Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: HY4+CiF5B4L4v/pp22uKVJjssgJ1tHsnD0oc9vEdq5Y=
Subject key identifier: 53:D0:85:EF:F1:22:56:3C:66:D0:79:E8:68:2F:A9:08:29:E0:FE:5A
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 01A0DB71CDCAB05F01571A39C362DBA5FCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 05A2
Signing time: Sat 26 Sep 2026 02:01:03 +0000
Manifest this update: Sat 26 Sep 2026 02:01:03 +0000
Manifest next update: Sun 27 Sep 2026 02:01:03 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: 0tfLBelynjUxwIYtn4TbYWBx8W9EQ/1CeoMMK8Eon2c=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:cd:ca:b0:5f:01:57:1a:39:c3:62:db:a5:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Sep 26 02:01:03 2026 GMT
Not After : Sep 27 02:01:03 2026 GMT
Subject: CN=53d085eff122563c66d079e8682fa90829e0fe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:a8:be:65:97:07:98:84:38:75:8e:8f:f2:
ba:4d:76:0e:58:e1:8f:c8:1c:76:19:f6:09:96:2f:
01:86:18:46:22:c7:75:7c:92:5b:8a:02:af:f0:23:
43:05:e5:31:b4:9e:51:25:5a:16:db:a0:f9:d4:f3:
9b:9d:3a:f7:a2:68:62:b6:63:99:b8:ad:e0:a2:1d:
9e:44:22:1b:2e:54:12:6a:91:26:c0:fc:41:04:b2:
76:df:d1:d8:43:bf:fb:8e:4f:77:9d:85:00:bc:3e:
04:0e:1a:27:c4:0b:e7:c9:d6:f4:dd:62:40:d6:b9:
42:16:21:88:32:9b:70:13:8a:84:d7:98:6d:25:31:
30:57:1c:9e:15:c9:6f:48:ac:c7:7b:d6:3c:ba:36:
c1:19:89:10:c0:c4:a5:31:e8:7d:9f:89:8d:3d:29:
08:8f:f9:6d:c9:e1:38:99:e8:3d:be:0d:71:e2:99:
a9:17:17:27:56:82:aa:2d:fc:4a:33:3e:93:cc:e7:
e0:d0:3f:c3:a2:40:27:c9:1e:7a:a5:08:84:41:24:
de:71:89:84:8d:8c:6e:23:8e:e0:14:b0:86:07:5b:
cf:09:8e:ee:6c:42:3b:66:63:f9:8c:77:8a:db:a2:
f2:89:ce:e3:f6:9d:15:5e:1e:2c:d2:a9:60:6e:ed:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:85:EF:F1:22:56:3C:66:D0:79:E8:68:2F:A9:08:29:E0:FE:5A
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:96:11:7d:d6:19:24:da:28:2a:0a:6c:f5:fc:0a:41:2f:aa:
93:04:57:b9:9f:e1:9f:86:12:91:00:0a:64:5d:c6:14:7b:c4:
bc:69:32:97:ca:ef:7c:e6:f5:e8:d5:3c:70:4c:d5:db:1f:1e:
c1:dc:bf:90:d3:73:c5:dd:b7:40:aa:2a:04:20:af:b0:28:3e:
0c:0a:b9:22:c2:87:07:ae:91:ac:e4:63:98:39:c9:f4:c5:3c:
b5:18:c4:c4:9e:d6:a8:66:5e:e0:13:19:6d:52:74:c7:2d:1b:
e7:42:e4:44:f8:56:dc:1f:b2:f4:e8:49:c6:d5:bb:d3:37:4d:
bb:a5:d8:02:39:10:ac:2d:ef:e5:75:33:c1:25:79:97:59:c0:
50:ad:93:fb:64:4c:e2:f9:c5:07:14:f1:60:01:8d:62:06:77:
9e:24:b9:9a:20:d0:b9:a7:5b:96:9e:be:86:62:8f:4c:44:34:
2c:74:83:ea:c3:b2:98:eb:c8:ac:64:e7:ac:d5:b0:a5:8b:a3:
7a:c7:39:18:15:20:e5:b4:82:4c:98:2b:d9:9b:f5:94:90:95:
84:ff:f9:01:0f:ff:10:23:33:dc:4b:51:87:70:6e:54:9c:db:
04:31:13:1e:e9:e8:ec:19:89:c0:c5:ba:c7:97:6f:6d:e7:b1:
60:4d:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:58:45 2026 by rpki-client