Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier: 8yI8vwa9oVnKQo3fjsWxwZcVxURfH3SjO35Oc47Kisk=
Subject key identifier: 53:E2:B3:43:CA:31:6F:D6:8B:EB:C0:14:6E:BA:69:E1:16:51:9A:F0
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 019CAD592EC8440FAAAD8A8451480FF39547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:00:28 +0000
Manifest this update: Mon 02 Mar 2026 07:00:28 +0000
Manifest next update: Tue 03 Mar 2026 07:00:28 +0000
Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: EkIQqPEOGQj4UlgKTqky//oSsIf+TnyVSH3DR0Zg89w=)
2: yC0tu0ZPT4RqHv0g-GiZ49yCtmI.roa (hash: gOGDU2RXqzQeLH1WmEbrGD4isYVlx+dkWghaOS6OSw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2e:c8:44:0f:aa:ad:8a:84:51:48:0f:f3:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Mar 2 07:00:28 2026 GMT
Not After : Mar 3 07:00:28 2026 GMT
Subject: CN=53e2b343ca316fd68bebc0146eba69e116519af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:dd:be:82:dd:e2:c1:db:46:7e:19:99:7f:
49:78:63:65:71:65:97:a6:90:ef:6c:2e:c1:50:3a:
22:0b:c4:5b:0e:6e:2d:00:96:ed:d6:2a:fd:ef:87:
54:f2:f7:10:4d:81:b3:b6:d8:f0:b9:64:51:d1:28:
a8:a8:8a:83:b3:19:4d:f1:6f:fd:fe:31:08:30:3e:
3d:2f:65:a8:9e:68:21:b7:25:b7:64:96:72:52:e8:
34:af:14:59:0d:e2:05:0a:d0:ee:d5:9f:5b:29:54:
5f:80:1b:6c:6b:da:5b:04:75:1e:65:2f:c2:fc:8c:
89:52:48:22:b5:a5:2d:2a:76:9a:53:85:2b:65:31:
79:14:38:d3:70:89:c3:45:ce:c6:ff:0e:f7:eb:76:
ac:92:89:b8:56:88:3b:bf:63:90:36:09:2a:3e:96:
52:9c:b5:19:fc:ea:27:eb:7d:17:0d:22:e3:3c:50:
4a:f6:f8:dc:6c:d8:dd:be:37:76:df:bf:40:72:bb:
e3:33:86:cd:59:15:15:48:bc:cc:9f:61:d5:aa:de:
cf:03:a8:44:20:a9:47:d0:3f:81:41:14:14:68:5b:
03:9a:53:13:e0:94:2b:60:a3:4c:5f:0c:82:d2:07:
92:b3:44:1a:3d:b6:45:ba:33:92:7c:d9:29:c8:b8:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E2:B3:43:CA:31:6F:D6:8B:EB:C0:14:6E:BA:69:E1:16:51:9A:F0
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bb:b9:c4:6e:6d:3b:54:9b:28:1f:d8:cf:28:22:74:92:53:
97:9b:bb:de:e8:91:f1:48:ec:9d:42:0c:f7:19:75:64:33:00:
7c:93:65:27:e6:84:3e:eb:49:88:11:1f:51:06:38:29:ea:b8:
d9:5b:dd:22:00:e2:6b:16:44:58:11:1d:b7:3b:49:fe:47:50:
67:74:a8:c1:ec:68:f7:9b:71:b3:b1:a3:cc:fd:e5:cd:4c:97:
4a:f9:86:b2:c4:bc:c6:a4:ca:44:25:b8:7d:42:02:94:16:52:
f5:4c:9f:81:9a:b7:0a:f0:b4:75:29:b3:17:2e:f5:42:87:8a:
fe:04:a3:1d:b8:28:e9:9b:5b:91:c1:4d:0f:55:cb:82:86:27:
83:78:30:56:5a:58:4d:f9:04:65:cb:81:6a:a7:71:40:86:d2:
3f:61:d8:c2:ea:37:12:b9:ae:b3:86:e8:eb:bb:d8:03:5f:70:
51:bd:71:f4:7c:2f:a0:85:33:22:49:ed:e3:5f:4f:79:ad:38:
58:5d:59:da:28:15:e1:af:d1:9e:f3:e1:1a:9b:65:3c:9b:94:
77:c4:c2:56:c4:1f:99:4c:48:53:95:f8:ed:1f:80:c5:1c:ff:
9d:00:ab:ec:a6:ad:72:a1:41:65:43:35:10:31:25:98:fb:95:
4c:7c:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:05 2026 by rpki-client