Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: ujKSgATkILceB/7KCf83pOuDMOUVyHle5MFhHN9nMAI=
Subject key identifier: F5:68:BE:B9:2E:B3:78:36:02:4F:05:49:C5:7E:7A:AD:EA:82:85:78
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 01A0C47B478F6512B8E29FAFC9A813B50B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0DB4
Signing time: Mon 21 Sep 2026 15:00:08 +0000
Manifest this update: Mon 21 Sep 2026 15:00:08 +0000
Manifest next update: Tue 22 Sep 2026 15:00:08 +0000
Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: 9ELFP4AyNOlgl8xtjaSIJLMtiG6kfT0QToDQsgdJIyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:47:8f:65:12:b8:e2:9f:af:c9:a8:13:b5:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Sep 21 15:00:08 2026 GMT
Not After : Sep 22 15:00:08 2026 GMT
Subject: CN=f568beb92eb37836024f0549c57e7aadea828578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:69:93:41:6b:13:25:59:9a:c7:2f:1b:f6:
95:61:e2:ee:b9:6e:f8:49:1c:2d:39:78:29:68:e3:
80:11:84:82:77:e6:2a:53:f7:9f:0b:38:c3:b7:93:
da:36:af:d0:94:bb:d7:69:e5:1d:b0:3f:fa:69:48:
cd:5d:e7:58:89:90:a0:5a:89:40:76:a0:c6:f6:b1:
be:62:76:bd:85:a7:a4:bb:fe:f9:d1:77:d2:a3:c6:
bf:f3:cc:e6:fe:ae:e6:23:a3:be:a2:8e:8e:a8:84:
79:fa:2a:ac:f3:07:ee:25:3d:ff:ac:b5:12:21:93:
05:1e:09:fe:21:25:2a:22:25:51:06:92:af:1c:7a:
70:7a:f7:79:d8:be:7f:35:00:bb:b0:ab:f1:2a:10:
ac:8b:5f:c6:70:e4:ca:64:3c:45:c6:21:f8:8d:8f:
cb:b7:89:ff:28:99:d3:4e:bf:5b:60:b2:ac:65:bc:
f3:5d:ca:3f:22:69:48:95:11:8e:73:a1:00:47:ba:
ed:bf:ed:00:f7:c2:50:d2:50:8b:ec:f3:48:38:b1:
1e:13:66:32:73:5c:5d:35:37:85:1d:0c:fa:66:0b:
d4:23:fa:a3:41:33:f0:29:6b:a9:f3:63:c5:27:89:
e8:08:de:73:2d:51:58:eb:c3:9f:de:d2:8c:05:68:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:BE:B9:2E:B3:78:36:02:4F:05:49:C5:7E:7A:AD:EA:82:85:78
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5d:4e:47:c9:3c:36:46:ac:b5:da:33:12:08:e4:e0:0b:d7:
c7:c4:99:f1:20:9e:ec:81:51:30:2b:b6:0f:ac:1a:b1:9f:c4:
1e:a6:0f:73:98:1c:a4:e7:b6:c3:0a:c6:cd:d6:5c:32:74:5e:
90:87:6f:ff:d1:47:b8:ab:e2:1b:29:8f:0d:27:40:2d:66:63:
25:a8:90:4e:c0:27:b9:a5:54:84:61:e0:2c:d5:51:76:95:76:
c8:d4:c0:88:53:79:5e:17:d9:6b:b0:42:5e:96:0e:df:16:e2:
e9:ee:76:ab:1f:8a:ba:30:10:cd:60:10:16:81:4c:71:39:37:
f7:ba:ba:28:f6:35:76:4a:4e:7c:a8:e9:71:a2:7a:df:a1:54:
08:0a:67:cb:bf:49:e5:48:be:9a:5e:97:c8:04:fe:d4:75:31:
1d:31:c4:9e:02:aa:32:8a:b8:d3:de:28:00:2d:88:82:f0:96:
00:e9:f9:5e:4f:36:12:db:e0:47:83:c5:c1:34:2c:02:d4:9c:
ce:d3:d4:26:46:57:3c:f8:b6:86:f3:58:d3:31:71:a4:61:74:
60:06:f5:b8:93:97:26:59:80:a7:39:40:21:e8:a4:0f:5d:05:
72:75:c5:21:4f:d3:9b:43:3d:8c:e0:5e:a7:b3:09:d9:73:c6:
a6:89:70:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:43:47 2026 by rpki-client