Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: O2OEUqLB3lk/6738FYuwv81D+mN0nEdKqbOpU+6uQvY=
Subject key identifier: 0F:D5:37:2E:94:BA:03:0C:D9:EB:1C:A7:70:BD:E1:E5:7C:28:6F:5C
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 019D36E4F85EFCDCFE36185F1B0ACD5C44A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 00:01:08 +0000
Manifest this update: Sun 29 Mar 2026 00:01:08 +0000
Manifest next update: Mon 30 Mar 2026 00:01:08 +0000
Files and hashes: 1: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: s5wis28FguNSOjMIEhSVo3PaebnwV6aWjMFgs+EO2KE=)
2: Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa (hash: nLLJAITVfYEFMYRyN3x5RMOELDek19fGEta6GIsZ1vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:f8:5e:fc:dc:fe:36:18:5f:1b:0a:cd:5c:44:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Mar 29 00:01:08 2026 GMT
Not After : Mar 30 00:01:08 2026 GMT
Subject: CN=0fd5372e94ba030cd9eb1ca770bde1e57c286f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:e1:c2:0e:cc:db:77:a0:6b:3c:d9:2b:cf:
8c:97:35:7d:9a:eb:c3:72:89:91:53:e5:42:e2:72:
98:3b:fd:5b:2b:2e:88:88:ce:84:14:f8:b1:e1:93:
e2:d3:b2:92:89:f1:43:3a:f1:f9:4e:13:d2:02:b7:
83:d3:a9:63:ba:91:f0:e6:b5:e8:38:4f:d9:22:85:
d1:7f:26:b5:dc:ed:ad:94:25:27:85:9f:16:dd:a8:
49:ed:7b:65:6a:1c:59:9a:77:3b:fa:50:89:55:d3:
f3:76:5f:58:6a:4f:e3:02:3e:c1:3c:07:60:5e:00:
5f:f1:8f:bf:60:88:f0:3f:66:10:72:30:43:fb:34:
9d:06:e2:b9:33:62:3e:f3:29:37:35:23:14:bd:bf:
92:88:4d:7a:17:e0:33:fc:40:1d:28:82:3c:e9:79:
f0:d7:33:3d:49:a7:d9:26:23:61:6c:8c:20:9d:3c:
d5:df:2d:e3:ba:7b:0e:e2:96:14:22:36:9a:09:98:
02:26:9f:56:a3:29:43:4c:3e:a6:85:90:fa:78:2c:
96:65:2d:ea:7a:a4:7f:b9:76:ba:59:f6:e4:1b:50:
53:45:99:9c:dc:36:3b:32:87:06:ba:6e:9b:51:cd:
e5:4a:88:da:c5:a2:ec:fa:15:b5:5b:71:0f:78:1f:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:37:2E:94:BA:03:0C:D9:EB:1C:A7:70:BD:E1:E5:7C:28:6F:5C
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f7:2a:18:79:79:81:77:b8:0f:ec:78:d7:6d:b0:dd:dd:9d:
ae:50:48:16:3a:99:c3:e4:54:f1:4c:ff:6a:e7:9d:82:8e:0b:
2b:4a:c9:3d:79:ac:dc:58:3e:cd:77:c0:8c:41:93:34:20:ac:
01:3e:5b:18:81:59:37:ce:bf:2e:07:a4:a0:b9:a3:88:99:8d:
9c:e6:5a:c7:4a:7c:c2:cd:f1:d6:49:d3:0e:73:e0:2e:93:fe:
57:af:c1:c7:56:55:11:46:9a:23:92:31:98:2f:79:10:d0:55:
99:ce:2b:95:43:00:ed:e5:41:77:d0:79:62:ee:30:07:48:8f:
ce:64:09:27:8e:43:27:c2:ed:72:fb:4d:f3:e2:a1:8e:09:de:
3a:60:94:e4:71:66:52:c8:66:53:5a:60:c2:7b:47:5a:81:dc:
61:42:3e:4d:c8:b5:b2:44:75:52:9b:6d:4a:cc:73:6f:ce:cb:
60:7e:0a:0f:c5:90:fe:d6:41:74:7d:31:f6:68:d4:5d:7f:05:
56:fc:06:c7:d8:ff:24:d0:32:6f:cc:9d:aa:f7:57:79:52:fb:
28:2d:49:94:00:2b:a8:6c:e0:89:85:c4:08:24:5c:77:41:4c:
6e:26:22:47:09:cc:7f:63:60:fe:de:7b:66:94:f4:a3:f9:90:
eb:97:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:20 2026 by rpki-client