Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier: iR+rhG+AUYTuynvrQLDZ1TnEwm/bE1q6GZ8p982R8To=
Subject key identifier: 7D:67:7C:F7:4E:97:1D:38:82:7B:47:83:4E:8D:E4:36:9F:AD:F7:1D
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 019D292974F00F2AF1DB17479C4CF694DEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number: 1422
Signing time: Thu 26 Mar 2026 08:01:15 +0000
Manifest this update: Thu 26 Mar 2026 08:01:15 +0000
Manifest next update: Fri 27 Mar 2026 08:01:15 +0000
Files and hashes: 1: kq-hWSmz-MFl73s5gbREYrag4Mo.roa (hash: F1nBzA9PPwvdvb6M3PbhCg7MtCLOKfzqRqmw7zMeMt0=)
2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: n40Ewo9SUQSeSWoFrwFwTAfB5dYQIbSW4yn5mIJxr2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:74:f0:0f:2a:f1:db:17:47:9c:4c:f6:94:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Mar 26 08:01:15 2026 GMT
Not After : Mar 27 08:01:15 2026 GMT
Subject: CN=7d677cf74e971d38827b47834e8de4369fadf71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:7f:11:4a:4d:78:30:dd:0b:14:0d:26:e2:
a5:7c:f3:57:be:89:e3:25:24:23:3e:c4:a3:b7:26:
63:01:c2:da:59:c4:af:44:54:88:dd:81:9f:49:95:
84:50:7a:55:b4:74:57:c2:78:90:02:1e:6b:e6:7c:
d9:c0:aa:71:58:1b:fb:cb:71:0f:99:54:12:82:61:
d4:83:ff:dd:64:2b:60:30:35:ba:e8:38:e2:86:31:
17:e0:5c:b8:ec:2e:dc:76:6c:5a:ed:4e:d6:4e:0b:
b8:e1:91:48:37:85:79:69:3b:ce:95:51:c3:5c:50:
8c:54:ee:08:5b:ac:d2:68:66:2c:89:ad:bd:a2:3f:
fd:10:ae:b8:c2:90:ba:df:25:11:10:2b:50:2e:1e:
3a:2d:2b:9c:80:1e:eb:72:79:63:ef:77:03:6d:1d:
a3:49:87:67:0d:8f:a8:a6:1f:f7:d9:78:87:7e:7c:
99:6b:8b:75:74:f3:af:73:ac:9a:96:60:17:47:15:
5c:be:ac:b6:f9:4c:7c:ac:23:b1:4e:65:29:63:9f:
30:4e:29:47:bc:91:cc:e3:c0:b8:53:dc:df:1a:74:
75:40:df:6c:ce:18:1c:fe:6e:23:f5:c9:0c:53:fa:
dc:bf:d9:4f:ac:de:8e:a8:2a:dd:f3:3f:5f:f8:2c:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:67:7C:F7:4E:97:1D:38:82:7B:47:83:4E:8D:E4:36:9F:AD:F7:1D
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:c1:af:0a:66:62:70:7f:77:7e:ab:26:5d:c0:e3:da:0a:
5d:9c:ce:66:76:6a:bc:bb:17:d1:54:95:a0:6b:20:74:47:5a:
96:2e:92:c2:f1:25:13:b0:01:67:15:c9:d0:a3:25:b0:63:70:
29:9f:a3:9f:ef:2b:60:01:ff:89:57:f9:29:94:97:dd:f7:0d:
35:a2:25:6e:bc:ed:1a:33:f1:84:8c:9c:6d:ea:65:a3:5b:3a:
e2:22:10:91:53:06:35:b6:0c:bf:e2:1e:d8:69:cc:03:22:23:
5e:e4:2e:94:21:2b:10:41:2c:79:66:e2:5b:77:1e:38:e5:87:
76:fe:ab:3a:45:8f:97:ab:68:56:42:87:ed:72:c4:b6:d5:48:
54:c7:0f:07:18:1c:16:db:7e:db:2a:60:17:86:cc:b8:0b:68:
de:6a:e3:6b:7f:24:19:d2:e3:f1:da:10:56:7c:02:a3:ff:b0:
35:d5:69:79:e9:4f:78:e6:00:7e:21:28:47:b0:11:35:3b:7b:
10:ee:df:46:3f:f5:06:57:32:ca:7d:8d:ed:d8:24:be:e7:c6:
1c:37:7f:36:78:ea:0c:55:fb:bd:f1:1d:17:cb:a9:f7:56:83:
01:83:51:eb:44:40:12:2b:fc:5c:06:c0:6c:ba:6f:5a:31:2f:
b6:02:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:48 2026 by rpki-client