Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: p5FFd9ZemHPUHzEsyduNpSnqwTTy7n1hrnevu333hCg=
Subject key identifier: 34:D0:47:EE:5B:D2:CB:B3:FB:44:E6:4B:D4:CE:B2:22:8A:1E:00:BF
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 019CABD90DEB14500F582AD5CAA1E5A36BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 0CC5
Signing time: Mon 02 Mar 2026 00:00:54 +0000
Manifest this update: Mon 02 Mar 2026 00:00:54 +0000
Manifest next update: Tue 03 Mar 2026 00:00:54 +0000
Files and hashes: 1: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: S0jQQvxTb2FBAPso6IbJY4qPc1pSZoExlTxtsPzKRsw=)
2: cc8BNFaMVlbaSTGI8x6HmWHwtwY.roa (hash: WhsxgLT9TP0uFAV72UNKZ0OIf3Wuow/e/T5+vO3eQUw=)
3: hj9vrZtu_ptlT9holTDhc3lmO9I.roa (hash: HyRkrnYbKZroL4ZELZRBl7Cqf0iZoQ21yLkLhmG2ZnI=)
4: zATzhpg9xiU_0_8udzecrn-BFdM.roa (hash: LXOXPntIpCX+wDiB9sHExrI1VhXJrNUwhw9OhSaFlRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0d:eb:14:50:0f:58:2a:d5:ca:a1:e5:a3:6b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Mar 2 00:00:54 2026 GMT
Not After : Mar 3 00:00:54 2026 GMT
Subject: CN=34d047ee5bd2cbb3fb44e64bd4ceb2228a1e00bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:e3:2e:78:dd:02:17:4b:49:f5:89:54:33:
d1:4e:2c:69:95:9c:a2:93:8f:69:bb:96:20:4e:63:
25:62:e6:67:b3:2f:f2:db:81:83:da:28:a3:88:5b:
9e:0c:c4:26:b0:df:ec:ee:e7:4a:cb:ab:17:a1:10:
4a:32:83:9d:a9:89:40:b7:9f:81:71:3b:a0:ed:e2:
a5:e1:38:f7:51:a9:bf:03:59:11:98:42:5a:d9:83:
67:a1:af:3b:f0:c2:10:6d:54:a1:1b:87:6e:0a:5f:
0a:57:71:d6:e1:55:b7:85:ad:89:5b:35:c9:b6:c7:
b2:b4:7f:38:25:0b:ac:c4:16:43:e3:f9:bf:89:84:
cb:01:4d:d7:0d:fc:cd:c7:60:db:5c:f1:48:13:ad:
00:19:1f:38:de:5b:9a:ee:a8:7e:c3:be:9b:6e:0c:
cc:d9:bb:1b:ff:a7:5f:78:38:80:27:f3:d9:64:92:
89:a3:b2:8c:17:54:7a:25:f2:80:5c:8f:36:88:e4:
96:80:97:fc:d0:be:d2:95:02:64:0e:19:a3:6e:ce:
cd:89:ac:70:a8:2a:8d:db:2b:f7:74:36:29:54:22:
27:23:e6:9f:30:c8:56:9d:95:21:ac:84:a6:26:64:
a6:60:30:51:55:72:61:04:3d:b5:24:f6:d7:bc:75:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D0:47:EE:5B:D2:CB:B3:FB:44:E6:4B:D4:CE:B2:22:8A:1E:00:BF
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d3:d4:b4:fd:8a:46:ff:ad:7a:7d:d6:b3:87:cf:9c:de:ea:
5e:f9:0b:ba:4d:04:e0:24:83:4d:a9:ca:1a:29:70:05:ef:e1:
71:d7:77:71:d4:29:40:5b:5d:49:f8:d6:1f:04:1a:36:e1:82:
58:f1:9a:9a:3f:3c:c9:4c:54:90:a8:d3:25:18:1c:3a:40:da:
99:e5:8f:48:b4:5f:60:ac:4d:c9:50:c6:87:74:00:98:41:0b:
5f:02:9e:48:a3:51:71:39:0b:e3:2a:66:7e:a3:de:59:e7:8c:
13:bb:52:29:ad:63:53:04:9c:22:cb:b9:40:dd:36:45:dd:b6:
35:91:3b:03:3f:8f:a5:d6:f0:65:c0:ef:56:fa:1c:47:70:3a:
32:eb:0a:32:84:ab:26:a1:ab:94:6f:69:39:18:ae:4b:1a:15:
5e:00:98:80:4b:ca:12:71:6a:74:4e:0a:08:29:e1:8c:48:da:
cc:76:2c:ed:00:16:c2:73:c8:21:5a:0a:a4:cf:ea:ca:06:ed:
be:51:3c:c0:4c:c9:33:39:b0:0c:da:f4:23:a0:c9:d2:db:c7:
70:74:2d:0d:88:ec:88:7b:1b:ef:5b:00:ac:bb:c4:a3:9e:42:
82:74:6a:f3:77:ac:17:da:9a:80:b3:47:9a:68:68:11:00:36:
b3:1f:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:18 2026 by rpki-client