Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: /oPSeylXbmd3ecUuICkdPp4hyUynBCRHhFTTxOPvehU=
Subject key identifier: EC:FC:4A:46:C2:73:CB:DB:29:E0:80:7E:74:66:F3:71:7A:85:45:10
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 01A0D501F6403212E2C331167151818E7E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 1550
Signing time: Thu 24 Sep 2026 20:01:10 +0000
Manifest this update: Thu 24 Sep 2026 20:01:10 +0000
Manifest next update: Fri 25 Sep 2026 20:01:10 +0000
Files and hashes: 1: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: RM96icUpQDIe2Ox6e0gbUA9TQ+CsUJ4w1FhPJiZyOOM=)
2: goMtqeZ06_gfRxaMBYsSmQJp9A0.roa (hash: L0+SJN0D4g5LkzBrfZ59YxipE2RzS3w7EIiCj6QiH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:f6:40:32:12:e2:c3:31:16:71:51:81:8e:7e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Sep 24 20:01:10 2026 GMT
Not After : Sep 25 20:01:10 2026 GMT
Subject: CN=ecfc4a46c273cbdb29e0807e7466f3717a854510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:29:f9:64:69:90:6c:f8:06:8e:f6:a8:67:
ed:d8:ff:70:b7:67:ec:e8:ad:4b:61:de:cc:95:b5:
37:4a:46:73:7c:eb:cb:93:b7:e6:0c:af:9a:1d:c4:
9f:f3:ac:58:82:2b:7c:69:70:e6:9b:ab:9d:a1:8a:
95:64:8d:8d:fc:f2:61:ae:bc:cf:c2:f5:8b:0e:e7:
74:2b:3f:d7:df:74:a5:77:a3:bd:e2:d2:b6:13:fb:
1b:ad:30:75:b0:5f:4f:59:05:52:d8:24:ec:a5:16:
73:87:4d:46:42:32:75:79:fe:6e:d9:40:5b:26:58:
c2:6a:66:27:89:21:96:75:2b:aa:b1:73:1a:d2:26:
a2:ec:40:e2:33:ac:e0:09:b9:b5:64:2b:4a:d7:28:
86:08:a3:fd:37:dc:16:f3:4c:82:27:8d:09:da:f8:
aa:68:bc:c9:58:2b:37:7a:5a:b1:0f:15:8f:c1:0e:
25:8d:de:56:bc:7f:61:90:03:9b:44:08:12:4e:86:
55:ac:af:b7:61:18:3e:19:bb:ba:08:9e:11:7a:b3:
7e:33:d9:a4:7e:9a:1f:b3:40:fe:7d:89:22:e0:54:
7d:72:df:b2:9c:71:3b:88:fd:09:cb:6d:52:15:ff:
e7:48:28:4d:6b:55:04:55:04:f9:66:36:78:b1:1e:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:4A:46:C2:73:CB:DB:29:E0:80:7E:74:66:F3:71:7A:85:45:10
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:05:57:ad:e3:8a:50:a1:11:02:4e:f6:30:90:66:a4:f3:45:
32:48:8c:73:49:2b:1a:c5:2b:32:40:47:e4:fb:e3:3a:5a:14:
3b:8f:9b:9c:57:9e:9b:88:09:06:1b:07:8b:11:d9:6a:3a:2f:
d2:a0:2f:12:e6:bb:e1:62:49:f2:74:c1:38:14:4f:1f:8f:ba:
d6:f0:ac:84:19:c6:94:e0:56:40:aa:ff:07:b4:c4:e2:8e:47:
c8:e4:cd:dd:c6:15:bc:48:66:80:bd:24:3e:ae:81:24:a8:ef:
38:49:d3:96:5c:b4:a3:39:b6:62:50:14:3e:85:a5:82:8b:28:
85:9a:41:b6:96:0f:ce:61:cb:44:4b:7c:23:e0:29:36:db:ff:
d2:15:72:8f:76:45:a5:c9:8f:7d:da:4f:68:d6:37:c5:06:77:
2b:df:62:d4:a9:f7:83:dc:6b:3f:3f:d3:3a:b2:55:d7:76:60:
1e:be:e1:99:d9:c3:bf:cc:c1:f1:f5:58:f7:bf:04:f3:2b:ba:
9c:7d:b4:7d:88:1f:8e:36:62:0d:e2:88:83:25:e8:8d:61:59:
34:f5:d5:5c:2e:75:b6:bf:48:b3:b2:45:97:1b:95:1f:64:d4:
57:98:5f:87:5f:5d:39:e4:1d:40:14:7b:23:42:a1:6c:8d:e0:
c6:4c:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:23:56 2026 by rpki-client