Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json)
Hash identifier: 8gH2nXxim3mlylebVGU++WZOawgjvDUDfwJHGR2lszY=
Subject key identifier: FD:C0:65:A6:94:74:C3:50:A9:5D:41:33:31:99:CD:F9:91:D2:D3:BC
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial: 019CA945E01FDE8BAB7C1EF5CAA57309A0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
Manifest number: E8
Signing time: Sun 01 Mar 2026 12:00:54 +0000
Manifest this update: Sun 01 Mar 2026 12:00:54 +0000
Manifest next update: Mon 02 Mar 2026 12:00:54 +0000
Files and hashes: 1: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: 1d9yZovGGCDhAG2yJicMUcyvTN2kEqpUzmgNrmOMieo=)
2: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=)
3: zNRNe7iUmnwTGKB5gWzqcAs33dM.roa (hash: bT6PruvyhscdCADKkTGMrN3neh191s3DkCniaGWu0zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:e0:1f:de:8b:ab:7c:1e:f5:ca:a5:73:09:a0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Validity
Not Before: Mar 1 12:00:54 2026 GMT
Not After : Mar 2 12:00:54 2026 GMT
Subject: CN=fdc065a69474c350a95d41333199cdf991d2d3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:eb:d9:d1:66:e7:58:0c:bf:14:52:b2:a5:
dc:13:4e:9f:89:13:39:bd:54:02:f0:3d:f3:d0:ec:
79:b6:7f:03:27:72:5d:8e:7f:de:7d:fd:b3:bc:38:
4f:ce:08:c4:70:19:d7:10:6e:5d:a9:a0:f5:d5:6f:
49:c0:ab:db:0f:f2:89:ad:d9:4f:06:b4:f9:10:f4:
80:23:10:bb:73:ec:1f:82:c4:bb:1c:7c:1e:96:6a:
ca:51:82:bf:d0:e3:18:73:66:1e:2b:6f:60:78:d2:
38:af:00:12:51:cf:d4:5c:90:61:f3:48:09:ba:8b:
c9:c8:ca:81:00:46:c7:4d:5e:de:3b:52:ba:e3:85:
b7:b0:ef:45:62:da:b3:1a:81:94:f6:fd:f8:d5:2c:
b8:ed:4d:b1:c7:48:60:b1:0b:2a:de:44:3a:4c:f7:
ee:8d:1b:ee:9a:0d:ae:b7:62:f5:2f:c0:05:7b:4e:
cc:15:53:28:63:63:a9:63:5a:8e:bb:4d:24:10:a1:
2d:1c:0c:96:2f:eb:7e:5b:9d:25:12:b1:de:6e:55:
dd:45:bf:0a:53:b4:a8:37:b9:b1:73:25:fd:0a:55:
5c:4a:7e:2f:0e:ed:e6:a4:7b:8d:cc:32:07:e7:0d:
89:69:d0:73:4a:1e:f9:3a:b5:e7:b4:d3:f9:f0:a4:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:65:A6:94:74:C3:50:A9:5D:41:33:31:99:CD:F9:91:D2:D3:BC
X509v3 Authority Key Identifier:
keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:46:a1:de:23:56:70:c0:e6:9f:06:3a:43:a1:7c:6f:8a:de:
d0:8f:69:f4:07:b4:0c:ab:13:44:66:85:23:26:6a:8f:4e:25:
4f:7e:ec:5a:3e:ee:32:43:17:4e:ac:09:c7:65:36:b9:53:e2:
ba:86:f6:b4:80:ec:b5:f8:0a:e0:4e:6a:1b:aa:3e:3d:76:8a:
0a:b6:07:76:ec:5c:1c:ab:b8:d9:37:bf:7c:00:7f:1e:44:0e:
6e:e1:c6:66:85:f6:7c:e6:6c:e4:8d:83:df:f9:02:37:04:d5:
dc:9d:ec:51:1b:d6:b6:56:ad:c2:43:36:11:87:cb:60:7e:ad:
99:96:18:5d:7d:bc:b6:48:2c:5b:10:27:fe:02:85:b5:ac:66:
16:ec:74:58:c1:69:bc:af:27:0b:b6:ec:71:0c:7c:e0:33:1e:
75:dc:c7:6a:40:4f:25:26:d4:e6:56:5e:b7:84:67:ca:20:46:
4b:19:da:6f:53:f2:a2:83:52:dd:d6:6a:d1:b3:e8:44:cb:e4:
3c:1f:3f:7a:c2:c1:88:8d:e5:b3:01:45:e9:da:ca:ec:b0:ee:
1a:e3:e7:b6:bb:e7:c2:d4:c2:fd:e6:af:fb:ec:bc:df:93:27:
d7:7e:36:68:a9:9a:e0:c5:4f:2f:eb:36:96:8e:6d:d4:f1:93:
55:9f:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:37:44 2026 by rpki-client