Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: oToDWeRabxGM+IejANqBRUlHODZdNLr0YjrWSTL8ST0=
Subject key identifier: 71:E6:41:80:99:1C:55:76:3B:E0:2F:3F:86:98:6B:CE:88:57:B5:C2
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 019DCD87726F1670C0B8DCF9959DB833311F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 150B
Signing time: Mon 27 Apr 2026 06:01:38 +0000
Manifest this update: Mon 27 Apr 2026 06:01:38 +0000
Manifest next update: Tue 28 Apr 2026 06:01:38 +0000
Files and hashes: 1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: aRjpzvbNgTwy98+zDeyZ6FhlpKiE3ATzfAnOK2TMSd8=)
3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:72:6f:16:70:c0:b8:dc:f9:95:9d:b8:33:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Apr 27 06:01:38 2026 GMT
Not After : Apr 28 06:01:38 2026 GMT
Subject: CN=71e64180991c55763be02f3f86986bce8857b5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:b9:08:26:85:1e:53:ff:c4:61:a1:1b:21:
bf:62:b9:a2:9a:63:30:28:05:61:8f:67:a4:ce:8e:
b4:ed:a5:89:80:39:b5:3c:19:03:59:99:6d:0d:33:
f4:b2:7d:d2:38:20:bc:bc:b2:28:60:73:2d:3b:17:
46:6e:b5:73:ef:66:bb:cd:20:b7:61:7f:ad:83:e3:
5e:4e:46:ff:ea:af:17:d2:50:49:ea:d4:ca:b0:5a:
1e:12:c5:4d:61:dc:35:1a:f8:1d:a2:10:c7:4c:10:
fb:78:7a:f5:1c:99:ae:a1:f3:08:21:6a:52:6b:99:
4c:9a:8c:f8:fa:82:e8:57:27:d9:40:e3:b5:b6:00:
5d:ba:65:c4:83:6c:df:31:89:c3:e9:52:0b:71:52:
60:7b:b7:e2:71:01:c9:68:42:79:78:8f:b2:b2:ac:
08:62:a0:7f:20:21:b4:71:72:1c:3b:70:d9:80:ce:
e6:e0:49:da:a1:df:f2:4d:f8:3a:47:a5:0d:f2:1a:
a2:ba:bd:23:05:1c:d1:c0:cb:ef:a3:02:34:d1:b9:
7e:b9:1a:70:c1:d2:e4:68:34:cd:20:cc:61:70:55:
fb:77:57:5e:3d:af:f3:aa:bb:7d:9d:55:8c:a1:9b:
68:a5:5a:01:87:f5:63:43:02:fd:ff:9c:84:3b:cd:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:41:80:99:1C:55:76:3B:E0:2F:3F:86:98:6B:CE:88:57:B5:C2
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:f4:60:58:40:c5:27:42:f2:87:30:43:c0:fc:62:98:1f:
e6:a5:db:1f:04:2b:71:41:c0:df:0f:27:3e:63:28:b5:37:ac:
e9:21:80:fe:0f:79:99:d6:5e:78:18:0b:2b:aa:a1:0c:9e:05:
f0:03:6e:b6:1e:39:79:83:21:f3:e1:c8:7a:12:92:f2:09:79:
e3:e7:3e:23:20:d8:2b:4e:3a:7e:d6:59:1d:9b:b1:28:be:11:
38:f6:95:42:e5:8a:d6:67:bb:4a:81:d1:c1:f6:86:ae:17:64:
65:e4:1b:97:ec:93:58:bd:f8:19:a9:f8:89:58:52:9a:b9:66:
b7:cd:58:c3:03:62:79:44:c2:16:4c:e7:70:a9:2a:92:fe:cf:
f9:7d:15:55:fc:97:a1:fb:5b:02:26:0a:e6:c6:67:22:b0:62:
9e:4b:c4:29:f7:f6:e7:bc:01:00:0f:94:3e:71:6b:43:93:9e:
6b:1c:62:08:33:93:09:ef:ce:81:38:d9:c3:bf:24:ba:5b:10:
a6:8a:77:e9:e8:0d:ca:4a:3a:41:bd:57:27:e9:76:9e:a4:97:
9a:ce:85:ca:0a:f4:ee:56:d3:9f:f9:1b:ec:38:8b:3e:51:ce:
23:78:38:a7:64:e7:6f:f5:5c:4f:7e:82:cb:07:cf:fc:54:ac:
96:3a:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:13:40 2026 by rpki-client