Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: 7O0oMuvjAgfzEXSwe1CVf3S1XgNarM0/F0/mN81Z7Rc=
Subject key identifier: 36:4F:0B:FA:18:29:7D:0A:B3:86:34:AD:CE:47:6D:74:00:B9:D4:FA
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 019CAD9058D9D01EA691D73FADC7D5AE5C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 0378
Signing time: Mon 02 Mar 2026 08:00:43 +0000
Manifest this update: Mon 02 Mar 2026 08:00:43 +0000
Manifest next update: Tue 03 Mar 2026 08:00:43 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: O7JSzq9ET3OczCGZOPP9HSK45GosTQA5r/M9K6Dhv/Q=)
2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:58:d9:d0:1e:a6:91:d7:3f:ad:c7:d5:ae:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Mar 2 08:00:43 2026 GMT
Not After : Mar 3 08:00:43 2026 GMT
Subject: CN=364f0bfa18297d0ab38634adce476d7400b9d4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:8f:d3:e1:52:c3:b4:2b:f2:76:63:04:53:
66:f6:ff:42:10:d2:42:f2:1f:8b:37:ce:5f:de:8e:
fb:be:42:86:d6:42:b3:d8:bf:e2:64:e7:b4:58:9c:
41:a2:0d:05:0e:dd:c3:fd:93:b4:6a:f4:a9:51:63:
f0:8d:bc:47:28:ca:9d:99:a8:02:49:79:55:82:ca:
f8:8b:07:ff:81:49:50:4f:b2:f2:5f:42:8d:2f:95:
4a:46:52:23:94:67:9c:d9:28:2a:15:2b:ae:e2:4f:
f5:9f:03:44:d7:de:41:bf:7f:6f:40:24:01:d3:1b:
76:98:d9:f9:52:2a:43:09:fa:37:c9:60:82:40:c5:
01:43:04:82:c9:f9:94:8a:be:98:57:cf:1f:bb:ab:
cf:f0:e0:09:94:33:f1:c0:f9:34:0a:65:3a:72:3c:
4e:9e:7c:2a:05:ca:b9:48:c3:d7:c5:7f:f5:b7:d8:
5e:48:65:3d:48:62:34:bc:75:62:55:40:5a:ff:9d:
ae:a9:ae:8e:b6:02:f3:69:b9:ef:4b:ec:1a:80:2c:
ef:43:03:5f:31:a9:1e:d5:a4:5f:ce:e0:7c:e0:1f:
2b:b5:87:c2:1e:f8:3b:05:3f:17:83:3a:75:28:a1:
2b:41:47:01:7c:d5:b9:c7:f5:c9:67:f6:f7:27:fb:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4F:0B:FA:18:29:7D:0A:B3:86:34:AD:CE:47:6D:74:00:B9:D4:FA
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6f:a6:23:9c:a4:d8:33:71:12:57:52:e3:7a:3f:b3:15:60:
de:0b:be:4d:08:ab:55:cb:43:8e:bd:6e:db:63:be:eb:72:ea:
6a:8f:41:84:ee:d6:3a:bf:37:64:cc:a9:98:b6:56:15:db:8e:
ae:59:aa:65:72:ff:53:03:b2:65:62:f2:3c:cc:40:ef:83:17:
a0:84:66:fb:c5:2b:76:06:1f:01:e4:b8:da:e8:8c:03:f8:8f:
3f:66:1a:35:9b:f9:8d:93:68:24:12:45:ea:a0:99:12:5a:db:
a9:30:8c:2f:02:6f:e9:8c:27:84:8f:95:a2:95:a5:c4:68:11:
a4:11:76:fd:c4:fc:90:9b:1b:b2:21:e2:94:09:db:b5:4c:78:
f2:87:9e:f8:b0:26:04:c3:30:a1:ff:7b:98:81:f5:f8:a1:27:
ae:cd:47:1d:c4:06:8e:39:94:32:50:1f:79:c5:1c:ad:ef:39:
73:54:db:0e:60:dd:da:f0:76:ba:6f:93:51:df:65:92:4d:9e:
7e:73:69:98:d4:a5:bf:e0:0b:fe:59:89:74:a9:71:d1:60:8b:
55:81:76:c8:d7:74:85:ea:9a:f3:4d:60:ef:1b:5d:96:73:29:
0b:2a:98:14:b0:8a:7f:0d:51:3e:e5:73:53:49:51:71:b4:fb:
db:42:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:08 2026 by rpki-client