Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: QlWs6laWY1Z0FbfPij8lM9Eqv3evKVZgLVuSVvUgeR4=
Subject key identifier: BC:F2:14:62:49:BC:60:E5:C4:44:8B:6B:4A:33:A7:F7:37:58:CD:24
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 01A18788FD5816C241794FF98D841EFD55C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 16F9
Signing time: Thu 29 Oct 2026 12:01:04 +0000
Manifest this update: Thu 29 Oct 2026 12:01:04 +0000
Manifest next update: Fri 30 Oct 2026 12:01:04 +0000
Files and hashes: 1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: YnIwQEijFzCHtoWWQelIaPGggzpRZVpCZvJCfzNW96w=)
3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:fd:58:16:c2:41:79:4f:f9:8d:84:1e:fd:55:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Oct 29 12:01:04 2026 GMT
Not After : Oct 30 12:01:04 2026 GMT
Subject: CN=bcf2146249bc60e5c4448b6b4a33a7f73758cd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:e4:43:22:eb:d1:ce:26:86:12:cc:9e:72:
45:e8:c9:77:84:2f:89:a7:25:88:5a:94:d3:46:42:
37:6b:01:38:4a:e7:c6:b0:35:5f:69:b2:2e:1c:cf:
e8:1a:0d:05:cb:19:86:38:99:a2:a9:09:03:d3:b3:
a8:00:9f:e5:6c:a5:47:35:b8:11:9a:76:80:cb:ab:
af:9f:e7:56:75:b4:4a:65:cb:e0:f0:80:80:29:5b:
fd:8f:79:43:48:92:9d:2a:47:c4:93:7d:5c:bf:27:
7a:22:c7:fc:ac:16:ba:4b:8c:7a:82:20:70:9a:8d:
c4:61:ac:ce:55:a8:51:ee:1b:a0:18:be:7c:ed:7a:
7e:4e:6c:18:f4:2b:be:1d:b5:b6:0c:f3:50:6e:b0:
cb:b4:3e:79:c9:45:0b:b8:53:f5:67:bc:73:fb:1c:
2c:58:af:22:fa:dc:5e:c1:55:d3:cd:44:17:87:5c:
31:d1:87:af:eb:4e:3c:3c:5d:d0:c3:e2:6f:21:2d:
a4:28:ae:c0:56:d2:15:86:11:e5:42:b1:97:8b:a1:
69:64:0d:c5:76:71:76:8c:bc:f9:c5:3a:82:eb:1b:
56:a2:d5:d7:17:a3:37:59:7a:c9:4a:be:71:4d:c7:
11:2a:d1:62:89:04:c2:22:b2:66:af:34:c3:f5:f9:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:14:62:49:BC:60:E5:C4:44:8B:6B:4A:33:A7:F7:37:58:CD:24
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:a9:71:2f:8e:e3:5a:8e:70:e4:27:9c:38:05:10:5a:59:
de:16:82:48:a3:e7:da:f7:a6:3f:5c:c1:64:1c:c1:2f:87:03:
cd:e4:d7:fa:d8:6a:f9:46:1f:cd:f3:de:08:c8:22:6c:b4:2c:
e0:cf:fc:b7:b0:1e:fe:bf:36:84:d9:41:3f:05:6e:45:2d:9e:
eb:61:f9:5a:be:da:2d:d1:90:48:09:1c:67:04:b2:a4:35:57:
1f:53:32:96:a2:2b:12:3a:cc:3f:b3:91:9a:a1:f8:41:78:9a:
2c:1f:65:62:c1:a4:00:e9:ee:92:88:c8:1b:99:4a:50:87:f6:
86:7d:9e:68:14:91:d0:cf:ac:d8:a1:ed:d6:ef:01:f8:0a:7a:
35:d4:b4:9c:da:78:47:4c:d1:e1:03:45:5e:0f:99:05:51:ec:
5f:b6:4c:71:e3:78:d0:fa:2f:8d:be:a0:46:4a:d0:2e:1f:8f:
d9:4c:b6:b5:48:b2:3c:b2:fa:a7:22:bb:10:be:66:e8:cf:a7:
10:2a:5a:ef:e3:99:0a:1f:41:18:51:51:08:49:75:54:79:33:
8b:94:b2:60:32:03:12:6e:35:8f:01:59:fb:c3:32:e5:d6:72:
71:3f:a1:80:1a:18:8d:39:60:8d:03:d4:2f:40:a9:b3:f2:2c:
11:7e:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:36:58 2026 by rpki-client