Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json)
Hash identifier: Jj2yAv4Yc5w8clpL5VpZlT6WnUhHFrq033ujPb7oojc=
Subject key identifier: 20:BD:66:32:C6:53:5B:86:81:32:33:B7:60:D2:91:49:C9:EE:E5:09
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 019D37F781FC5290E2EEC22BFF405CFD40B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
Manifest number: 15BA
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: EbkxoK1QXwqI38zvOWRCOw9jxso.roa (hash: pmUSfoLfwZaf8O7+LH3+yh3+ipYKHNuavjj2SJ+pnpk=)
2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: 9nuE9sBaDy+yU9JlQDnbhOKF7/l+tYnegbVcF7ksXvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:81:fc:52:90:e2:ee:c2:2b:ff:40:5c:fd:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=20bd6632c6535b86813233b760d29149c9eee509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:5c:e5:6b:52:db:0c:d1:bb:47:cd:6d:5b:
15:29:38:f3:d0:74:79:5b:90:1d:0d:65:6d:68:c5:
16:fd:33:b1:82:c6:ea:3f:0a:f3:37:bc:8c:8b:72:
21:aa:35:2c:73:c5:bc:d8:bc:e0:8e:60:23:1a:af:
0d:d2:90:ba:11:bd:ab:fe:58:68:d5:97:e0:4c:ff:
20:39:eb:d5:09:20:c2:d8:60:a0:1b:c1:b5:96:4a:
4f:e2:d7:c6:fe:e0:db:0c:8e:08:b6:37:f6:8f:f7:
56:f6:bf:1f:ea:d1:df:cf:6b:cc:8d:50:28:21:dd:
11:8d:b4:07:12:82:e7:74:a4:ab:7d:22:00:17:7f:
f4:ff:37:df:47:eb:0c:fa:57:0b:76:f5:b2:c1:79:
ca:5a:51:62:0b:24:20:17:81:7a:ed:0c:ca:3e:c2:
51:38:2e:fd:b6:27:d1:9a:ad:9c:05:12:43:82:a8:
ee:11:ff:d6:6b:41:c6:72:aa:ec:e7:5a:31:57:fa:
ff:40:af:8e:93:0c:92:9f:d0:78:59:a5:2e:d2:ff:
27:5e:0e:ed:f5:6c:2a:06:ee:98:d5:8f:67:31:a3:
03:43:31:b7:8d:c1:f7:99:9c:c0:45:bf:f0:81:38:
96:c7:4a:cd:94:d6:1e:19:4c:5d:a2:3e:09:11:1c:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:66:32:C6:53:5B:86:81:32:33:B7:60:D2:91:49:C9:EE:E5:09
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:31:ce:26:a8:c1:70:04:3a:b3:7d:d9:f2:73:b9:f8:93:99:
7a:c3:b8:7a:2b:f0:c1:34:93:42:32:ec:84:c1:59:03:15:58:
3a:24:b3:e8:86:28:fb:df:36:8c:3b:bd:ea:5f:79:3b:58:24:
4a:38:79:1c:1e:e5:b0:34:3b:3f:7c:c4:de:c7:7d:94:b2:f6:
48:87:5c:ae:7b:61:aa:5d:fd:82:4e:09:98:a1:a9:bd:c1:5f:
5d:e6:ed:fa:38:5a:ad:3a:87:76:6c:f1:f7:fd:f5:1e:ac:8a:
c4:37:b3:4d:33:c4:ff:29:88:f1:48:e8:15:d7:3d:c2:5c:28:
c5:39:57:f7:93:00:97:70:84:ac:bb:8c:f1:9e:04:4e:6c:f1:
48:35:73:f7:ed:0f:3b:14:50:51:73:a5:7b:39:11:fa:92:0c:
f6:fb:d9:01:b5:ec:3e:f4:a5:ae:33:34:85:8b:7d:a4:7d:c8:
4e:10:6c:c6:71:f4:ab:b2:29:4b:d3:57:21:6a:94:11:cc:33:
d0:f9:2f:77:29:95:20:93:3c:b6:77:83:31:56:b2:ef:3d:ee:
f7:5e:54:44:b9:ea:8b:c4:8f:4d:8d:38:90:1f:e8:d8:64:a6:
57:85:4c:30:5a:84:27:c1:97:ac:1a:52:0c:df:96:cc:e3:1e:
d6:9c:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:59 2026 by rpki-client