Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: McCh0QYYkZiLJ8aVhUo1jr4VAnSyVd1St8LvjSeUUA0=
Subject key identifier: 96:F7:35:F6:DB:8A:70:8D:60:B2:0F:FA:07:1F:25:DE:FE:7C:24:81
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019D2884C5554A0009D3E372152825479530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:23 +0000
Manifest this update: Thu 26 Mar 2026 05:01:23 +0000
Manifest next update: Fri 27 Mar 2026 05:01:23 +0000
Files and hashes: 1: bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa (hash: brHlGv5imLHwbxwJPoUHI3T7npY3uz8hyi909TKqiCI=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: tIw1gn46VdHIoQ7MjdfAOo81tTODlXG1b5SZJrzTpes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c5:55:4a:00:09:d3:e3:72:15:28:25:47:95:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Mar 26 05:01:23 2026 GMT
Not After : Mar 27 05:01:23 2026 GMT
Subject: CN=96f735f6db8a708d60b20ffa071f25defe7c2481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:39:35:41:38:9e:29:ac:a5:01:fb:80:0c:
5a:61:c0:01:d5:c7:88:ec:0f:54:72:25:61:b3:e1:
0f:ad:36:19:7c:2a:3e:2b:96:b2:52:d4:90:de:33:
05:7f:8d:15:c7:1c:2d:06:81:d7:3c:03:f3:46:93:
16:00:c0:5c:c8:ce:b9:cc:cf:ed:2a:6a:f2:44:d7:
80:cd:69:8b:b3:ff:95:74:f4:0e:c5:45:30:8b:bf:
e7:81:e3:e4:64:76:79:1d:28:f0:59:46:65:e0:05:
e2:e9:e3:3e:02:35:45:b7:d5:21:36:b2:14:e1:97:
a8:ab:5b:2e:e6:8b:fe:a9:ba:61:16:54:c7:51:2b:
b1:de:98:2a:00:95:70:2b:14:43:71:ab:9a:af:74:
f9:dc:0f:04:2b:01:bc:37:c0:87:54:94:30:56:e1:
fd:63:cc:5d:41:b5:ee:a6:78:27:4b:38:fa:72:c0:
16:99:49:70:f9:38:3b:3a:bb:14:7b:5a:59:0d:8e:
41:a5:5e:12:95:26:0b:0c:df:72:2f:0a:4e:1e:68:
c6:df:00:bd:84:d5:49:19:c4:8b:6e:7e:09:c8:34:
5a:03:67:5d:e4:70:e4:75:0c:1b:ef:2d:25:72:e0:
f1:44:5e:e4:d6:3c:d4:86:7d:44:65:a1:d4:f1:e4:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:35:F6:DB:8A:70:8D:60:B2:0F:FA:07:1F:25:DE:FE:7C:24:81
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:99:ec:3b:57:e5:83:1f:15:5c:62:3a:94:d7:b5:81:15:98:
54:5b:26:5e:0f:f8:fd:7a:8e:c9:d8:a7:5f:13:4f:cb:1b:14:
fd:07:0a:68:68:15:87:25:b9:cf:68:30:2a:49:35:03:04:c9:
76:5b:13:1d:47:61:71:f2:30:89:fd:60:61:33:6f:ba:cc:4b:
db:1e:39:2e:15:a3:25:03:f3:72:67:6c:36:14:18:37:d2:a1:
28:47:d4:4b:6c:f4:ee:ff:cc:4f:a9:7d:15:be:5e:39:83:e8:
fa:ec:c2:64:23:e8:a4:cc:e9:87:55:50:5c:6d:3b:12:96:a9:
48:20:52:80:cb:ff:7b:5e:16:72:be:35:6d:17:b6:6e:02:c1:
29:dc:40:d5:2b:b9:c9:f5:a3:5c:98:b6:a1:11:42:c7:6e:89:
30:40:b0:d0:25:15:81:02:67:90:4c:30:bf:6f:37:3f:6e:0a:
e9:ca:c6:dd:79:87:39:4d:f6:a8:05:72:47:8a:a5:83:85:72:
73:3e:09:07:53:e1:7f:ae:39:ad:ad:ae:8c:de:ed:a0:c3:b3:
d8:8e:90:46:cd:fd:26:1b:73:1c:de:b1:c4:50:52:f7:bc:c3:
fb:95:1c:6e:29:19:56:a5:c0:96:7d:fd:81:92:d9:58:26:51:
75:0f:51:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohMVVSgAJ0+NyFSglR5UwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTlkNTA4NjM2OTA3NmE3OGQ3NjE2MzhiMzJhOGE5Yjhl
ZjcwZTcwHhcNMjYwMzI2MDUwMTIzWhcNMjYwMzI3MDUwMTIzWjAzMTEwLwYDVQQD
Eyg5NmY3MzVmNmRiOGE3MDhkNjBiMjBmZmEwNzFmMjVkZWZlN2MyNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02U5NUE4nimspQH7gAxaYcAB1ceI
7A9UciVhs+EPrTYZfCo+K5ayUtSQ3jMFf40VxxwtBoHXPAPzRpMWAMBcyM65zM/t
KmryRNeAzWmLs/+VdPQOxUUwi7/ngePkZHZ5HSjwWUZl4AXi6eM+AjVFt9UhNrIU
4Zeoq1su5ov+qbphFlTHUSux3pgqAJVwKxRDcauar3T53A8EKwG8N8CHVJQwVuH9
Y8xdQbXupngnSzj6csAWmUlw+Tg7OrsUe1pZDY5BpV4SlSYLDN9yLwpOHmjG3wC9
hNVJGcSLbn4JyDRaA2dd5HDkdQwb7y0lcuDxRF7k1jzUhn1EZaHU8eQG8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb3NfbbinCNYLIP+gcfJd7+fCSBMB8GA1UdIwQY
MBaAFK7p1QhjaQdqeNdhY4syqKm473DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODct
MjAxMzYxOGMwNGZmLzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODctMjAxMzYxOGMwNGZm
LzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopnsO1fl
gx8VXGI6lNe1gRWYVFsmXg/4/XqOydinXxNPyxsU/QcKaGgVhyW5z2gwKkk1AwTJ
dlsTHUdhcfIwif1gYTNvusxL2x45LhWjJQPzcmdsNhQYN9KhKEfUS2z07v/MT6l9
Fb5eOYPo+uzCZCPopMzph1VQXG07EpapSCBSgMv/e14Wcr41bRe2bgLBKdxA1Su5
yfWjXJi2oRFCx26JMECw0CUVgQJnkEwwv283P24K6crG3XmHOU32qAVyR4qlg4Vy
cz4JB1Phf645ra2ujN7toMOz2I6QRs39JhtzHN6xxFBS97zD+5UcbikZVqXAln39
gZLZWCZRdQ9RGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:54 2026 by rpki-client