Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: WKCNuqotray3r5c5jj+Se02VexsLDoyylPl7ej6uyp0=
Subject key identifier: 54:CD:D1:61:5C:38:FB:8A:31:79:D4:0D:C5:02:4D:DA:66:A3:C1:E2
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 019CAC7DF8B9A354192D01DC5020D211F322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:01:02 +0000
Manifest this update: Mon 02 Mar 2026 03:01:02 +0000
Manifest next update: Tue 03 Mar 2026 03:01:02 +0000
Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: rAAnJ/DzeQFqY2IKC7UAEUlPyTBxjc+U3XYN+v64u28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f8:b9:a3:54:19:2d:01:dc:50:20:d2:11:f3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Mar 2 03:01:02 2026 GMT
Not After : Mar 3 03:01:02 2026 GMT
Subject: CN=54cdd1615c38fb8a3179d40dc5024dda66a3c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:d8:dd:fc:c7:39:0b:21:00:a9:2d:1f:b3:
45:09:42:82:d9:c7:e2:74:66:63:70:ce:d9:05:e3:
9f:06:b2:3c:0d:c8:08:8c:38:08:75:3d:7a:5d:fc:
36:75:46:59:11:f8:bb:f2:0b:03:7d:80:8a:45:48:
20:01:aa:77:74:73:2e:2c:84:7e:df:ad:32:b1:72:
7c:54:b3:e9:09:5b:57:dd:32:35:a5:63:5c:71:6c:
a9:a0:7f:29:ac:a8:81:75:87:b8:d5:97:a0:e0:3d:
7e:23:62:32:6b:a5:26:29:50:15:b9:fe:ea:6e:9d:
58:31:40:00:0c:e3:bd:1d:b9:ee:67:fb:b0:e6:60:
d0:18:13:5a:58:64:a5:be:d7:cd:7e:39:0c:31:76:
31:59:a7:e6:70:5c:53:e9:4c:9c:44:68:ca:8a:41:
09:b7:4d:33:03:46:f9:60:6d:52:e4:8d:6a:bf:d3:
87:4b:3c:81:32:06:66:ec:64:4a:d5:5a:12:26:c8:
7f:ad:8a:b7:29:83:ea:cd:8c:8b:cc:a2:a2:89:6f:
14:7e:e8:64:52:bb:6b:90:fb:c2:21:55:23:4e:b2:
21:71:2f:8a:a3:8d:92:08:6e:19:b2:c6:1b:b6:34:
cd:a7:7f:a9:f2:c1:b1:ef:18:d8:be:3b:fd:46:a9:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:D1:61:5C:38:FB:8A:31:79:D4:0D:C5:02:4D:DA:66:A3:C1:E2
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:70:31:39:e1:f3:55:f2:bc:19:63:86:e1:b8:d7:a0:4d:
5d:fa:4d:78:76:ff:60:83:9a:54:74:e4:25:32:07:17:a1:56:
8b:61:28:d8:f6:31:d1:ba:41:d6:31:c5:84:8f:0c:e5:aa:26:
69:b8:86:a6:c8:fa:82:48:b5:a0:bf:7f:d1:2c:d6:13:1b:33:
e2:5d:38:b8:11:9e:e9:60:03:15:0a:b6:c7:62:56:0b:67:16:
1f:2a:81:75:1d:2d:49:45:98:c0:83:d9:ff:fc:6e:65:0d:45:
2a:81:68:10:cc:d5:41:e2:ad:ca:c0:1e:0a:b1:01:f6:49:d5:
8c:b7:d3:14:c3:ed:5d:2d:04:19:a2:36:e8:58:04:db:7c:c5:
a6:6e:65:45:60:65:25:d8:ff:9d:9c:9f:d3:a6:fd:e4:ff:1f:
13:5b:50:f7:92:83:90:e4:e0:c1:9a:05:06:97:51:5f:be:4d:
11:1c:92:71:85:31:07:95:fe:de:90:f9:18:b4:1c:77:7a:9a:
86:a2:99:30:f0:48:25:21:33:d6:57:ad:d8:2e:d7:10:b6:7f:
ae:01:ff:18:39:ee:68:e9:c2:03:08:ab:d7:75:cf:1c:5c:19:
c7:a9:85:01:bb:f8:13:d9:61:33:4d:e2:17:58:d0:17:3f:11:
8d:9b:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:15 2026 by rpki-client