Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json)
Hash identifier: Ox7Xy4LBd9J55qo8VyZ73shR8IwaWxW2i7YvwlzCKzY=
Subject key identifier: 99:09:B6:B3:E8:57:42:0A:56:1A:2F:1C:53:3A:39:B7:CB:47:98:FA
Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Certificate serial: 019D9C63268151B1F53973684A7BBFC82B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
Manifest number: 0166
Signing time: Fri 17 Apr 2026 17:00:36 +0000
Manifest this update: Fri 17 Apr 2026 17:00:36 +0000
Manifest next update: Sat 18 Apr 2026 17:00:36 +0000
Files and hashes: 1: O6tTo-EzouZEbfBpVRGby5BcpW8.roa (hash: e+5cW5Q75TnsiB3DdCMBwxBeOV1HRtuc8+8HpOCCAs0=)
2: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: T655mirDKwASPD12Emz5yhp3mXfgtd3vXbYQTZobP1o=)
3: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:26:81:51:b1:f5:39:73:68:4a:7b:bf:c8:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17
Validity
Not Before: Apr 17 17:00:36 2026 GMT
Not After : Apr 18 17:00:36 2026 GMT
Subject: CN=9909b6b3e857420a561a2f1c533a39b7cb4798fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:68:3d:4d:0e:f2:15:1e:18:49:3a:92:97:
82:8c:82:67:10:2e:51:56:a0:fe:be:bd:85:8c:39:
fb:b3:5b:96:d8:64:73:29:58:4a:ff:c4:08:3f:a1:
e7:73:bc:a5:5f:0a:71:c9:54:b3:e4:83:0c:f6:3d:
e3:77:8b:ce:ca:0a:b8:f8:37:e7:b5:39:11:38:a1:
0f:fa:63:6a:35:93:51:cd:99:1a:8c:bd:62:66:5c:
b4:a5:c9:34:86:12:7c:76:0a:7d:b2:37:be:a2:78:
14:8f:d5:17:7e:e6:25:94:18:84:6f:c8:41:9b:6b:
12:c6:42:d3:1b:6e:8f:33:35:15:c1:5b:a1:7e:d2:
b6:22:d2:aa:d7:e7:29:84:21:59:f7:b5:0e:9b:be:
6b:b0:fe:f7:ee:67:3a:02:c5:f4:3d:6b:25:3f:15:
86:4d:8a:82:8c:d7:c0:9e:76:bf:65:14:b4:09:eb:
97:1d:06:9d:19:62:98:74:20:d9:05:7c:8e:39:59:
4e:aa:ce:cb:02:15:b6:12:28:ca:ea:b1:a3:6c:33:
f7:36:43:9c:2d:d9:da:17:e4:a1:a1:8b:b3:43:d2:
d7:8f:12:74:19:37:ee:4b:f1:88:6a:53:d0:63:c7:
e3:ec:3f:84:7f:2d:a7:e6:c2:7a:56:51:14:bb:7c:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:09:B6:B3:E8:57:42:0A:56:1A:2F:1C:53:3A:39:B7:CB:47:98:FA
X509v3 Authority Key Identifier:
keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:da:42:7e:7c:be:30:a9:1c:d7:08:ce:7f:f8:fd:b6:dc:
fe:30:94:a6:45:66:52:73:e3:49:f6:ba:5e:8a:54:92:8b:d0:
4a:21:03:08:33:02:4d:16:af:df:96:0f:5a:83:a4:fa:d9:b6:
97:1f:df:7d:f7:4b:bd:f4:fd:76:9a:7b:4b:bd:c2:1d:f9:40:
37:a3:58:1d:06:45:c9:c4:8a:f1:0a:de:80:52:8e:35:ff:a1:
ea:c7:db:05:f4:ba:23:ac:1d:41:9e:2f:75:c7:bb:d0:5f:ca:
11:df:26:71:0b:77:8a:35:00:82:2c:07:a2:eb:9c:f0:95:c0:
22:24:2b:88:ba:ae:4b:a2:9d:9b:95:d6:17:96:8a:91:c2:b7:
2d:a8:d6:58:f9:61:06:2e:97:dc:bb:b2:b4:b4:46:91:9d:b6:
eb:be:51:dc:b7:1d:11:f0:fa:12:9e:ab:13:3e:01:aa:32:f5:
94:84:93:95:c4:69:45:2e:09:d6:28:12:46:0c:35:50:5b:71:
a5:e5:3b:ed:b9:bf:c7:e3:c7:71:94:57:5c:c8:32:ce:7d:d7:
40:94:3f:b4:56:35:4c:da:41:e8:d9:f9:e3:37:80:9c:f8:1b:
8b:36:4d:94:7f:be:e1:64:f9:6a:aa:d1:ec:8c:50:ec:a8:1d:
8f:48:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:07 2026 by rpki-client