Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier: jzY/H1GHv+zaYrQlMB9bOEIFASgpQsJ12urTY0wqLWk=
Subject key identifier: B6:75:B7:01:3B:32:5C:20:B1:C0:EA:FD:70:61:C8:66:F3:66:0E:8A
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial: 019D26CCDE43DEE0EB50F37C61A0B883E0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: JaUp9RyOJjTdEpITWZruhUyyCjVnT1GTyZsciHngRR0=)
2: kf5Z8uwtQg4_fRHhJwlsy7HUpuY.roa (hash: h5g52iMUxElJ8ULuCrT2oQz8CHmqTBslvGMi61f4Mws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:de:43:de:e0:eb:50:f3:7c:61:a0:b8:83:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=b675b7013b325c20b1c0eafd7061c866f3660e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:5d:ce:d3:c6:fd:e9:0f:af:7b:86:95:cc:
6a:7b:91:07:82:48:f6:98:8b:f7:41:10:87:19:cf:
99:46:c5:83:7f:b1:9a:56:67:87:36:4e:84:43:2f:
40:4d:fc:cf:a7:5d:97:9c:e4:61:08:a9:2c:6e:d2:
2f:ab:79:4a:31:c0:76:03:5a:80:90:ae:cf:23:e3:
cb:63:3c:4a:ee:85:02:f4:c5:28:29:e7:fb:a2:cf:
7d:d0:c2:b4:d2:b8:9c:62:be:f2:8a:6c:92:3e:c2:
98:27:9f:e6:58:6a:af:e2:6e:56:44:04:37:0b:70:
65:9c:22:7b:2d:33:4e:28:97:f4:a9:14:ce:b1:46:
25:fa:68:8a:e6:ad:51:97:e3:1f:78:f9:16:f4:72:
48:b2:a8:d4:65:66:34:79:88:b9:12:48:a4:92:86:
05:80:9c:a3:e1:ba:76:fe:b1:46:14:31:28:83:ad:
47:fd:81:29:f3:92:71:78:4d:c2:ee:91:db:29:17:
ad:cb:16:3e:83:b4:fa:83:d6:39:3f:ab:0f:0a:e0:
a3:f9:7c:fd:cb:21:c3:b2:c3:3f:18:37:97:e7:24:
b8:08:de:84:13:34:cb:40:d5:30:f3:b0:a2:9f:e1:
77:63:1d:aa:05:7b:45:b5:93:8c:78:56:29:88:c4:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:75:B7:01:3B:32:5C:20:B1:C0:EA:FD:70:61:C8:66:F3:66:0E:8A
X509v3 Authority Key Identifier:
keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:a0:7b:17:f8:b4:17:df:43:85:d4:1d:f2:ab:fc:32:79:
5e:fd:65:e9:55:0f:1a:c2:0e:d7:02:77:14:df:58:44:65:ec:
03:91:53:bf:67:fb:9d:0c:5a:bc:d9:cc:06:89:38:30:85:53:
68:d2:2c:16:b2:5c:40:3f:34:ff:df:ee:2f:a5:8c:e3:6d:a9:
d2:6f:be:da:0d:57:69:c1:b7:55:c8:4d:ed:b8:0a:6f:a9:f9:
cc:9a:3f:23:26:90:2e:a9:a6:3a:e1:70:70:e7:67:1a:cb:09:
36:5c:e9:45:3c:3d:e5:e7:ff:e5:c0:69:8e:cf:f0:3b:52:cb:
9c:b6:de:e7:86:44:78:c0:63:04:97:6f:7c:57:42:d8:9d:dc:
7b:b3:97:1b:96:a7:f2:16:2c:5c:22:a4:ae:0a:40:26:5a:d3:
f5:d6:9d:b5:7e:b4:95:89:a0:31:0a:e9:bc:53:53:1e:8e:4e:
7f:45:8f:77:76:cb:37:c4:16:ef:1d:8d:98:7f:72:a6:30:e1:
4c:cf:33:28:fc:70:37:21:1f:4d:cc:0b:3e:04:f0:61:17:c2:
93:ee:40:e4:4a:f8:63:3b:c7:a2:ee:e2:4f:30:98:ca:70:c2:
13:cc:db:c8:d0:01:f0:35:a8:f2:ab:9c:e2:53:d3:6c:99:f5:
93:ac:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:22 2026 by rpki-client