Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json)
Hash identifier: oZB4hOGvfkq3Q2u9Rv0/3TiITP0j70UDVll3wWyCeYg=
Subject key identifier: 71:3E:39:37:DD:88:AD:CF:99:08:BE:A8:6D:57:52:13:3D:CB:42:16
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial: 019EBE10A7058768ECFF02C3DAE80BC43BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
Manifest number: 01FC
Signing time: Fri 12 Jun 2026 23:00:22 +0000
Manifest this update: Fri 12 Jun 2026 23:00:22 +0000
Manifest next update: Sat 13 Jun 2026 23:00:22 +0000
Files and hashes: 1: O6tTo-EzouZEbfBpVRGby5BcpW8.roa (hash: e+5cW5Q75TnsiB3DdCMBwxBeOV1HRtuc8+8HpOCCAs0=)
2: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: IjA5M10/R+ind+UQYKl2zv89oYv3udAMNytKct6Pr8Y=)
3: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:a7:05:87:68:ec:ff:02:c3:da:e8:0b:c4:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Validity
Not Before: Jun 12 23:00:22 2026 GMT
Not After : Jun 13 23:00:22 2026 GMT
Subject: CN=713e3937dd88adcf9908bea86d5752133dcb4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:59:bf:67:90:32:fa:d5:4b:d4:65:be:2e:
aa:50:95:c2:b3:ff:cc:5d:f4:42:70:e1:d7:d2:44:
14:1c:3e:5a:17:23:1e:34:80:48:0e:41:13:85:8d:
9b:cf:64:3f:2a:70:d0:3d:ae:cb:bc:ac:2b:5b:9c:
36:10:a6:ec:28:a4:6e:89:8b:41:aa:38:6e:1d:53:
2e:49:ec:72:1f:49:a4:46:9e:0f:4d:2e:f9:a9:55:
42:13:d0:84:df:40:30:65:f0:df:53:03:27:74:f2:
26:ba:57:d3:02:ac:73:50:27:2a:50:74:e6:fb:7e:
1d:14:e1:41:53:ed:28:76:ca:2d:dc:a5:18:cc:57:
32:1c:dc:2e:f2:22:36:63:e7:71:79:83:f5:88:c3:
d4:06:eb:3d:3a:97:95:e6:db:f1:b5:b9:95:62:2c:
8a:e7:6d:b4:5e:68:fd:f5:47:c9:ee:bc:3d:d4:b2:
bf:05:34:ea:c1:a2:b4:cf:9d:9f:29:1c:d0:39:ff:
80:5c:a6:61:89:fd:15:e3:69:17:41:58:ec:af:ba:
be:e4:48:6c:a9:cb:84:c9:85:6e:f5:9d:16:2e:29:
82:0a:07:5c:34:8b:6a:76:bc:35:f7:76:d3:99:c0:
2d:59:b8:54:0a:77:6f:99:38:91:84:93:e1:89:7a:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3E:39:37:DD:88:AD:CF:99:08:BE:A8:6D:57:52:13:3D:CB:42:16
X509v3 Authority Key Identifier:
keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:28:cf:ff:fb:e6:f8:51:e0:46:fb:e3:13:32:57:68:30:
ad:48:e8:de:5d:fb:37:b2:8f:98:c3:cf:b8:ca:ed:e8:a0:f7:
13:38:98:d9:aa:99:8d:9f:c6:a7:bd:2b:ef:5c:a8:e2:10:1e:
5b:6a:74:12:9b:ae:bb:f2:61:28:85:98:0d:24:f9:96:0d:b5:
77:d4:ab:27:96:17:7c:76:9a:0c:16:a2:99:eb:b9:45:0d:3f:
0a:9e:fd:51:ab:55:9a:24:94:c4:3c:93:5f:ba:34:83:ab:14:
1f:9f:72:e0:3f:0e:d3:eb:a0:8b:4b:b6:71:01:b7:a3:78:01:
22:32:fd:5b:6a:0f:e0:b3:57:34:84:3f:bb:73:4c:4c:b7:53:
66:ca:00:90:e1:f1:39:90:77:cd:5b:9e:22:14:0d:5f:1f:f4:
15:59:1c:2e:7f:9a:b1:a6:ac:ab:b7:1d:ec:b2:f6:bc:1c:70:
8a:04:51:87:5b:ac:d8:4c:c2:f0:67:f5:b6:5f:15:ad:9b:14:
b2:60:c0:37:ae:52:c9:d5:70:4c:4c:48:d9:d9:39:75:5b:9b:
9f:0e:b8:f0:10:00:de:48:b6:72:2d:bc:5a:1b:a8:24:46:e7:
0b:cf:7a:72:78:04:c6:a2:02:a3:df:79:dd:97:f7:c1:c0:11:
0b:e8:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:54 2026 by rpki-client