Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: PY5drDZUClSkog3Y41ybQSpfh8qAfkrfqq3+Sq3+BqI=
Subject key identifier: 5A:42:CA:6F:F6:EF:E6:3B:37:16:0E:81:E9:6E:5B:8A:92:30:E0:9C
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 019D3451D1D9D7A2483C7EA55C82747D8BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0F3B
Signing time: Sat 28 Mar 2026 12:01:10 +0000
Manifest this update: Sat 28 Mar 2026 12:01:10 +0000
Manifest next update: Sun 29 Mar 2026 12:01:10 +0000
Files and hashes: 1: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: ZpU6170X/D0dCTQXfN6V5sTykFwlgMOoPhHttZAk64A=)
2: n28cYCSgTnP520B781yYlApy_Gg.roa (hash: oPppogarovRMmUPnZholMB6dsQYDDsQ39+mpcmiwa7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:d1:d9:d7:a2:48:3c:7e:a5:5c:82:74:7d:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Mar 28 12:01:10 2026 GMT
Not After : Mar 29 12:01:10 2026 GMT
Subject: CN=5a42ca6ff6efe63b37160e81e96e5b8a9230e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:72:79:11:6a:3a:18:22:ca:2c:10:15:61:
66:d5:98:b0:d9:6a:d9:74:70:93:02:99:b4:fa:77:
a3:bb:83:b6:4c:93:50:c6:e7:2c:e5:b2:48:b4:1d:
ac:40:9c:b0:e8:69:c6:11:9a:a4:c8:0c:07:f2:14:
1f:d9:b0:22:45:1d:3f:e0:6f:a2:07:6e:4b:cf:88:
e2:ac:61:1e:11:b0:e9:1d:6f:1d:62:9c:ef:44:8f:
4f:5d:ea:a0:a4:5e:5f:40:a3:1e:2a:16:fd:38:4a:
a8:4b:c4:41:fb:e3:56:e7:71:38:24:63:da:78:78:
ac:8a:ab:00:27:79:e0:a9:e1:9d:3b:f6:3a:ae:27:
fb:fd:7c:0d:ee:fe:a1:8d:f1:fe:4c:66:5c:b7:ce:
be:3f:cc:fa:99:5e:33:79:85:c8:ed:e0:f6:c1:fd:
bb:b9:b5:50:6a:62:19:87:54:0e:61:e0:08:a3:18:
73:2d:21:1e:60:90:e0:4f:2c:60:e6:6f:ff:e1:b6:
ef:54:11:cf:42:2d:a7:10:41:04:3c:d0:9b:08:21:
80:c2:df:55:ec:b3:89:68:4c:1f:a6:6c:7a:c9:1c:
e4:39:d8:4d:cb:5f:36:25:bd:22:c2:68:7c:23:4a:
6f:c2:a4:84:c0:eb:a8:7b:67:57:3f:1c:8c:2f:d2:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:42:CA:6F:F6:EF:E6:3B:37:16:0E:81:E9:6E:5B:8A:92:30:E0:9C
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cc:73:00:e5:20:60:cf:d4:65:07:1f:38:d1:ce:30:20:a8:
1f:d0:4c:ab:f5:67:f2:46:e9:5f:a0:0d:3f:04:e2:59:29:c8:
e3:45:88:c0:71:08:52:ba:59:83:15:92:08:fd:99:5c:3c:d1:
34:c8:82:12:94:0c:c6:78:af:37:52:70:85:80:a8:d3:68:66:
0c:31:f8:df:90:dd:05:2f:6f:1d:5e:5d:84:d4:19:e5:30:be:
c5:a3:de:11:b0:a7:17:f1:18:64:ba:90:0b:fb:7e:1c:9a:2a:
b3:b8:cd:49:b3:8d:1e:a3:5e:3c:a9:e1:56:66:63:fd:85:5e:
85:68:40:b3:d1:e1:16:e9:a3:5a:6e:3c:db:f5:2a:53:6b:82:
32:02:98:1a:c7:74:c5:2a:17:c8:4d:a4:92:7c:b6:19:fc:5a:
ca:31:1f:2f:4a:1a:45:b9:17:15:02:66:c7:63:49:3f:02:72:
55:32:02:01:c4:dc:18:2f:c0:4e:93:60:c4:62:53:e8:b3:f9:
fd:40:30:4e:e9:35:a2:48:67:48:82:08:ae:17:29:87:7c:2e:
6f:68:28:1b:41:e1:d0:62:bf:01:54:a3:80:dc:17:95:28:58:
9f:85:0b:63:70:1f:81:42:d2:f4:4c:26:fc:a2:6c:84:88:72:
59:db:5b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00UdHZ16JIPH6lXIJ0fYvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjVhZDJiNGU3MzhmNTQyZmEwZTY4MTM4ZjM2MjY2NDQx
ZTI5YTAwHhcNMjYwMzI4MTIwMTEwWhcNMjYwMzI5MTIwMTEwWjAzMTEwLwYDVQQD
Eyg1YTQyY2E2ZmY2ZWZlNjNiMzcxNjBlODFlOTZlNWI4YTkyMzBlMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WlyeRFqOhgiyiwQFWFm1Ziw2WrZ
dHCTApm0+neju4O2TJNQxucs5bJItB2sQJyw6GnGEZqkyAwH8hQf2bAiRR0/4G+i
B25Lz4jirGEeEbDpHW8dYpzvRI9PXeqgpF5fQKMeKhb9OEqoS8RB++NW53E4JGPa
eHisiqsAJ3ngqeGdO/Y6rif7/XwN7v6hjfH+TGZct86+P8z6mV4zeYXI7eD2wf27
ubVQamIZh1QOYeAIoxhzLSEeYJDgTyxg5m//4bbvVBHPQi2nEEEEPNCbCCGAwt9V
7LOJaEwfpmx6yRzkOdhNy182Jb0iwmh8I0pvwqSEwOuoe2dXPxyML9JsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpCym/27+Y7NxYOgeluW4qSMOCcMB8GA1UdIwQY
MBaAFFRlrStOc49UL6DmgTjzYmZEHimgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMt
MGQzYWQzNmViMTYxLzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMtMGQzYWQzNmViMTYx
LzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsxzAOUg
YM/UZQcfONHOMCCoH9BMq/Vn8kbpX6ANPwTiWSnI40WIwHEIUrpZgxWSCP2ZXDzR
NMiCEpQMxnivN1JwhYCo02hmDDH435DdBS9vHV5dhNQZ5TC+xaPeEbCnF/EYZLqQ
C/t+HJoqs7jNSbONHqNePKnhVmZj/YVehWhAs9HhFumjWm482/UqU2uCMgKYGsd0
xSoXyE2kkny2GfxayjEfL0oaRbkXFQJmx2NJPwJyVTICAcTcGC/ATpNgxGJT6LP5
/UAwTuk1okhnSIIIrhcph3wub2goG0Hh0GK/AVSjgNwXlShYn4ULY3AfgULS9Ewm
/KJshIhyWdtbeQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:24 2026 by rpki-client