Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
File: VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft (raw, json)
Hash identifier: cwDStsV7HSh5sSlwp6V1xTOUO1lZAAsGb81MtsTvwoI=
Subject key identifier: D8:6B:46:BC:26:6F:1F:A9:88:4F:15:8B:72:57:19:B7:B3:22:BF:3F
Authority key identifier: 54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
Certificate issuer: /CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Certificate serial: 019D9A7529624B567994817AA389025D6151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
Manifest number: 98
Signing time: Fri 17 Apr 2026 08:01:02 +0000
Manifest this update: Fri 17 Apr 2026 08:01:02 +0000
Manifest next update: Sat 18 Apr 2026 08:01:02 +0000
Files and hashes: 1: 6x7BJ0F-meGk9fhXJNWGJnuegOw.roa (hash: ejX+MPtDK3gTtFG1432bC6M7t7QPNbrVRz6iGDt2Hfo=)
2: VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl (hash: CrL1sOwpjJab/A6FGuBY+k+r02a1sYz4b2pTHSC1oZQ=)
3: oTR56cyeKnrqB4eLr9IFRqGiB88.roa (hash: snlvASDIyvudTtl4HEkxIFNnIhgqIkS7EP587pwAfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:29:62:4b:56:79:94:81:7a:a3:89:02:5d:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Validity
Not Before: Apr 17 08:01:02 2026 GMT
Not After : Apr 18 08:01:02 2026 GMT
Subject: CN=d86b46bc266f1fa9884f158b725719b7b322bf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:88:33:74:7f:f3:6c:24:8b:b9:f9:b7:f3:
dd:1d:da:94:bc:77:a4:f3:89:f9:5e:5d:8a:6e:11:
b9:1c:ab:39:ac:4a:77:6c:bd:a1:48:9e:f0:8f:bc:
95:31:85:f3:ba:30:74:f0:da:3e:76:03:67:9d:7b:
ca:af:64:e6:d7:1d:1e:e8:cb:9b:82:eb:2b:b6:c5:
20:b8:57:a1:bd:60:47:17:bc:e4:b0:ec:d8:6c:a3:
7b:1c:d1:9f:79:9c:1e:1b:be:81:b8:7b:7f:6a:41:
f8:2a:f8:3f:52:25:ad:83:a4:3e:6a:0f:7c:c1:6f:
4d:67:57:70:4d:a8:d6:62:eb:8f:c5:e1:39:b5:30:
ed:45:c9:d6:0d:a3:e3:21:4f:22:b0:5d:bc:02:91:
6f:35:e8:96:59:84:ff:ce:3a:65:fe:4e:61:c1:f5:
2a:33:eb:e1:f3:ae:0e:3e:ab:3e:13:ed:91:4e:4c:
c5:4d:2d:bd:73:49:73:0a:ff:f8:cc:ba:51:a6:48:
19:fa:b0:ea:c9:95:26:04:60:1a:f6:d8:38:27:00:
28:69:63:80:72:f6:cb:e8:ea:0d:1a:bd:fb:85:a2:
23:23:bb:e0:8f:24:87:c4:de:5f:52:4e:36:a3:2f:
3a:10:c7:08:b6:b2:4a:ce:54:0a:b8:e8:2d:4e:5e:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:46:BC:26:6F:1F:A9:88:4F:15:8B:72:57:19:B7:B3:22:BF:3F
X509v3 Authority Key Identifier:
keyid:54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0f:d2:76:69:6c:50:3f:c6:92:48:c5:48:f3:d5:62:e9:8a:
7d:89:dc:ef:f0:0a:16:50:81:88:3a:47:8d:bd:24:b2:70:b0:
50:35:ca:76:b3:96:31:d9:63:92:08:54:ed:5a:3b:9e:b5:89:
f1:0b:6b:d6:6a:c8:88:51:f1:45:98:a7:7e:85:60:60:8b:ba:
f1:67:62:31:5f:86:d2:18:c7:58:03:6b:e9:5c:bb:7d:15:9b:
fa:25:34:da:c9:b9:2b:91:34:98:7c:ff:00:07:79:08:c4:06:
27:8f:ff:1f:1e:3d:03:00:d0:7c:63:ca:28:76:8c:55:7f:bc:
af:f1:3f:d4:01:be:a7:9f:3e:a3:1e:e8:9e:f7:65:b8:28:19:
7a:71:77:ba:44:01:1c:48:97:59:7f:40:c7:47:25:b3:6a:77:
09:93:50:e0:f2:a7:f6:ec:eb:06:2c:89:4a:1c:74:bc:88:92:
d4:7f:81:c5:9b:7a:29:e4:ce:3d:82:0d:e4:cb:33:5f:c8:fe:
47:7c:46:c6:05:23:1f:f0:b5:39:84:15:29:1b:bd:bf:a4:5e:
a8:e2:0b:92:1f:7f:7f:9b:b9:66:c6:e3:3f:cf:1b:77:c8:1e:
50:e9:97:d1:f7:b2:cc:df:42:94:73:35:bd:3f:67:58:c9:a4:
63:35:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:45 2026 by rpki-client