Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: ZdlRnFo9oHMLzYLjWI7ZJSwOba/oZ2HWiX/Kac6H7p8=
Subject key identifier: E1:97:AA:BD:6C:8D:21:0B:EA:AD:1D:80:B8:93:81:7A:09:BA:1A:34
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 01A0C8C6CF6FF82A9F04B716CB5DE1A23315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 05D3
Signing time: Tue 22 Sep 2026 11:01:07 +0000
Manifest this update: Tue 22 Sep 2026 11:01:07 +0000
Manifest next update: Wed 23 Sep 2026 11:01:07 +0000
Files and hashes: 1: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: AJA77RS7JbYyk0oUVpMDqiVisy0aJ2b8IEMacCQEWrQ=)
2: uqb13WcH-sHQrFpv4PbFThoSkmk.roa (hash: z4r6mb25fzWJDdqfWlcYfompTywQy1djheMADUOlVYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:cf:6f:f8:2a:9f:04:b7:16:cb:5d:e1:a2:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Sep 22 11:01:07 2026 GMT
Not After : Sep 23 11:01:07 2026 GMT
Subject: CN=e197aabd6c8d210beaad1d80b893817a09ba1a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:34:28:e9:45:a7:7a:13:c4:71:ed:8d:df:
b0:ca:55:24:f3:06:e5:a9:28:73:19:b4:13:19:4d:
ea:45:09:5e:7e:2a:1c:03:5a:68:2c:62:e8:61:dd:
f4:74:3d:a6:b5:3d:c0:f2:32:22:9c:d3:d0:22:ec:
a4:bc:eb:85:71:ef:25:e5:35:7f:6a:f0:55:38:9c:
6a:08:6d:91:9f:55:32:3d:d5:19:ce:59:a4:c0:8d:
03:4b:ae:9b:ae:71:69:c9:e4:c7:81:96:b0:d3:11:
35:03:d5:a3:77:39:85:b5:ab:cd:f4:53:4f:a0:b5:
34:9a:19:a6:23:59:10:15:6d:e4:b1:fb:48:d3:e4:
8f:d5:77:9d:01:94:29:b1:59:aa:11:34:4e:24:66:
cc:bf:30:84:6e:03:9e:8a:47:54:18:74:41:d5:de:
bb:0b:5f:49:a4:20:43:d3:26:12:cf:36:46:1f:73:
a1:3f:06:7c:90:1b:1b:e5:d3:91:34:ed:fe:65:5d:
91:e0:52:12:06:fd:20:55:11:e4:77:b4:dc:b2:61:
27:60:87:fd:bf:40:5c:5a:28:bc:ad:7b:de:52:b3:
4d:27:be:11:e1:be:49:7b:83:36:37:71:f7:83:eb:
52:6a:e4:fb:2f:a4:a6:43:c3:7b:ae:26:c5:0e:1a:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:AA:BD:6C:8D:21:0B:EA:AD:1D:80:B8:93:81:7A:09:BA:1A:34
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:53:02:0e:91:ec:5e:11:6e:51:30:fb:7b:a2:4c:02:b5:
a7:e9:60:d3:4c:6f:cd:f5:d6:25:b0:d3:c9:36:e7:34:e3:4f:
83:3e:de:51:2b:e0:f6:86:67:36:f6:33:55:36:e7:e8:3a:1b:
9d:db:fa:10:45:09:9d:b6:9e:b9:c2:68:30:89:1b:fd:a5:02:
92:d3:bc:10:a5:f3:4e:3f:ae:7f:f9:bf:4b:2d:1b:e5:30:8f:
02:36:f0:b4:fe:d9:1e:bf:be:12:70:84:34:2b:52:39:c8:96:
1f:11:af:12:f2:92:6e:4f:74:04:b0:32:39:94:b7:7e:c5:89:
24:81:28:5a:77:a5:76:f6:f2:ad:6f:4e:92:3d:bd:0b:3c:b6:
2b:07:58:6d:4b:62:82:39:2e:5c:9a:46:95:57:f5:aa:f3:6c:
d6:72:7b:48:a0:34:48:91:df:8b:76:56:f4:26:7e:e5:1e:1f:
55:84:53:c1:d4:20:d9:bf:07:78:b7:f7:46:10:c4:95:9a:96:
9d:26:ee:a5:33:39:e9:12:12:4c:bf:f2:96:62:0c:68:c0:de:
6a:54:cf:d3:15:a1:1a:a4:53:6c:da:40:9d:53:ab:60:ee:3f:
36:7a:56:6e:37:5c:04:db:ce:d8:39:68:44:92:a7:8e:64:f9:
be:d9:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:30 2026 by rpki-client