Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: VkPtZJ83F7oN8nwtsu2/oHw3jqnBbjnTTxbDmAd8BBE=
Subject key identifier: 3E:EC:0F:CD:99:02:E4:76:E2:33:1F:BD:DC:62:65:00:4F:D9:9B:08
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 019D2A3C37A6E0CC764F4F2BB64C929C7BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 1480
Signing time: Thu 26 Mar 2026 13:01:22 +0000
Manifest this update: Thu 26 Mar 2026 13:01:22 +0000
Manifest next update: Fri 27 Mar 2026 13:01:22 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: tFzU5gYCgh+/Q0n4Ip9QPp+UPN2NNLrCWLZl4gC6VHI=)
2: gid3PHY7_WHPVtbluwSuNieeZ-Q.roa (hash: 4gqwUBOsuCwNSypnwWO7WCLX7NlTT/vUufoeKcrMUME=)
3: ziiqrtMgnlnu-hPLFOMONS1-3pU.roa (hash: 8ZnAKWsJ3RNRSyRqd1uds5FxjmnKS3VN0RT4iyIYFXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:37:a6:e0:cc:76:4f:4f:2b:b6:4c:92:9c:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Mar 26 13:01:22 2026 GMT
Not After : Mar 27 13:01:22 2026 GMT
Subject: CN=3eec0fcd9902e476e2331fbddc6265004fd99b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:96:4f:34:61:b8:ce:a8:80:d3:af:10:91:
53:03:7b:31:26:bb:f0:e2:3b:b8:0a:ff:76:ee:9b:
c8:f1:cc:06:71:59:b4:b4:88:2d:f5:03:93:5f:88:
0d:e8:26:99:e5:d2:3e:58:da:7c:c8:fe:3c:31:51:
d2:3b:60:1e:9e:1f:ae:a1:3c:5e:c4:0b:6c:f7:61:
b0:e6:6a:d1:17:98:53:86:e7:6f:34:29:71:43:f5:
bd:63:09:e0:74:15:ca:bf:ad:b0:ff:1e:b4:9b:61:
12:e4:7d:8e:5a:36:40:24:48:36:ec:69:f1:bd:bd:
e0:16:ea:cf:c0:9b:85:88:de:c0:19:df:5b:62:a5:
84:d1:57:c2:7c:3d:31:d5:27:be:e0:5e:e3:bf:9a:
c1:2b:01:d0:76:2a:78:13:63:d3:86:a1:a0:a4:b6:
c3:2f:1c:03:91:08:66:56:b8:51:99:12:68:c9:ec:
52:b3:89:20:55:d9:71:fb:4f:25:da:0b:f8:33:11:
20:fa:bf:1a:55:25:2e:b6:23:f6:e4:33:e3:65:c5:
2d:a0:39:2b:c9:25:48:61:e5:29:cb:a9:0f:51:20:
5e:41:4e:d6:60:6e:16:3e:26:26:06:03:89:f6:7f:
4a:87:5b:22:5d:46:24:3b:22:df:4c:a9:88:06:15:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:0F:CD:99:02:E4:76:E2:33:1F:BD:DC:62:65:00:4F:D9:9B:08
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:29:7d:ab:2c:af:f0:e4:ee:c1:ce:07:0a:89:b2:38:fe:b0:
fb:39:f3:be:8a:c8:38:38:9d:d2:ec:30:7c:91:66:11:17:f6:
1b:8c:dd:a2:b3:da:0b:35:59:42:a3:8e:9c:b4:b4:47:a0:46:
82:11:65:41:b6:50:73:ce:4d:8d:d0:63:11:23:9a:40:9b:35:
e3:79:f6:89:38:f3:37:e2:77:21:0d:3b:8d:5b:63:7a:76:aa:
b1:a0:df:ac:82:0d:ca:f0:b7:96:1d:ff:01:84:bb:54:f2:fb:
94:15:99:74:36:e7:fa:25:b8:2d:b6:51:1b:25:3e:5b:a0:71:
95:14:9b:b8:ce:64:ad:c5:f9:b9:c5:7e:28:74:66:c0:03:93:
e2:06:25:01:7e:d8:2a:49:dd:8f:5f:c3:ad:7a:53:a9:be:52:
63:27:82:ee:32:5c:14:31:86:73:27:93:15:cc:98:b9:b4:eb:
1a:4a:c8:84:27:11:d7:69:b2:ae:87:6a:d9:1f:f9:70:48:c8:
28:ef:1d:95:bd:e7:db:6a:26:0e:79:f2:17:fd:90:6d:db:85:
af:4c:3c:26:41:b6:e6:10:13:18:31:23:d0:2e:d9:1a:57:cf:
2c:48:a2:6e:f1:68:b4:20:e2:74:b6:65:c5:61:f2:18:bb:c2:
08:e9:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:10 2026 by rpki-client