Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: REMJvuuUeYS+GyVWIHcwFPYoNojRbh1872y11nQj2sk=
Subject key identifier: 14:6A:92:80:97:7C:BE:AB:55:CF:68:07:66:D7:E5:74:23:2E:CE:1A
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019D9773D43DDE2A1F011E7A8A8ABA75CA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0C0F
Signing time: Thu 16 Apr 2026 18:00:43 +0000
Manifest this update: Thu 16 Apr 2026 18:00:43 +0000
Manifest next update: Fri 17 Apr 2026 18:00:43 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: j2//K8phSpBtjvZoBZvKr8K5oyLjdsPKuwewtiFq8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:d4:3d:de:2a:1f:01:1e:7a:8a:8a:ba:75:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Apr 16 18:00:43 2026 GMT
Not After : Apr 17 18:00:43 2026 GMT
Subject: CN=146a9280977cbeab55cf680766d7e574232ece1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:1e:04:c3:34:10:e9:fa:4f:5e:82:d8:3f:
4a:e2:88:82:e3:78:0d:63:b6:0e:c8:18:7e:86:6d:
90:be:52:75:cc:98:19:f3:87:3b:f5:14:29:4e:c6:
6f:cd:09:08:f6:d6:67:62:ab:65:e1:c0:bf:90:52:
67:ec:80:b7:6c:4a:95:e5:25:36:4c:6c:ab:fe:3c:
56:20:04:0f:15:45:45:2f:fa:2a:e0:d1:a0:2b:79:
ee:bf:c0:53:23:12:f4:af:bc:0e:9b:02:24:ae:dc:
0d:1e:73:cb:55:c8:b9:c5:a9:b2:27:21:fb:98:03:
20:f6:00:4d:61:34:b7:36:43:2e:51:86:b3:d4:f4:
b0:11:01:18:b1:b8:ee:2b:2e:fd:e8:cc:6a:2b:8f:
14:d6:37:a8:6c:30:f6:7b:49:84:90:57:6a:8e:39:
e9:f5:2b:55:02:67:b8:4f:72:72:51:e3:94:11:4a:
a2:ee:e9:e4:c8:7d:11:0a:c3:24:46:af:78:e4:af:
a6:9c:9c:9f:99:de:0f:9e:66:52:c7:f8:fb:10:88:
68:c3:65:c9:6a:4c:36:f5:8f:f6:b9:98:6e:06:12:
f9:ff:66:11:da:3d:7a:d1:44:06:0b:eb:09:48:a4:
97:bd:2f:9f:c9:30:57:59:95:af:0f:64:2d:6a:21:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6A:92:80:97:7C:BE:AB:55:CF:68:07:66:D7:E5:74:23:2E:CE:1A
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:88:96:c5:2c:5c:b4:56:fb:20:1d:e7:f7:df:1a:d8:c7:32:
cb:be:14:15:df:05:a7:69:20:e0:99:fa:a6:8a:78:b9:e8:98:
59:6f:89:72:96:5e:5f:d8:c5:ab:26:75:29:57:2e:c1:0f:81:
7e:85:64:2f:1b:2b:f1:5f:40:e3:21:64:bf:ea:a9:12:55:ab:
1a:7d:d1:1b:31:9d:c9:16:b7:14:ad:25:fd:fe:2c:f8:f3:8a:
4c:3e:36:84:9e:61:22:64:3c:d4:11:ac:b4:1a:fc:5f:c3:f0:
a0:c7:f3:d9:50:24:61:bf:41:95:1e:f6:61:55:2f:01:26:34:
46:97:48:80:93:ef:fa:df:9d:f7:20:48:04:09:92:77:54:90:
fa:37:89:0e:68:91:db:38:b5:a0:39:13:60:e8:19:d6:11:9b:
bc:ff:a7:6a:9e:ef:c6:8d:8a:d2:a0:1a:0a:4a:30:0c:13:37:
93:5f:6d:a4:34:f1:2f:3d:81:ff:cd:1f:ea:85:ff:62:b5:dc:
cb:f8:40:b5:7c:3e:f2:d5:d2:2e:2f:44:c0:a3:68:25:c3:6f:
b5:f5:e2:e4:ea:8e:d1:7f:c5:79:0a:0d:17:ea:f8:4d:fe:cc:
f8:aa:b7:62:6d:80:35:2b:e1:e0:20:57:8d:92:3a:78:07:7f:
3d:bf:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:45 2026 by rpki-client