Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: SMwUF2v1t0B+hmn7QhI5EjDOJEqU+9F7LYG/5HQVOJM=
Subject key identifier: 83:9F:B8:46:44:8B:88:04:D7:14:61:AA:C1:40:1C:0F:92:40:62:76
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019D2771B88FAC4262628639EAF3D80F63E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: FgRmxpbZjNNBXXN+Y0CcQNDOIQJlsTsgn2PMb7l4sWE=)
2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b8:8f:ac:42:62:62:86:39:ea:f3:d8:0f:63:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=839fb846448b8804d71461aac1401c0f92406276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:3f:3e:2b:7e:52:06:1e:b0:24:0c:f2:9f:
95:c6:15:1a:c8:19:92:41:6d:24:63:97:99:01:a3:
4e:59:ce:1b:47:f5:c7:50:52:98:a1:00:54:4d:6a:
97:83:8c:ac:bc:0d:19:68:5b:f3:86:4d:3a:f1:73:
df:73:b4:63:70:d1:e2:8d:60:96:10:9e:e5:ed:96:
ba:22:6c:1d:8e:ba:93:c9:31:97:17:b6:6f:7b:e4:
2d:b8:a2:a8:4c:48:9c:c2:ee:fc:8b:21:f4:c3:32:
62:ff:aa:a4:be:44:e2:82:18:39:03:dc:c5:05:ca:
c2:b4:65:b1:b6:50:28:d7:5a:0c:c4:d8:55:ae:4a:
05:2e:b8:7d:ec:da:a2:6f:eb:cb:1d:db:e3:27:db:
23:da:80:0a:14:ea:69:73:c0:cd:3c:93:75:0e:30:
b2:5f:96:bd:e1:4f:f8:bc:fa:4d:96:2c:59:8d:19:
ee:8f:b5:07:99:8a:fa:0a:ef:d4:7b:f8:39:88:ed:
5d:c2:69:82:29:4c:6a:14:d5:1f:85:e2:ef:c4:f6:
70:4e:f5:c1:5a:c8:6f:f1:14:a9:f5:3b:d8:a9:f1:
d3:73:b9:a5:33:36:3d:ce:3b:cb:8e:e3:46:a4:04:
e4:78:1d:ad:b7:10:cc:96:fe:11:34:25:3f:40:01:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:B8:46:44:8B:88:04:D7:14:61:AA:C1:40:1C:0F:92:40:62:76
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f5:cc:1c:1d:96:2d:a6:03:09:fc:7a:07:95:c8:dd:91:96:
fb:4a:a6:15:62:c3:be:b8:86:2d:cd:fb:d0:63:a6:02:88:5a:
49:2e:7e:39:9d:b4:e2:c0:89:10:42:fd:d5:fd:17:1e:c0:ae:
18:b2:18:08:e7:a4:a1:32:dd:da:2a:c4:8d:88:ef:4c:2a:06:
5a:e9:e9:b0:3a:40:c7:be:37:59:84:fa:2a:3e:e7:2e:5f:a8:
b1:6c:50:50:0f:ca:54:94:e3:a4:0d:d5:d4:5a:ab:4a:b3:12:
75:69:df:94:28:39:d6:17:4e:e3:91:15:7c:d7:05:f9:ba:69:
bf:e2:12:08:f8:99:1d:a6:d4:db:9b:d4:1b:98:3a:06:66:c9:
a2:c6:d0:bc:55:b5:9f:ca:fd:57:4a:c9:af:76:ad:bf:42:65:
00:b5:09:01:a7:94:f1:09:57:18:cf:63:75:bf:4f:95:2b:f4:
af:1f:b2:41:40:67:d6:cb:80:bd:54:f6:f0:70:86:04:14:e1:
59:1b:d5:18:19:99:72:be:f7:51:86:8e:c7:8e:87:ae:ee:48:
20:4f:37:c1:c3:35:12:c3:3e:87:e0:e3:3d:50:b0:80:61:de:
5d:07:c6:fd:83:a9:a6:b4:de:8f:8a:95:ee:2e:64:26:b0:39:
6f:a8:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:01 2026 by rpki-client