Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json)
Hash identifier: Jo37IShi44nORyQ4YOWxY4I/ZwbLBLgdopE65McaTjA=
Subject key identifier: 70:1D:89:47:39:7A:5F:27:6A:39:9F:52:62:4F:BC:C1:AD:97:13:86
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial: 019F111BFF3D798CAAB1C5344EB9DA1681F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
Manifest number: 0227
Signing time: Mon 29 Jun 2026 02:01:15 +0000
Manifest this update: Mon 29 Jun 2026 02:01:15 +0000
Manifest next update: Tue 30 Jun 2026 02:01:15 +0000
Files and hashes: 1: O6tTo-EzouZEbfBpVRGby5BcpW8.roa (hash: e+5cW5Q75TnsiB3DdCMBwxBeOV1HRtuc8+8HpOCCAs0=)
2: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: B09NJZTVG+ZSzi3QfReEsuf/ftvJzW/Pz41liTVyDMs=)
3: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:ff:3d:79:8c:aa:b1:c5:34:4e:b9:da:16:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Validity
Not Before: Jun 29 02:01:15 2026 GMT
Not After : Jun 30 02:01:15 2026 GMT
Subject: CN=701d8947397a5f276a399f52624fbcc1ad971386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:45:be:74:df:ec:9f:bb:a2:6b:08:45:2f:
3c:11:61:0f:29:39:7d:ca:8d:79:56:71:90:39:de:
4b:22:65:68:52:55:3a:a8:c1:ad:61:91:32:6c:33:
6d:1b:11:82:83:03:c8:38:5c:43:15:e4:23:82:ce:
28:a1:01:8a:00:d6:d2:13:48:f0:a7:db:79:2c:04:
28:1e:94:37:03:e9:f7:76:24:4d:2c:72:f4:05:73:
f6:93:3e:87:14:2e:1d:39:c8:ae:69:9d:fd:b5:76:
ef:4c:40:b6:a8:59:47:59:ed:68:82:ae:84:67:3a:
56:10:d7:78:0f:4f:1e:32:17:62:98:fc:de:a5:1a:
56:6a:3f:5f:dc:46:57:cf:1a:75:aa:85:f1:8e:10:
d1:76:97:20:d6:f7:d3:d0:6b:59:4f:69:aa:04:d3:
71:5e:ee:03:16:62:4e:9d:d4:aa:ad:8d:6b:af:2b:
2f:d2:f6:55:14:86:9b:db:0e:ca:b9:0e:15:ba:00:
92:81:16:3d:a8:d0:9a:f6:33:12:64:e8:18:9e:39:
f0:24:8d:0c:d6:bd:fa:b7:6c:62:00:7c:1e:49:f7:
b3:ae:a5:46:f2:59:74:32:76:fc:d7:74:7c:c4:7f:
8c:17:80:71:9e:78:aa:86:05:8a:f4:53:aa:ed:a9:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:89:47:39:7A:5F:27:6A:39:9F:52:62:4F:BC:C1:AD:97:13:86
X509v3 Authority Key Identifier:
keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:90:c4:06:72:17:20:61:30:a1:6b:1d:44:27:1a:89:03:5c:
cd:b9:6d:8c:b9:80:d9:6b:8b:b6:87:d0:60:72:5a:5f:a2:18:
1f:cc:90:2d:55:b9:1c:1c:3a:78:ad:96:b3:96:4f:f9:ac:fe:
ab:31:c2:92:57:3c:97:2d:df:9f:24:dc:9b:5a:a0:93:dc:48:
24:84:9b:cb:be:c1:56:df:a0:99:0c:b1:de:ec:dd:25:4e:85:
5d:b4:81:a3:e5:43:c9:a5:ad:1f:73:e1:43:22:37:34:4d:60:
9c:13:54:f2:6a:3f:80:d7:85:7d:c3:db:23:29:56:d7:16:4d:
90:7f:43:44:44:07:3e:b3:6a:f9:98:fd:c8:4a:86:17:91:9f:
18:13:ca:98:e7:e4:41:60:2d:f8:15:52:b5:42:2b:2c:60:2a:
f6:82:1d:fa:12:68:c7:eb:d6:0b:1b:10:77:d5:ab:10:1b:85:
52:25:aa:b7:32:b5:5e:a1:00:ab:83:c5:f0:9e:75:aa:a7:87:
df:f8:08:6b:71:23:4a:89:83:55:0b:48:8e:ed:e9:b8:92:7c:
02:65:2d:81:f5:12:d8:46:38:49:c2:e5:9b:71:fa:76:a1:12:
cc:c8:66:49:3c:6f:2e:72:dd:e2:a8:eb:17:54:a6:2f:3b:a2:
c5:b7:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:08 2026 by rpki-client