Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: Wsl9f7WBs6axNewbMuSI4qeapE5E/G/GY0BgPBd/dcQ=
Subject key identifier: CE:67:C6:44:A3:A2:53:96:5A:90:07:75:0C:20:29:0C:A7:CF:40:53
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019DA37832B1AE2D7E260A71D77B93B6EE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 12BB
Signing time: Sun 19 Apr 2026 02:00:56 +0000
Manifest this update: Sun 19 Apr 2026 02:00:56 +0000
Manifest next update: Mon 20 Apr 2026 02:00:56 +0000
Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: Do/XTYSuu+/sS4U8gGP35BPmKZZqiqlaHO/GCaEVhhU=)
2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:32:b1:ae:2d:7e:26:0a:71:d7:7b:93:b6:ee:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Apr 19 02:00:56 2026 GMT
Not After : Apr 20 02:00:56 2026 GMT
Subject: CN=ce67c644a3a253965a9007750c20290ca7cf4053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:57:62:5a:b4:57:5e:f8:69:ee:86:f7:04:
6f:01:27:96:e6:cb:69:b6:49:1f:b6:bc:a4:a1:fe:
e7:e8:b4:12:3b:74:5d:be:92:38:d7:05:bc:18:a9:
27:a0:05:fc:88:a5:76:24:a7:7f:56:31:aa:57:44:
3d:68:f1:09:3e:22:69:0b:d8:dc:aa:21:6f:36:b2:
a3:f4:ba:66:b6:10:68:63:68:ca:9a:2e:97:eb:be:
14:4c:9d:30:35:e1:5e:b4:bc:a6:8d:eb:ab:ad:08:
0a:f0:7d:8a:04:41:2d:ab:cd:3b:fc:7e:d2:5e:23:
63:56:42:0a:c9:11:c8:d4:ab:4b:d4:3b:0f:d6:d7:
b9:70:bf:35:da:1a:6a:bc:2d:9c:6a:49:d0:b2:30:
47:af:2b:3c:65:42:25:c1:10:f6:b2:a8:80:95:e0:
12:26:23:83:a4:88:ba:6e:7e:6a:31:d5:1d:00:c6:
09:ab:38:b0:08:20:a0:06:a8:d0:1e:2c:60:26:c2:
30:b5:03:0d:3a:d2:92:48:89:1c:30:94:9c:55:6f:
d2:4f:2c:21:56:f1:a6:f4:cb:2d:ee:f7:62:98:fa:
f1:b0:64:6b:61:e0:43:2e:7e:e6:d0:48:9c:28:18:
b9:7f:64:06:76:66:06:65:72:0d:62:ab:d4:04:01:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:C6:44:A3:A2:53:96:5A:90:07:75:0C:20:29:0C:A7:CF:40:53
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:67:97:5a:b9:fc:24:24:7f:80:f3:c6:2b:83:41:03:70:
35:05:2a:eb:43:d4:38:f0:12:79:2c:2e:a5:73:59:78:56:42:
ff:92:8b:f9:95:33:d9:26:a3:56:d8:04:fd:c5:f1:d8:4d:39:
d2:29:f4:b9:6d:b2:2b:3b:7e:50:0f:89:52:4e:f7:42:2e:52:
72:16:bf:42:fa:e5:4a:b3:a4:89:aa:ca:4a:58:1f:61:25:ef:
bc:29:05:9c:d1:1e:6d:0d:5d:c1:3c:b6:3c:92:13:e5:57:5d:
1c:06:54:8d:98:fe:77:03:2a:e5:09:b6:a6:0d:b3:4d:de:71:
59:22:20:46:3c:54:b6:6a:53:4e:33:70:ae:c3:a7:c7:40:53:
f3:a4:38:ac:d3:2a:4d:17:e8:24:c1:c4:d8:24:95:01:9a:81:
1e:e3:e0:26:cd:1c:62:ce:53:e3:d1:e3:c5:e5:b0:4f:ac:25:
81:40:65:f4:8f:80:0b:f4:be:f5:03:64:e0:42:ab:b2:2d:b4:
67:4c:52:ad:63:71:48:61:57:8c:76:98:a5:67:85:bf:c5:ed:
04:6d:5d:52:29:12:d5:38:87:18:ae:82:a4:2a:0f:13:2f:25:
d4:4b:a1:0c:62:0c:24:06:f5:23:00:57:03:8c:87:6f:73:9a:
ea:07:4e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:31 2026 by rpki-client