Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: D48o5dFcmgdBsv0GEPUtGYlQ+MI4Pnqe+mYZmmpX0yM=
Subject key identifier: 25:42:72:66:DA:50:65:49:80:CE:F8:13:C7:95:26:C6:39:78:84:02
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 01A17BF258EC39743DBD6BE85FB72302131F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0E13
Signing time: Tue 27 Oct 2026 06:00:42 +0000
Manifest this update: Tue 27 Oct 2026 06:00:42 +0000
Manifest next update: Wed 28 Oct 2026 06:00:42 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: 5XeyxlD4xWh2JJyh+0Xn2earT3UmH5I6Jv4c0vIFI6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:58:ec:39:74:3d:bd:6b:e8:5f:b7:23:02:13:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Oct 27 06:00:42 2026 GMT
Not After : Oct 28 06:00:42 2026 GMT
Subject: CN=25427266da50654980cef813c79526c639788402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:a9:cc:f9:a8:73:3b:20:48:0a:13:dc:90:
05:96:c9:e6:96:cb:b9:c6:cd:b6:cd:1e:8b:2a:d6:
82:a9:e3:bb:b8:34:a3:38:44:d6:60:9e:5b:45:a8:
a0:28:39:cf:cb:12:a4:06:da:0d:41:80:61:14:fd:
7f:91:6d:28:29:b6:f2:f2:b1:1b:5d:5b:2b:36:6f:
ef:d5:44:5b:0f:ee:ac:b0:24:0b:e3:a6:1d:c0:5d:
94:0d:80:26:41:41:bf:64:20:a3:91:9c:da:65:91:
79:10:f2:13:34:3b:aa:ce:7b:97:fe:cd:f8:ff:09:
5e:c9:12:4a:b6:19:cc:94:ab:19:53:cc:87:07:bd:
5b:c3:84:b4:8b:40:fb:c5:11:16:d4:22:ea:ed:6f:
33:a3:de:4b:50:e1:4a:33:ee:09:a9:b4:1e:1d:2e:
d4:f7:30:67:f0:e2:2c:93:54:ec:a5:9b:8d:a2:6c:
1f:cb:cc:80:e5:21:9a:7c:93:eb:fb:5c:7b:d7:23:
61:61:70:14:4f:bf:b4:92:24:1d:d5:63:74:ae:34:
4f:37:2d:ca:80:2d:28:af:bf:2c:36:10:8e:23:0b:
b9:c6:06:c5:1b:41:17:f2:e6:f1:63:89:40:d9:40:
82:d0:db:d7:a1:75:75:e4:a1:4b:f0:d1:4a:f2:38:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:72:66:DA:50:65:49:80:CE:F8:13:C7:95:26:C6:39:78:84:02
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1b:19:bf:54:1e:9d:73:bf:8e:99:11:3b:a5:35:a8:56:ed:
88:a5:25:e5:95:52:35:f8:13:4a:75:cb:e9:f5:e7:97:b4:ce:
2f:f1:c3:1e:34:ee:4d:79:bb:65:f0:27:66:c8:24:72:2c:92:
6b:53:44:72:95:bb:58:7c:50:c1:40:3f:cb:ad:f6:88:50:19:
e9:84:f6:93:ad:dd:a8:fb:0d:ae:83:fa:d6:28:ec:f4:d1:22:
3e:6a:2c:a5:fd:da:0d:b8:a4:6a:69:a0:70:68:22:31:ff:db:
d5:23:63:27:31:02:cf:50:50:46:e1:86:82:4b:ee:4c:c8:44:
47:55:12:76:56:3f:66:8c:8f:0b:e3:ad:59:ac:7d:e9:b0:53:
3a:8f:03:f9:b0:cb:83:9d:ab:b6:a1:07:38:f0:f0:5f:fd:45:
6f:0c:f3:0e:bf:f6:11:59:9c:49:b6:fb:d2:ed:7a:c1:13:2e:
6e:c7:47:0b:54:52:15:74:57:ba:56:18:1a:bc:4c:96:0a:78:
54:51:00:b4:0e:2d:5a:bb:c3:eb:03:6a:1c:4d:5c:2e:62:ae:
66:91:63:0a:3e:94:30:4e:e5:8b:f1:84:25:be:fc:2c:67:45:
68:e2:b5:50:00:ee:f2:3b:dd:0c:e4:35:c2:42:c0:7f:30:61:
b9:b1:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:28 2026 by rpki-client