
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File: VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier: Vsaf0BnUt2YbA7+NIGLarB8mkb6UtPtCdrivUNaQHdE=
Subject key identifier: F7:AE:99:87:2E:98:D7:8F:7F:FC:94:93:D0:A7:19:E2:F6:D0:C1:47
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 019DA52F55B60A3969564B0CF1A213F8E9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number: 0250
Signing time: Sun 19 Apr 2026 10:00:35 +0000
Manifest this update: Sun 19 Apr 2026 10:00:35 +0000
Manifest next update: Mon 20 Apr 2026 10:00:35 +0000
Files and hashes: 1: TboL8PiKmGO2xSdCzYOzLLLsrgo.roa (hash: L+TeEKzIHBiCwRJJ12WlexzFz32tqwEp+pqXfiwcHm0=)
2: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: PasU6mw+cH99tPsyqfO8PTiHe8dMtKWth1BSs4EoRig=)
3: fepTS1XefYM5Mm0VJMMPSN02wxo.asa (hash: VKdt4tdwgcz86/Usr6Qv72R8qP1GifrjrQfQv6ap4/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:55:b6:0a:39:69:56:4b:0c:f1:a2:13:f8:e9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Apr 19 10:00:35 2026 GMT
Not After : Apr 20 10:00:35 2026 GMT
Subject: CN=f7ae99872e98d78f7ffc9493d0a719e2f6d0c147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:c5:a8:c4:81:db:dc:fe:db:43:5a:0a:40:
67:36:1f:56:30:74:2f:f8:65:72:d0:f4:cb:47:66:
ab:c0:4c:f3:60:70:be:23:dd:e3:54:8e:69:df:50:
36:05:12:55:d4:0f:98:18:20:65:7b:f9:c0:e2:7b:
ee:30:d4:b7:81:8b:dd:34:50:0d:ed:92:3a:3b:74:
07:04:14:b0:45:af:30:68:84:1f:4f:6b:44:53:9c:
68:c9:de:eb:40:40:7c:8c:6a:14:d0:00:95:ef:d5:
6d:99:db:3c:da:7a:da:18:81:8b:82:c0:96:d6:41:
c2:b0:e9:3f:63:e5:d8:6a:53:e6:1d:be:39:1b:ec:
cd:09:44:b6:23:0f:c4:05:17:ff:80:ec:20:ad:55:
96:6f:fd:a0:27:aa:91:39:f5:c6:58:9b:cc:3a:f3:
d1:cb:a4:8f:bc:9e:56:6d:6b:c9:5c:82:16:66:81:
34:2b:c0:86:47:d3:cb:dc:9e:bc:10:95:10:44:f7:
ee:f7:e9:59:89:78:f0:90:4a:d7:49:8f:e7:6b:b5:
65:e0:14:58:24:68:92:e2:26:f0:86:40:d0:b3:ba:
00:fe:f1:a5:c0:94:56:60:88:c6:0f:e4:d5:7b:e5:
cf:dd:52:5c:7e:db:1b:c5:30:09:74:8f:8d:e1:d2:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:99:87:2E:98:D7:8F:7F:FC:94:93:D0:A7:19:E2:F6:D0:C1:47
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:4b:6a:eb:b9:40:00:fd:74:f8:76:11:58:bd:5b:f5:3e:
73:63:73:56:8c:2f:c6:01:8a:5d:d2:38:53:8b:83:b9:49:b0:
5e:ef:83:6a:0c:66:9c:ec:f1:de:22:d0:a3:9a:f2:06:e6:0f:
2e:f1:4e:45:d6:de:c3:df:c1:91:42:d4:13:6a:c9:c7:0f:f3:
e9:83:97:8b:72:46:8f:c9:ce:0b:69:9a:1d:76:d9:b6:69:d9:
2a:dd:aa:cd:13:ad:d3:7d:9d:4a:7a:1c:91:6f:1b:7d:e3:a9:
61:fb:42:98:e2:98:8b:b7:e0:a3:d6:b8:ec:5d:4a:e7:27:30:
09:95:9a:81:72:30:30:e4:d7:cd:9b:19:9b:58:95:d3:82:e3:
71:dd:00:49:47:1b:34:97:17:1a:69:a4:1e:e6:99:73:25:f2:
2c:e2:ed:71:29:94:99:64:60:b9:29:79:e3:5e:9f:c3:44:83:
75:26:1e:23:d1:c5:72:58:e3:11:61:af:3b:64:b8:84:44:14:
3d:a7:e7:70:04:ee:1b:84:29:d7:4b:89:25:50:82:a8:de:e9:
6b:da:b0:99:f9:74:76:df:18:33:3c:c2:9c:08:9d:a1:5b:75:
48:c4:a3:2d:1f:65:af:f7:f4:a8:51:42:e9:6a:77:e0:ca:71:
de:b2:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:24 2026 by rpki-client