Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: WfQI5ihXcspPRU1zhkZff2ac1xV5URhXiPh89OGQ2Mo=
Subject key identifier: 9B:E3:FC:73:D8:63:AA:1A:25:95:39:1C:B6:40:BF:F1:A3:47:22:17
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 019D25BA1A44AC1D31A7653E1DB0D829E751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 0BEE
Signing time: Wed 25 Mar 2026 16:00:46 +0000
Manifest this update: Wed 25 Mar 2026 16:00:46 +0000
Manifest next update: Thu 26 Mar 2026 16:00:46 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: I9LIh5fB1uNEXLWgHZyE5zK/L0ZifivxDtS951ZECJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:1a:44:ac:1d:31:a7:65:3e:1d:b0:d8:29:e7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Mar 25 16:00:46 2026 GMT
Not After : Mar 26 16:00:46 2026 GMT
Subject: CN=9be3fc73d863aa1a2595391cb640bff1a3472217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:8a:d4:c7:a0:bf:3b:f9:a5:32:e3:56:3d:
f9:81:5c:04:83:30:9c:71:07:32:37:d8:9b:33:85:
ec:ed:2a:b8:21:27:94:6a:e3:c9:bb:31:60:91:d3:
9c:4f:52:63:ad:b6:ea:06:59:0b:f2:28:7b:0d:c7:
25:a4:e5:c4:62:5a:85:4f:7e:1c:4a:98:36:5e:e9:
56:3c:d3:77:e8:c2:6b:cb:00:8f:da:49:51:c6:2b:
32:48:93:2b:f4:9b:13:32:c8:c9:d2:13:0d:8a:6c:
a7:d7:0e:96:58:f7:f2:a7:b6:94:e1:c6:50:8e:ab:
26:6b:b3:2b:b2:53:c6:08:cf:9b:c0:f2:84:52:83:
79:a8:ff:70:ef:34:87:89:07:79:34:f5:ec:00:85:
df:c5:07:bf:62:92:60:96:1f:63:ca:c7:86:e1:74:
f1:d0:0c:77:20:91:45:8c:9a:78:ac:ae:47:f3:64:
3b:d6:4a:4c:f5:ea:93:94:13:c2:18:d9:96:03:38:
24:c8:5d:47:de:d0:37:40:29:d0:d4:a4:08:89:06:
8a:41:b2:55:25:b4:e5:1d:a0:27:9e:ee:d7:01:72:
5e:c9:86:e7:a4:a6:71:7c:30:0c:c5:df:66:a1:55:
5c:bf:e3:4d:df:20:f6:4a:9b:0a:e6:42:f4:b6:7a:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:FC:73:D8:63:AA:1A:25:95:39:1C:B6:40:BF:F1:A3:47:22:17
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:46:48:d7:9b:b5:61:61:6e:d8:1f:e5:c8:e3:b0:97:e2:d2:
c1:9a:37:d6:f3:90:f7:b8:20:23:f1:55:3a:7f:5c:91:fb:89:
a4:0d:e6:25:5e:e5:8f:62:05:3e:cc:9c:a7:a5:04:c5:71:28:
c7:73:ee:09:31:72:90:84:9a:d3:b6:50:4c:d3:bb:eb:0e:cb:
6d:4b:e2:ac:53:6f:cf:55:88:4d:40:31:b4:72:a2:8a:c8:6c:
bc:20:fd:ab:79:8a:77:44:2e:25:6a:bf:da:5b:87:ab:91:33:
4d:00:ca:29:e3:7e:e8:1d:01:d3:d6:b5:4a:cd:18:d8:04:17:
8d:9f:21:95:b2:a2:7b:d3:09:52:96:6b:f0:fd:bd:ff:86:49:
43:fd:eb:a9:1d:93:bf:98:7c:24:b5:a4:6b:fb:52:23:8f:f9:
0c:71:a6:e9:0e:81:af:8f:3e:cb:79:78:8e:34:fc:5a:fe:86:
68:dc:95:b6:3f:37:c5:1c:1d:05:b1:80:8e:dc:07:5c:0e:66:
de:39:d7:f8:33:5b:54:9a:a1:28:34:07:c0:1a:cc:8e:da:a2:
76:d2:54:44:94:ab:c5:a9:55:91:c3:fd:23:35:09:be:4c:ed:
3d:af:ad:86:74:53:9e:2a:f8:2c:c9:8d:d6:ee:88:52:62:64:
81:74:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:47 2026 by rpki-client