Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: FH6m12EA1ukMub1cdWA9HZ4TY7ezDppNYtOiyH6JHlA=
Subject key identifier: 25:FB:56:48:A4:70:BD:76:D0:11:07:A9:2B:4D:DF:21:86:9C:9F:72
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019FAAF577C9B03B5A214D6F695BB5460BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 053F
Signing time: Tue 28 Jul 2026 23:00:41 +0000
Manifest this update: Tue 28 Jul 2026 23:00:41 +0000
Manifest next update: Wed 29 Jul 2026 23:00:41 +0000
Files and hashes: 1: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: 6CupO33E7m9Zq9F2rakyWotUsvOBTzIligND6Ms4IT0=)
2: uqb13WcH-sHQrFpv4PbFThoSkmk.roa (hash: z4r6mb25fzWJDdqfWlcYfompTywQy1djheMADUOlVYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:77:c9:b0:3b:5a:21:4d:6f:69:5b:b5:46:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Jul 28 23:00:41 2026 GMT
Not After : Jul 29 23:00:41 2026 GMT
Subject: CN=25fb5648a470bd76d01107a92b4ddf21869c9f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:36:8f:7d:f4:16:49:aa:ec:3f:27:75:9a:
80:fc:70:97:4e:cd:94:fd:1e:37:ca:ed:2c:43:b2:
b2:d3:22:3c:35:68:0d:3b:d4:f8:b0:0d:e0:10:e5:
b7:51:10:b8:b3:3e:a6:dd:17:c0:86:0e:7b:ce:ce:
89:83:0b:d1:e7:65:28:d7:13:9c:bb:18:83:f3:26:
68:87:ba:71:9a:40:92:12:bf:81:1b:9a:73:6b:f7:
15:45:63:30:a3:ef:60:9b:f7:32:55:a4:4d:f4:1a:
1a:cd:8f:ac:a7:bc:6e:5a:38:69:56:6b:b9:89:4a:
40:2f:d9:8d:a3:e3:fe:73:0f:b9:40:0e:02:72:37:
b4:b3:db:04:15:46:fa:c5:9a:17:c7:fa:b0:d9:31:
ca:04:db:3b:07:bf:37:bf:dc:76:b5:0b:ab:09:6c:
cb:d9:5c:f2:cc:d3:19:19:f0:36:7b:6f:d1:3b:41:
8d:b3:81:e3:6c:3c:12:4a:0a:23:6e:86:31:3c:15:
db:b0:33:af:0e:9a:62:f3:c5:db:77:85:3c:a1:74:
53:9d:8e:d0:bb:c2:43:70:0b:27:b5:fc:e1:76:d1:
2d:36:b0:7c:4f:9d:df:63:58:0d:78:c2:86:71:37:
32:52:6f:54:48:d1:42:c0:54:12:d6:b3:73:82:63:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FB:56:48:A4:70:BD:76:D0:11:07:A9:2B:4D:DF:21:86:9C:9F:72
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:0e:f4:30:c4:db:6c:6a:44:0e:f4:c8:10:0f:cf:ab:1d:
60:68:a0:a8:2d:0a:d0:d3:2a:43:98:2c:0f:b2:cb:75:29:cc:
d7:b8:4b:a4:c0:5a:1e:d2:41:f0:e5:92:f4:f0:0f:c2:ae:13:
fe:9a:41:e6:f1:5c:55:ea:b8:4a:d2:67:92:bd:bf:52:e4:96:
96:cc:c8:d1:88:3f:7e:c1:8f:d8:91:f1:cb:c9:9e:f8:55:7d:
ac:dd:0b:83:52:15:61:76:f2:60:58:98:3e:27:0b:a4:7c:1e:
4c:51:72:28:2c:e6:d3:c5:10:33:2e:6d:b2:c8:84:9e:03:94:
83:8f:dd:bc:e0:f9:19:7c:e2:dd:e4:f1:09:41:b5:6f:5c:a3:
82:8a:5f:c1:36:22:60:95:7f:64:a1:38:32:d2:27:87:64:67:
92:e2:b2:f0:8f:5c:49:07:f4:9a:90:49:dc:18:a1:c8:57:9b:
06:b8:ae:82:fa:4c:c1:ea:9e:76:1d:7c:0f:4f:18:1e:cb:25:
26:ce:6b:83:36:00:fe:1e:6c:b9:23:cc:51:ac:23:cc:3f:63:
be:3d:4b:cc:f7:f5:ac:17:b0:28:59:49:f8:33:a6:1e:51:99:
10:8a:28:74:a5:cc:94:21:24:f4:e1:f2:85:2f:2f:cc:60:af:
dd:08:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:15 2026 by rpki-client