Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: im6Wpf606jAKFhShCd570UDvBIiA0QxKYLW2n2VRvv8=
Subject key identifier: 50:72:C9:69:AC:E2:A8:FA:56:BD:32:1A:1A:CD:DC:F5:F4:4E:0D:42
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 019CAE35E268CF62C294A24CFEE7C127C71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 0FDB
Signing time: Mon 02 Mar 2026 11:01:32 +0000
Manifest this update: Mon 02 Mar 2026 11:01:32 +0000
Manifest next update: Tue 03 Mar 2026 11:01:32 +0000
Files and hashes: 1: 2oHiZnjzT420MbEkQGJ7v40Fe9I.roa (hash: Czu1tA9q/Wmcp0lOrzTS/3SnNIxEWPYmLWHdzKOsNLk=)
2: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: JEkjXZa5HvuGvTpsEMjK9pvml+jwuRzLoCUUrEcUVhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:e2:68:cf:62:c2:94:a2:4c:fe:e7:c1:27:c7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Mar 2 11:01:32 2026 GMT
Not After : Mar 3 11:01:32 2026 GMT
Subject: CN=5072c969ace2a8fa56bd321a1acddcf5f44e0d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:54:9c:1f:d5:c4:90:5d:d7:e4:fe:ad:07:
0d:65:bd:2f:af:20:75:8f:df:88:0c:6f:4b:4c:d4:
8f:a9:a2:1c:94:7b:e2:56:07:49:98:01:b7:8b:9c:
ef:8a:9f:36:cf:e1:8d:0c:ec:a2:4d:3f:71:e0:bd:
dd:1c:20:02:79:1c:b6:05:bf:fa:96:d8:77:15:d3:
bc:41:9e:c3:ee:70:df:1c:a4:f1:73:59:fa:5d:e8:
df:88:12:6f:a7:11:92:e6:1e:c3:62:c6:29:0e:98:
63:78:75:5f:76:35:14:ee:dc:13:9a:e0:e6:ba:89:
c2:72:09:13:2f:a5:5c:74:68:e4:34:4e:a2:ea:8d:
8b:55:93:88:4c:21:ae:47:68:f8:19:99:be:6c:fe:
ab:8b:a7:52:09:23:a2:14:1f:60:7c:c6:74:19:38:
a4:82:11:0d:fb:21:50:be:de:a2:28:ab:89:b1:64:
37:21:e4:1b:11:1c:ad:15:77:2d:dc:4f:3c:61:fa:
90:e3:78:78:77:bf:18:03:14:69:a7:23:4d:84:ce:
76:d4:6d:60:70:ce:fe:25:ba:ea:4c:66:06:e4:c5:
70:37:24:6e:08:e3:17:bf:b6:e2:5a:7c:23:da:03:
7e:c0:33:a3:36:16:36:4a:ad:1b:33:8a:ce:c8:da:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:72:C9:69:AC:E2:A8:FA:56:BD:32:1A:1A:CD:DC:F5:F4:4E:0D:42
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3f:1b:41:f6:69:6c:3c:fe:af:dd:56:60:f7:a2:17:ac:1c:
b5:64:09:2b:2b:6f:61:4d:53:21:0c:52:b6:3f:1c:28:2e:10:
1b:fe:ec:b4:3b:7d:55:36:a3:ef:be:4f:0b:80:18:46:31:72:
8c:31:99:77:84:4c:02:11:7e:9d:7f:d2:33:f6:ed:93:00:e4:
6b:36:53:2d:1c:94:20:8c:23:93:be:bf:ed:c4:0a:40:04:d7:
4b:ce:2c:70:61:87:d9:66:ff:cb:95:f7:e6:6d:da:79:91:1e:
e0:ac:81:40:ef:1d:19:85:71:a0:2b:2b:60:ae:90:ef:2a:e8:
6e:11:a3:79:0e:d0:32:55:b6:6b:6d:fe:2c:6f:c4:ae:6f:b0:
a4:c6:64:37:18:ae:51:44:41:b1:c2:5d:ca:88:eb:27:b1:4a:
64:6b:d9:b8:eb:32:58:fa:f0:c9:7a:5f:77:4b:89:aa:53:3a:
11:66:92:54:99:4c:8f:17:af:39:ef:42:bc:e3:1c:83:35:b4:
6f:27:a6:29:a4:38:54:98:5f:99:55:c7:69:3d:2a:68:5a:0d:
cd:db:91:39:f7:59:db:97:97:ed:9f:1b:5d:de:16:61:69:d3:
fe:55:8d:e1:7c:f6:54:10:9f:4d:8c:0d:34:ba:a3:80:35:16:
1e:37:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:55 2026 by rpki-client