Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier: snh2zDoedo03dSHuhQPPKOh95PzRfY9I7UXdmvH8HMk=
Subject key identifier: A4:B8:DB:1A:43:BC:AC:6F:FA:D6:7C:85:E3:27:15:9A:CB:49:42:7A
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 019D382E6FFD1B9BAF0C01553075D8AAF75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number: 0D10
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: WA8pzpz372LOql0Nd4w8TA00/E6ARmFR+ocB0PDWysE=)
2: vtiv1SuCImBiDyE_Yf93wTvMNSc.roa (hash: bNgzXmW67ESZNvtBeddoTaG7/VeqNg+fCmp6on+qafA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6f:fd:1b:9b:af:0c:01:55:30:75:d8:aa:f7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=a4b8db1a43bcac6ffad67c85e327159acb49427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:1f:dd:1b:54:a0:db:2d:f0:81:79:87:90:
17:c5:1d:9b:36:50:3b:a2:8c:a9:4c:1a:c1:6d:41:
a2:04:51:f1:6c:84:03:94:be:41:c8:a0:ca:b0:a9:
22:13:13:6b:00:06:98:8c:06:31:5c:5b:ac:26:1a:
16:76:3e:5a:0a:04:ca:b7:f3:8b:58:f7:a8:1f:dc:
0b:3d:29:47:76:f9:b0:96:db:cd:b9:4a:09:33:0c:
8e:3a:66:52:4d:f7:59:78:ad:51:06:d1:4d:06:29:
69:47:bb:a6:bd:c1:9a:56:2e:ce:1b:60:76:4c:8c:
b2:82:15:9f:a0:e0:02:1a:9a:f2:34:3c:a2:77:62:
5a:c8:12:78:11:6b:9f:90:87:df:97:9c:3f:a6:50:
6a:ab:53:76:51:3e:9f:cf:dd:cb:56:cf:fe:e3:ba:
5a:d1:a0:eb:25:d4:62:3c:3f:ec:8c:ac:e4:cb:31:
29:1d:f6:6d:42:53:76:47:91:57:49:7b:55:89:63:
10:fc:44:4e:b9:95:50:c0:f9:74:06:e1:9e:49:64:
ba:72:2a:bd:46:a8:c1:3c:4a:b9:4a:6b:40:a4:d6:
f5:57:8d:7f:09:ec:5c:b0:4b:f0:d5:49:3a:8a:52:
5f:98:df:20:51:06:af:dc:0a:c3:cf:25:15:8e:f6:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:DB:1A:43:BC:AC:6F:FA:D6:7C:85:E3:27:15:9A:CB:49:42:7A
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:16:0a:aa:46:98:5f:7e:d2:7b:73:49:1a:d8:ba:1a:65:1c:
b9:78:ec:35:c7:82:d4:04:ca:1f:3d:8b:fc:18:b5:20:de:c5:
2d:40:da:32:34:7b:ac:df:10:06:14:b4:e8:e1:a6:4e:0a:fc:
e7:13:a4:5f:44:f8:9f:23:92:4c:c4:3a:79:85:5b:06:91:b6:
f8:c9:79:0a:3b:2d:c4:e8:1e:d3:b6:bf:d3:d0:cb:1a:db:72:
99:56:a8:fa:b0:ba:d6:a3:f7:3e:b1:39:45:55:c6:49:b1:5d:
b9:67:40:c2:30:54:7d:28:93:4f:4a:3c:8c:50:1d:56:1f:a6:
f6:50:91:e7:bf:2d:e5:d3:72:36:90:04:2a:95:0d:e1:cf:65:
3a:ea:06:cb:28:47:7e:bd:b4:85:ba:09:bf:c0:93:b0:cd:74:
41:19:90:f3:39:04:4b:18:8c:c9:9b:03:69:95:14:cf:20:6a:
87:b8:13:38:94:57:e0:d4:05:9f:c8:99:c9:8c:b4:b8:4a:2c:
f0:a4:c4:10:57:53:a7:69:68:c6:e3:ac:58:f6:eb:ca:3a:35:
35:8d:35:1d:6a:4c:43:16:95:ff:cb:84:e9:dd:20:49:c9:18:
45:f6:fa:7f:1b:ad:f9:13:a5:f0:9e:f2:a4:f7:6e:33:2d:bb:
8f:55:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:08 2026 by rpki-client