Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File: VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier: yY7rCYKmEK5D+B2Cgu9T0VByMmYAlNJdnLUe6O6b2LA=
Subject key identifier: 78:ED:B1:F8:E9:84:7E:39:C5:5B:12:44:F9:F7:BE:56:19:8D:DD:2F
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer: /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial: 01A0DA96A82C9D06ECA54A7A8574B6C72E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number: 02A9
Signing time: Fri 25 Sep 2026 22:01:41 +0000
Manifest this update: Fri 25 Sep 2026 22:01:41 +0000
Manifest next update: Sat 26 Sep 2026 22:01:41 +0000
Files and hashes: 1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: FkMW1dipe1+rIZvDfezsMvknbwVTv8rdj/98LVirquw=)
2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:a8:2c:9d:06:ec:a5:4a:7a:85:74:b6:c7:2e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
Validity
Not Before: Sep 25 22:01:41 2026 GMT
Not After : Sep 26 22:01:41 2026 GMT
Subject: CN=78edb1f8e9847e39c55b1244f9f7be56198ddd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:a5:25:e8:cb:38:98:96:0a:3f:97:3f:49:
57:06:45:c4:1e:f9:87:b3:1b:fd:86:c2:51:2e:73:
58:a3:78:83:cd:78:55:e7:cf:39:05:2b:8e:9b:db:
23:ff:51:25:bf:e3:b9:7e:de:eb:b6:28:5b:e0:53:
78:09:91:f1:77:fb:53:5b:cb:c5:4d:8d:4e:d3:aa:
91:30:db:4d:eb:21:d3:1c:4f:ed:0f:0e:24:45:c4:
61:4f:ae:bd:de:34:1b:3f:72:92:ec:ea:93:ab:ff:
29:86:4b:37:21:5a:4e:9d:dc:1b:51:03:fa:e2:02:
77:9a:ec:a9:24:92:a4:2b:3a:1d:5d:02:2a:0d:15:
31:f2:44:d2:35:92:e4:14:e9:32:6a:08:50:c7:d3:
a6:c2:66:62:7b:23:52:c0:97:6f:91:3d:bf:52:4b:
3a:c5:52:52:9f:3d:48:29:38:8c:7c:f5:dc:ba:f9:
cb:cd:66:61:78:b3:a1:20:de:75:8d:53:df:ce:63:
f6:23:16:7b:e5:a9:24:f0:5a:98:a6:97:32:1e:5c:
0a:f2:1a:65:08:29:67:d0:59:8b:ee:56:fa:39:b4:
c7:a6:9b:ea:84:e2:40:19:55:e4:94:e5:89:7d:6a:
63:c5:5a:60:52:ee:e7:64:eb:fa:d5:0e:1e:17:ad:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:B1:F8:E9:84:7E:39:C5:5B:12:44:F9:F7:BE:56:19:8D:DD:2F
X509v3 Authority Key Identifier:
keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:70:55:28:1c:90:30:7e:16:a8:67:b6:2d:db:9d:a3:09:53:
76:49:9c:be:ba:14:67:63:c4:90:61:af:90:e5:18:76:b8:2f:
47:c4:1c:a9:86:b2:a6:91:a3:92:fb:b2:90:ab:a1:d3:c2:3e:
ab:77:54:9c:89:84:a7:a9:4f:88:4e:6d:8d:fe:af:b3:36:24:
80:b4:5e:4b:04:1d:d6:a7:b7:69:39:60:74:bd:de:c4:fe:30:
92:c5:91:dc:98:10:d6:38:a2:93:8c:2b:58:86:43:96:ee:69:
be:1c:5f:c0:9a:67:28:43:3a:d6:c2:4b:ac:a0:a7:7d:fc:79:
bc:43:97:59:8c:24:0e:5b:fc:8a:58:ec:62:91:8a:67:26:a5:
2c:07:ea:85:c1:d5:c6:ff:fc:2e:23:72:58:f9:92:8b:ed:12:
4e:25:37:f0:f3:1e:f5:f6:82:06:a0:b4:34:4e:d1:66:82:00:
6e:9a:5c:5d:b2:88:49:12:2b:b5:5e:01:85:09:f7:b0:20:75:
0f:ea:6c:fe:22:3a:6e:c0:47:ed:39:d4:f1:b3:97:3e:81:27:
80:7f:d2:72:7c:ae:5b:d5:00:db:ca:4f:8f:81:a2:95:81:22:
a7:c2:3f:c9:c7:01:9e:d0:7c:7d:44:69:31:da:8f:2a:7f:db:
0e:0f:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:28:14 2026 by rpki-client