Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: 1HSSwO59OAXlTYvJTKuF0vbU61NJSH5a5qYEoIM420s=
Subject key identifier: 64:7C:71:6A:4A:8F:69:A4:63:44:13:AF:C9:57:9E:81:99:CA:6D:77
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019D9CD1CE36EB7CB1E02DA8EC611D663D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 042E
Signing time: Fri 17 Apr 2026 19:01:28 +0000
Manifest this update: Fri 17 Apr 2026 19:01:28 +0000
Manifest next update: Sat 18 Apr 2026 19:01:28 +0000
Files and hashes: 1: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: eaGd82Gfv19JPcUPrd2Qa72oYKb6+PRt4pAvvxL+OnY=)
2: fW7i-ydwSOerw2n_L4PNyclOskE.roa (hash: MNasKrVDbU2F3SX0XRq0N4dRBWi9zLGS+rvS7Zr9I7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:ce:36:eb:7c:b1:e0:2d:a8:ec:61:1d:66:3d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Apr 17 19:01:28 2026 GMT
Not After : Apr 18 19:01:28 2026 GMT
Subject: CN=647c716a4a8f69a4634413afc9579e8199ca6d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:c8:22:e5:3a:f8:45:24:10:e6:ec:7c:84:
e6:c3:b0:34:ad:5d:f4:d7:b0:89:2d:d4:da:3e:30:
aa:31:99:77:9e:b3:20:53:43:fe:86:1a:cf:7d:08:
ea:f2:df:35:ef:d2:ad:76:50:7c:58:0b:43:4a:9e:
ef:e2:c0:5e:5d:47:96:b5:4b:55:0f:cc:f4:4e:17:
c6:0d:49:fc:ed:96:e1:36:e2:ff:e3:87:7b:ac:91:
92:d3:5b:1f:65:13:af:02:e1:4b:3c:d9:ed:4e:24:
81:5c:85:c4:cf:8f:56:a2:2b:bd:db:f0:68:1d:0c:
b1:ad:56:43:a7:25:37:bd:29:da:45:e0:55:98:97:
3b:99:07:45:48:fa:07:e8:50:ee:00:ec:7f:04:23:
48:1d:c3:93:c5:89:62:96:e2:47:70:10:cb:6d:ff:
dd:2f:e3:8d:d6:28:c6:88:90:d0:34:f2:32:a9:ad:
8b:ff:32:ec:40:ac:f8:0d:d3:ea:03:d8:a4:2e:cb:
bf:07:ac:5e:4a:bb:c3:5a:ce:8d:35:5f:69:d4:b6:
17:c8:32:3a:18:22:a0:5e:28:c9:c7:69:b5:de:c8:
d1:b4:20:98:5c:38:cb:b9:bf:b8:35:40:9d:5f:f6:
1b:67:42:40:4e:fe:e7:7f:a3:b0:85:bb:16:53:b6:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:71:6A:4A:8F:69:A4:63:44:13:AF:C9:57:9E:81:99:CA:6D:77
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:fe:a7:0c:ee:eb:e2:40:0b:fb:02:e2:cd:e8:4b:c2:a5:
ed:6f:04:bd:96:b9:5d:48:9b:c2:54:55:ee:2b:94:98:e4:eb:
c5:ef:48:6f:8c:33:08:35:eb:f7:bf:93:7c:40:4a:3f:72:0e:
cf:ff:06:a7:9d:ba:ba:5e:c5:4c:f4:ad:1e:be:8c:31:44:ff:
d9:cc:5f:0d:fb:bf:c5:2e:62:f1:d7:49:8e:66:02:07:8d:4f:
57:ae:63:60:cf:2c:98:04:e3:f5:48:b7:54:38:c7:26:d8:7c:
64:83:e5:a3:5d:b7:e9:72:2f:63:eb:eb:42:f3:b7:da:d4:30:
60:f2:b5:b3:9c:77:b5:e5:c8:9d:69:30:fc:2c:51:a5:a4:6c:
2a:96:31:00:99:93:77:9b:a9:d1:9f:a2:75:ed:5b:32:c5:fc:
5e:11:cf:7f:9a:7a:d6:ad:f4:19:a3:92:c8:9e:32:26:8e:b9:
60:d0:b9:3e:20:bd:f2:1f:c2:6f:28:96:5b:4c:db:82:ea:29:
0b:d4:e9:ef:1c:e3:bc:b6:22:2a:76:ac:51:87:83:c8:fa:cb:
21:e9:3d:99:35:53:3a:f0:aa:d2:46:f7:4d:03:03:9b:5a:ec:
68:12:b7:dd:53:49:5a:2a:a7:d7:2f:95:13:61:f7:0c:b3:5f:
50:ac:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:24 2026 by rpki-client