Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: alI1HidGff8HoKIVvP7xgc5czgrwJH5tWQPTabKO/+0=
Subject key identifier: 3B:18:7C:BF:9E:DC:57:CA:33:C8:3B:BD:31:42:B8:9C:3E:C9:C3:0A
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 019FAAF55ED14D046A9D8992FD7E179777CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 13C8
Signing time: Tue 28 Jul 2026 23:00:35 +0000
Manifest this update: Tue 28 Jul 2026 23:00:35 +0000
Manifest next update: Wed 29 Jul 2026 23:00:35 +0000
Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: Nfdusp9DYAgY1V8v1ov/tTQjpjFcnWAcGZW+muam3Lg=)
2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5e:d1:4d:04:6a:9d:89:92:fd:7e:17:97:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Jul 28 23:00:35 2026 GMT
Not After : Jul 29 23:00:35 2026 GMT
Subject: CN=3b187cbf9edc57ca33c83bbd3142b89c3ec9c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:a9:73:82:7e:d2:1e:86:25:04:f9:00:c2:
c5:86:e6:cc:cf:c3:73:fd:a7:1b:0b:f0:cd:52:f9:
67:76:f1:29:be:bf:fa:0a:83:ec:49:2a:bf:c6:87:
eb:02:a6:f8:af:10:6f:db:d6:10:79:85:4e:c7:79:
fd:0f:b1:d1:84:11:3c:82:1e:c7:fe:5f:cf:ae:74:
71:a9:62:4b:e2:f9:89:1f:25:f2:4f:5a:a4:0f:65:
71:56:41:e5:51:df:82:72:8f:1b:b2:cf:81:c6:26:
8a:be:2e:d7:2c:8b:80:a1:d2:1c:dd:15:35:a5:bb:
fe:c3:1a:e8:fb:e2:5c:08:9a:ea:eb:f8:5b:31:33:
67:b0:bd:7e:33:35:68:dc:5a:6a:89:95:80:93:35:
bf:ad:de:e0:83:b3:bb:d0:94:42:0e:e2:66:24:6f:
cb:e6:5d:34:9a:06:12:0c:e2:1a:68:47:64:c5:d9:
79:33:97:29:de:2c:0f:a6:a9:f5:0b:57:0c:74:fb:
14:21:de:bf:f8:3d:fa:4f:b4:ed:58:cb:eb:1f:e6:
f6:4d:29:59:94:0f:c6:6e:0d:b7:62:c2:90:93:ce:
4c:12:6e:98:17:63:80:9c:70:78:7c:a3:9a:f7:28:
d6:4d:ed:57:66:31:3e:0b:ec:d7:7d:fb:92:80:40:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:7C:BF:9E:DC:57:CA:33:C8:3B:BD:31:42:B8:9C:3E:C9:C3:0A
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a1:5b:44:97:82:16:17:d3:b7:ac:0a:2a:f7:ee:84:6f:81:
b6:7e:40:12:7b:a8:b3:50:ce:26:40:e1:7a:b2:2c:c0:60:e4:
87:ed:91:4c:72:94:5a:44:67:8a:ef:fd:62:c0:ef:79:55:06:
b2:a2:34:f1:51:23:01:f0:68:38:aa:08:a0:e3:f0:6c:5b:ae:
43:0d:82:59:5a:12:9c:aa:90:16:7f:bf:5b:fc:72:40:29:ae:
db:1b:1e:d1:40:dc:8f:05:1f:ca:a2:fb:79:a9:30:aa:51:06:
fc:be:9e:ae:30:7d:bf:70:78:f7:f4:0f:f9:52:f0:15:67:95:
54:97:56:6d:a3:7b:33:50:9e:94:c7:b6:d8:1f:c4:20:76:53:
a3:4a:8c:69:0f:bc:b7:67:3b:37:7a:40:5e:82:ce:8c:38:74:
d1:b3:12:4a:75:bb:f1:64:d9:09:50:d4:ef:6a:4c:63:58:50:
ad:d6:95:da:fa:75:b2:b7:f5:c9:da:1f:63:49:2b:36:c4:50:
b1:8a:52:d5:0c:69:5d:82:55:89:c8:1e:b1:44:73:45:b7:6a:
3b:25:db:bb:f8:31:4e:e9:7b:8d:c4:37:4f:6d:13:cc:c8:d9:
b6:fb:f5:e9:e8:a6:9b:18:1c:65:f7:d0:13:31:b1:01:32:06:
8f:6f:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:06 2026 by rpki-client