Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: YslaXOQznVFZxzk1Ndh1SSR+gQyQ77D1QqMceCH0Nng=
Subject key identifier: 90:E8:6B:5B:E2:0F:41:58:A6:8A:83:92:4C:34:D3:A9:CD:83:13:07
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019ED3F3E8461E0CEFF8AEA19F2D41232731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 0495
Signing time: Wed 17 Jun 2026 05:00:37 +0000
Manifest this update: Wed 17 Jun 2026 05:00:37 +0000
Manifest next update: Thu 18 Jun 2026 05:00:37 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: q3N08FID9pWwfbBE7PZXBNBZNG7V3FgX6Qi0KWHZwUs=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f3:e8:46:1e:0c:ef:f8:ae:a1:9f:2d:41:23:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Jun 17 05:00:37 2026 GMT
Not After : Jun 18 05:00:37 2026 GMT
Subject: CN=90e86b5be20f4158a68a83924c34d3a9cd831307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:db:bb:c5:99:f1:05:51:03:fc:5a:64:6d:
c1:22:c4:2d:42:3f:0c:b9:a0:e5:c3:95:ca:3c:d8:
74:3e:e0:06:9f:3e:c3:92:87:13:00:18:ac:1f:1b:
e9:bb:9a:93:1f:69:f6:36:a4:e6:c1:4f:5f:8f:49:
72:60:97:9e:2a:43:a3:66:60:bf:c5:ce:ca:f3:c7:
84:92:13:58:13:0b:c3:19:62:57:63:03:4a:07:9d:
0b:cd:b3:33:aa:29:fd:51:9d:f7:21:1c:34:df:e7:
00:b2:2d:e8:15:c5:f2:a9:21:97:44:1f:9e:bf:f7:
aa:27:0e:39:3c:7e:9f:13:51:e2:bc:13:76:1e:2e:
55:86:ae:89:b9:5a:19:d5:7d:12:fa:1f:b7:31:16:
80:99:f0:e5:fb:62:c2:a7:ad:8f:ef:6d:f2:2a:52:
1a:35:c5:1c:0f:a6:6f:63:99:21:77:34:06:68:58:
46:da:a7:74:d2:be:89:ad:27:a9:82:46:62:aa:a8:
4d:13:f4:9f:cf:40:34:dc:dc:e9:c2:70:8b:3a:03:
6b:43:43:14:82:7b:2e:55:ff:e9:e6:cb:3e:90:00:
8c:35:df:6c:97:cf:bd:56:16:3c:45:6b:76:ad:cb:
a6:d8:b5:43:9c:52:aa:c5:a9:be:07:0c:f3:64:7b:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:6B:5B:E2:0F:41:58:A6:8A:83:92:4C:34:D3:A9:CD:83:13:07
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4c:3f:78:2c:0a:d0:b7:fc:40:22:5f:8c:f0:9a:c1:60:10:
e9:6c:d8:1d:d4:7f:5b:94:1f:dc:2b:01:47:a5:07:65:86:c2:
7a:3b:55:7d:96:d5:4f:63:7d:f8:f3:cf:c0:92:01:bf:24:f0:
e0:1f:bf:80:2e:d7:df:9a:4b:1b:f2:22:64:a1:35:dd:85:cf:
e8:df:ca:45:3f:97:db:ae:48:8b:bc:61:36:3c:ce:d7:42:6c:
67:e3:58:fe:fc:54:ec:87:90:3c:98:0e:8e:90:e4:da:04:7e:
47:4e:cf:e7:9d:e8:95:2e:be:b5:57:fb:79:65:5b:93:a8:f4:
d0:0b:de:e5:86:ed:56:c1:3e:79:0d:dd:36:82:a0:3d:85:42:
75:c9:7b:9a:d8:35:12:23:2e:9b:71:7f:18:5b:99:df:dc:4c:
f4:f5:48:fd:79:42:e0:e2:93:45:73:f0:df:8b:a6:d8:38:de:
50:f7:d4:a8:e6:f1:4c:8a:61:42:02:9d:9a:18:c5:63:7b:f4:
57:ed:84:8d:31:a5:4c:8a:57:5e:cd:ce:f8:33:1d:77:96:e8:
c6:b6:6b:32:11:d9:f7:b1:ff:87:e7:75:e8:cc:21:2d:c3:b7:
13:17:69:46:df:8e:b3:05:c6:d1:7c:cc:b0:e8:cb:cb:9f:19:
bf:0d:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:17:30 2026 by rpki-client