Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: dEl1bMiVI2ex1erJblL6hizDxGEx2gIcNZRhmeciYqI=
Subject key identifier: 96:FE:1B:60:39:B9:4C:04:B9:4D:C5:DF:85:A1:96:EA:F5:8B:46:5D
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019EC2C9217E2D20D8A96597A1F296DA1FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0CAA
Signing time: Sat 13 Jun 2026 21:00:21 +0000
Manifest this update: Sat 13 Jun 2026 21:00:21 +0000
Manifest next update: Sun 14 Jun 2026 21:00:21 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: TLVFD0/f8b/aeCgH2eF0jSAYavF/w3JFnY2Cmj4btRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:21:7e:2d:20:d8:a9:65:97:a1:f2:96:da:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Jun 13 21:00:21 2026 GMT
Not After : Jun 14 21:00:21 2026 GMT
Subject: CN=96fe1b6039b94c04b94dc5df85a196eaf58b465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:27:e1:06:98:0c:41:2c:48:28:92:17:cb:
c3:f0:ad:7d:85:4e:58:34:45:16:83:bc:fe:8b:16:
ac:e0:ec:10:5a:f5:c8:89:23:d9:48:d8:a8:e4:3b:
aa:40:86:42:f6:9f:e1:77:52:84:6e:64:f2:86:dd:
ca:81:d1:b5:ea:94:58:1a:86:e4:79:7e:9e:be:fc:
a4:d9:39:4a:32:48:cf:d5:3b:a5:60:d9:30:5c:87:
ec:b2:34:cb:8c:a0:4e:1f:4c:77:af:c0:28:bf:53:
de:e5:04:49:e4:cc:fb:4f:be:ea:4e:57:81:d5:07:
64:da:d8:31:4c:54:b6:c6:05:de:11:21:65:ec:24:
29:22:80:9d:6e:7e:a5:37:2f:dc:73:2c:db:83:11:
df:89:85:3b:a8:68:e9:b4:eb:0b:97:6c:ef:35:10:
97:34:58:52:5f:2b:70:40:06:26:68:31:92:97:a5:
bf:64:e1:f7:a7:9f:b5:6d:cd:ae:46:d1:a0:e4:62:
75:0f:af:1c:fd:af:ee:c5:66:9a:76:61:dd:9a:06:
27:3d:a1:86:2a:2e:b1:a0:47:2b:65:87:f1:e4:2a:
32:0d:ef:70:d6:c7:50:5d:0d:72:d6:52:4d:56:49:
4b:69:92:f6:89:47:c0:0d:4c:6c:66:46:af:f9:aa:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:1B:60:39:B9:4C:04:B9:4D:C5:DF:85:A1:96:EA:F5:8B:46:5D
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:98:6c:22:f4:1c:eb:22:1c:43:2a:c0:ed:db:8e:5c:38:
1d:94:2e:c6:2d:1b:2c:f8:ff:13:c0:b9:ce:ed:92:ab:5b:60:
99:a3:ab:d2:95:b5:8c:1a:f3:b5:86:4d:b7:c1:58:9d:4e:db:
9e:14:63:8e:63:43:1b:7b:32:43:75:65:11:f2:a1:2e:fc:63:
9b:50:d4:14:f5:3f:05:c3:5c:8f:5b:ee:88:61:8b:4a:f7:d8:
8b:56:31:61:99:9b:52:b8:a2:8d:f0:c4:09:5b:5b:c7:29:70:
ed:5c:f1:26:05:4a:e1:21:e9:c0:43:ac:15:b7:8b:02:ca:ce:
56:b7:6a:99:5f:a1:7e:d7:b6:8e:04:d7:48:7b:5a:f5:45:b4:
13:74:6d:f5:2f:56:81:37:f2:d0:53:10:52:36:a9:05:7a:ea:
9b:7a:35:d6:41:78:f2:c9:41:79:b4:9a:1c:0d:67:3c:05:9c:
1b:40:10:c5:c8:01:7d:d5:bc:1e:c1:28:18:4e:29:b6:4c:9c:
9a:34:d9:93:d4:5e:68:2f:16:28:29:28:ea:0e:47:fe:5d:0a:
66:6d:eb:55:76:fc:77:dc:43:32:18:39:a9:02:85:c7:3f:2e:
e1:9d:00:1c:d2:7b:91:d7:83:08:c6:10:8b:c5:ea:7f:10:da:
99:30:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:51 2026 by rpki-client