Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: DWSB7rymfyLY+xm/z2dcvjmdyMjindtGmmSVpSItTKc=
Subject key identifier: C3:82:DD:8A:EB:C3:8C:CA:B6:64:FB:47:CC:B8:BF:59:44:06:42:D3
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 019D97E1D33962275675A3D78607C0507EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 1054
Signing time: Thu 16 Apr 2026 20:00:52 +0000
Manifest this update: Thu 16 Apr 2026 20:00:52 +0000
Manifest next update: Fri 17 Apr 2026 20:00:52 +0000
Files and hashes: 1: 2oHiZnjzT420MbEkQGJ7v40Fe9I.roa (hash: Czu1tA9q/Wmcp0lOrzTS/3SnNIxEWPYmLWHdzKOsNLk=)
2: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: G4GFWiaAM6+EmgDJhaIB22ZBD+JZ0q6lUckjmwUP5tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:d3:39:62:27:56:75:a3:d7:86:07:c0:50:7e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Apr 16 20:00:52 2026 GMT
Not After : Apr 17 20:00:52 2026 GMT
Subject: CN=c382dd8aebc38ccab664fb47ccb8bf59440642d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:bf:25:a0:4c:fe:ba:04:71:bf:39:a2:59:
7c:a6:2d:9d:c8:4d:3f:a6:b9:5b:55:e0:10:bf:86:
f5:cc:a6:93:12:24:37:cb:1f:a3:32:db:62:25:15:
11:42:c8:93:62:82:30:99:2b:84:7f:83:44:a3:eb:
7d:56:07:a1:fc:d1:91:27:c1:c2:98:72:66:47:28:
79:69:84:b6:14:00:1b:77:0a:7b:a1:ca:57:74:8a:
1d:92:a5:5f:b4:67:ab:f4:cd:c9:28:2d:b0:1b:86:
d0:3f:7d:6d:8d:57:fe:26:f5:da:c5:aa:86:d8:d7:
55:10:e9:21:be:aa:b3:1a:6b:f2:38:5c:49:f7:4c:
97:d7:70:54:10:32:0c:0e:2d:5e:51:6a:bd:41:fc:
c7:38:6e:78:d2:52:b0:02:85:8f:6d:a0:e0:c4:6e:
6a:b2:26:ea:da:52:be:c9:4d:1c:13:7f:3f:96:97:
3c:05:b3:74:e8:3c:1d:6d:e8:ec:78:ed:61:23:a1:
87:4e:70:af:97:b3:e2:22:ce:c9:c4:f6:7f:19:8e:
c5:e2:a8:cb:84:02:bc:ff:ab:1b:f3:d3:9b:7c:cf:
d9:eb:12:4a:8e:71:a2:7f:14:8b:06:2b:21:7b:06:
55:c9:be:ab:68:cd:f4:52:6d:64:d0:14:f5:1b:44:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:82:DD:8A:EB:C3:8C:CA:B6:64:FB:47:CC:B8:BF:59:44:06:42:D3
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4d:94:df:61:18:68:4a:3c:aa:b1:c9:a7:55:6f:ed:3b:ce:
31:8a:9d:b5:b1:76:a7:5b:98:d3:7b:5b:6e:e7:27:3f:f8:37:
6c:c3:a5:ea:8f:81:ea:87:60:55:d4:f6:33:96:87:f4:ed:e5:
b2:3f:19:50:76:b6:9e:d2:0d:bd:01:e9:8a:16:69:0b:52:c3:
2e:1d:e4:38:78:6a:76:10:dd:d9:b9:c7:56:9f:c7:f1:b4:45:
ca:e4:8e:1d:f5:03:71:7c:3c:7d:9d:8e:1a:cc:bf:bd:35:1c:
85:da:7e:94:8b:08:5d:c1:6d:87:b1:9f:0d:3b:20:c5:6f:8b:
42:77:7b:cb:17:7e:41:6b:67:72:d7:5f:f5:f7:9c:c8:25:a0:
e7:84:81:a1:36:3d:93:a7:0e:67:81:08:93:1d:16:29:cc:20:
29:6f:ab:d5:50:6e:cd:b6:c7:52:fc:b7:93:7f:6c:d5:03:2d:
8c:e1:e2:0a:80:fd:e8:05:57:38:09:0e:2c:e8:de:25:fe:73:
1d:16:70:2c:bc:e6:d9:4c:ab:e0:56:2a:43:56:f9:d8:92:a8:
84:a3:9e:9e:87:cd:3a:74:2c:92:c1:78:ac:45:e7:09:9e:9e:
0e:0b:1f:3e:76:b5:94:85:30:dc:34:87:42:08:b7:77:d1:98:
36:d4:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:29 2026 by rpki-client