Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: tXf2thoXQD0VInqaZVRryHWIzOfbfDXeTxRucscYlMo=
Subject key identifier: 06:9B:94:B4:C0:E2:5D:21:7B:E2:8B:E6:52:5B:3F:5A:53:CF:19:2A
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 019CAD22CC1C1CD68FC1F6CBD0BA5C561DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0F40
Signing time: Mon 02 Mar 2026 06:01:04 +0000
Manifest this update: Mon 02 Mar 2026 06:01:04 +0000
Manifest next update: Tue 03 Mar 2026 06:01:04 +0000
Files and hashes: 1: 3BS1Vk6oY_4Q-IA4IkoRCzuBzcM.roa (hash: gfB5bbDDulAvXz0n1M7KzaA+1p0+Euw0D8YsIhe2tHw=)
2: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: VTVlvHEGRuIoCJ0SVHE1y0Ioy6PBuxjsF7EJHORXmzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:cc:1c:1c:d6:8f:c1:f6:cb:d0:ba:5c:56:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Mar 2 06:01:04 2026 GMT
Not After : Mar 3 06:01:04 2026 GMT
Subject: CN=069b94b4c0e25d217be28be6525b3f5a53cf192a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:e1:04:87:fa:2c:f2:3c:c9:c3:0d:a5:99:
57:56:b0:1c:2f:bb:40:4a:60:bd:ba:e5:1f:72:c3:
62:29:c0:6e:d4:94:1a:dc:e4:fd:16:96:54:ef:e7:
2e:62:eb:bd:b1:5e:b4:49:e9:bc:e8:db:7e:98:c1:
e7:9f:45:d7:02:de:8d:cc:73:be:43:ac:ef:98:c5:
99:cf:20:f7:ab:d8:f9:a2:f9:30:d9:14:24:21:2c:
56:ec:9c:c3:a0:f8:46:0d:b1:1a:b3:5b:05:ad:59:
02:c4:1e:d0:b5:ec:43:c8:26:43:44:f2:9a:5c:5a:
11:fe:81:56:21:bd:d9:2a:ad:8e:3d:4e:84:12:4d:
e4:93:26:ad:62:08:63:77:ee:a1:f4:fb:8d:88:fb:
d4:12:77:3e:db:c1:33:3c:eb:ad:24:97:0a:f6:f1:
ce:bb:35:05:b2:77:ad:4d:cb:60:72:ea:1d:27:20:
83:ef:0a:b5:55:be:12:3f:ac:ac:32:5d:3f:7e:23:
9f:1b:df:a5:39:79:82:20:f5:44:24:74:b7:23:5a:
cf:ee:1a:54:50:51:71:51:4b:94:ac:b1:c8:85:ab:
9b:a9:9b:a3:cc:e1:81:f1:e2:7e:cb:65:49:3f:4c:
fc:32:25:d6:f9:a8:dc:96:db:82:18:96:f9:d4:27:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9B:94:B4:C0:E2:5D:21:7B:E2:8B:E6:52:5B:3F:5A:53:CF:19:2A
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:dd:de:f9:6d:06:2a:28:21:5a:4e:a0:3a:81:5b:e6:bd:
9b:27:85:23:28:35:27:8c:c1:05:06:4e:af:b2:82:79:26:3e:
a3:8d:78:ff:98:21:a1:66:b3:7d:79:47:0c:21:f9:ff:b8:1c:
5e:a0:13:bb:6a:b6:cc:5a:9c:d4:aa:18:80:3a:17:17:3e:ab:
7c:d6:d4:f1:70:cf:f8:de:1d:35:bb:65:63:87:56:e3:0c:66:
68:9e:14:b0:15:49:a6:aa:61:7b:65:83:38:df:88:b7:55:37:
c5:a3:74:0c:a0:e0:5a:41:cb:3c:1e:44:57:de:62:2c:f5:9f:
73:a2:20:a9:4f:b7:76:c1:af:77:58:3d:57:fa:e7:d7:d2:6a:
08:76:a1:fd:8f:6a:30:15:97:d0:d7:bf:be:4e:e9:f7:c0:96:
92:f4:d3:d4:eb:75:36:e2:78:f7:02:37:16:79:e3:4d:2e:20:
b3:5f:41:56:ce:9b:dc:da:95:63:f8:c9:82:54:20:27:a2:ed:
18:73:e7:3b:fd:4e:97:b8:78:50:69:c9:10:7a:e2:92:ac:c7:
f5:f2:c5:c8:cf:57:f3:c5:c4:2f:22:3e:87:1e:e0:8c:97:63:
a3:9a:4c:d9:c3:db:c9:18:95:71:b8:1f:ea:aa:33:96:4c:c5:
08:0c:37:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:12 2026 by rpki-client