c:5e:
c6:95:fe:9e:43:be:af:ae:18:59:7f:c6:ef:d1:00:
fc:23:6c:e1:6e:d9:69:3f:a1:52:0d:73:a3:9a:e4:
33:c0:aa:f5:ba:c9:5e:7a:69:29:58:96:ce:79:4d:
da:3b:b0:cc:61:22:97:3c:65:19:af:9e:5c:08:28:
5a:db:08:0d:35:7c:74:d4:3b:ac:47:4a:d4:a3:f6:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F3:E4:D3:1E:20:B9:47:C9:75:49:2A:93:53:B3:60:2A:33:AA:FC
X509v3 Authority Key Identifier:
keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:58:98:d9:bd:39:31:89:9a:d1:7a:33:ba:14:a6:b8:7f:39:
63:89:9f:33:cd:78:a8:14:31:a8:8c:86:12:fc:a0:5f:20:4e:
6a:42:13:82:ea:4f:fa:af:79:4c:a0:48:bb:72:4b:49:a2:ab:
71:4d:f0:8a:ba:03:35:da:47:1d:0e:e8:32:48:79:a0:d8:14:
0c:1b:f0:7d:df:6b:7c:69:d7:33:dd:28:b4:0d:be:8c:85:e1:
7b:3b:8d:b8:e3:c7:65:b2:3d:4d:92:3b:6b:47:89:4a:42:e3:
2e:77:d8:5e:99:7c:87:23:a5:60:87:90:3c:2c:66:8d:f5:fc:
8c:71:bd:5c:91:26:b1:bb:f8:75:87:2f:82:d5:1a:f3:a5:d4:
d7:46:94:84:2a:b7:29:75:c1:01:7a:42:13:e8:ae:6e:f3:4d:
56:25:b7:9a:2a:c7:8d:87:15:98:a1:11:ea:34:9a:96:3b:71:
5d:ad:6d:6c:af:97:b3:e1:06:9d:50:91:c2:ba:83:dc:6b:e9:
dd:e2:de:60:3e:99:0d:60:ba:c6:13:79:82:4c:2b:20:07:6c:
9d:d8:f9:6b:c9:6b:93:cb:6c:5f:de:26:b7:36:18:53:ac:e2:
b7:47:a7:fd:6d:7d:af:8b:25:0f:0e:c7:66:e0:e9:db:1a:46:
9e:99:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:10 2026 by rpki-client