Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File: VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier: X1VZc2dnygCpO8Hgl/C7Ew4bSUPsCb0XTMrnR1LK/QQ=
Subject key identifier: 08:86:A2:88:C8:C6:D0:0C:3B:32:BC:DE:91:F5:BD:78:9E:24:60:0A
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 019CAA2166988A8F293DE7716CED93341FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number: 01CE
Signing time: Sun 01 Mar 2026 16:00:41 +0000
Manifest this update: Sun 01 Mar 2026 16:00:41 +0000
Manifest next update: Mon 02 Mar 2026 16:00:41 +0000
Files and hashes: 1: TboL8PiKmGO2xSdCzYOzLLLsrgo.roa (hash: L+TeEKzIHBiCwRJJ12WlexzFz32tqwEp+pqXfiwcHm0=)
2: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: FugfUdAEZqP6+Kmsma1oSv594IA4eGMrSCe62wJRAvY=)
3: fepTS1XefYM5Mm0VJMMPSN02wxo.asa (hash: VKdt4tdwgcz86/Usr6Qv72R8qP1GifrjrQfQv6ap4/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:66:98:8a:8f:29:3d:e7:71:6c:ed:93:34:1f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Mar 1 16:00:41 2026 GMT
Not After : Mar 2 16:00:41 2026 GMT
Subject: CN=0886a288c8c6d00c3b32bcde91f5bd789e24600a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:18:b5:7f:dc:66:c8:0f:df:f3:18:44:af:
a4:39:e9:d6:1a:b3:f5:a8:ad:16:81:64:67:c2:4e:
b0:cf:21:66:d6:fa:90:d1:c6:2d:9d:a1:f6:be:35:
26:99:b5:c7:62:18:97:05:89:4a:51:b1:c9:c8:bc:
d3:b7:19:54:01:f2:00:f8:95:ef:9a:ee:81:f5:cf:
69:b2:46:91:37:ef:05:e8:cb:b5:02:94:9f:2d:ad:
83:73:a9:06:36:14:c1:f2:0b:c8:23:ca:02:fd:42:
9d:1d:57:6d:57:4f:06:01:c9:47:53:0a:34:2c:61:
ff:f0:ce:e9:cb:b3:f9:09:d8:08:f7:f3:b0:36:2d:
0d:7e:d5:dd:ce:6a:d7:ea:88:d5:43:84:24:12:7a:
1f:1e:1a:5f:95:82:17:55:bc:3c:d7:ec:31:a7:54:
51:09:83:17:0a:43:22:c4:f8:76:ec:ea:85:6f:99:
f0:92:48:1b:d7:74:58:5b:c8:da:34:31:74:4d:ab:
b2:34:c1:0f:db:9f:4f:fd:3c:82:04:6b:86:88:69:
cb:5b:8c:ce:e0:a8:51:5a:5a:16:77:f4:af:10:63:
df:04:a4:cc:e5:5f:2d:99:4d:b6:9d:ba:d0:c7:bb:
5b:23:f1:b7:fa:c2:07:ba:7d:10:cc:68:48:48:40:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:A2:88:C8:C6:D0:0C:3B:32:BC:DE:91:F5:BD:78:9E:24:60:0A
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7a:e9:6c:f6:3a:1c:25:d1:46:fd:b7:88:9f:b8:26:ba:28:
05:86:b6:ae:e4:8b:e0:fc:83:46:89:90:2d:66:9c:f1:f3:b9:
6e:5e:ef:41:76:f3:08:e0:43:4d:7f:17:c1:69:c4:da:55:ba:
87:de:f8:76:6f:97:37:30:2f:82:91:84:b6:56:b9:fe:35:c0:
81:a2:47:04:e0:67:d7:bd:94:9f:31:00:88:e5:54:f6:aa:48:
51:01:19:71:4e:1e:c6:d9:e9:62:51:0a:ca:9d:af:0f:d8:7b:
2a:28:6d:d6:8c:18:be:c4:1a:0e:86:a4:c1:48:7f:d8:57:2d:
4d:56:a4:58:d5:33:e2:ff:fd:4d:36:40:ee:38:0e:d2:c1:12:
4f:c8:68:bf:74:bf:d1:b3:ae:45:62:84:1f:cf:62:b4:6d:92:
ff:1a:96:a9:d4:79:5d:d9:36:23:13:e0:61:55:e3:af:d8:cf:
02:ed:0b:64:be:ba:ab:dc:8f:97:f1:56:27:16:63:ff:b0:81:
fc:84:f5:77:1d:47:b6:9e:f9:90:18:b6:9f:15:d3:70:38:8c:
c2:d0:57:4c:d6:12:10:01:1f:68:3e:c8:ad:21:06:2f:43:ca:
fe:a7:0e:05:4d:72:b9:09:e4:96:f7:a1:86:48:a3:1c:26:d7:
c4:b8:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:15:40 2026 by rpki-client