Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: BpLBPP4Ssw/tqn/t3zMPcsjFnlMNgyqKVj/sqae8ZDE=
Subject key identifier: 4D:23:D6:73:7A:52:8F:08:0B:73:89:6B:99:C5:93:1D:CE:BA:2E:2A
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 019D288486EB6869D03F71DB4D5E1AF3666D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=)
2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=)
3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: tllMGMO/QoBgbvFJ8MpCja8X/luBZisjlFR+qGsxGeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:86:eb:68:69:d0:3f:71:db:4d:5e:1a:f3:66:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=4d23d6737a528f080b73896b99c5931dceba2e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:57:c0:89:c3:97:9b:60:eb:5a:65:60:c5:
db:6c:1f:9d:c7:43:db:b7:f8:f1:31:63:a3:71:05:
ab:37:ba:33:8d:b5:45:8a:0d:96:06:ce:57:f2:b3:
df:45:8c:fe:ea:e4:68:01:c4:ea:3b:a8:88:44:3b:
2e:49:8e:96:8d:e2:1e:49:b8:47:62:bd:e2:d3:24:
e9:8a:11:fb:8d:e5:68:1c:26:a3:f0:45:44:48:3a:
63:b8:e7:b0:2a:d8:1f:5d:a7:9d:5a:9b:f9:0f:65:
53:f4:a8:a9:50:f3:5a:be:0d:f6:e2:31:12:c2:39:
2a:26:18:d5:ce:be:33:0c:9d:c6:06:a2:5a:76:88:
e1:de:15:8a:6a:7d:6b:10:54:5a:6d:4f:69:4c:5e:
28:f7:a1:7c:bb:d4:fb:09:06:61:f3:5f:53:e7:36:
87:2b:01:c6:0d:c6:3f:c2:96:08:c9:11:b7:b2:89:
c1:ce:16:a9:a1:75:24:25:53:5d:02:a1:4d:17:60:
ea:f9:57:cb:8a:ce:8d:e6:95:a8:6d:b7:a9:07:20:
8c:b8:25:f8:3a:7b:1e:66:80:68:97:5f:e9:cd:71:
07:ec:fe:b3:5a:1f:59:8f:fe:97:6e:f5:fc:b1:73:
64:ae:ec:1c:35:13:f0:8b:dd:53:8d:66:15:d8:d2:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:D6:73:7A:52:8F:08:0B:73:89:6B:99:C5:93:1D:CE:BA:2E:2A
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d5:ae:62:5a:2c:a8:26:b7:65:b9:a0:ec:8f:d4:90:c8:06:
07:9f:e5:ce:1c:d9:54:1c:20:ef:e2:39:08:fd:3e:f9:5a:22:
6f:71:3c:ec:29:67:fe:ad:4c:8e:00:2d:cb:d7:c4:ee:56:f1:
3e:04:e1:86:58:a9:e7:55:02:85:58:aa:87:b8:90:a0:d5:6d:
ac:c2:c1:ab:04:8c:a4:06:6e:2c:4c:34:a3:91:40:47:28:ec:
19:ec:4d:85:5f:4d:c5:72:59:a1:31:fe:0e:30:33:0e:01:00:
45:c4:0c:5e:9c:de:12:ee:3c:13:54:35:dd:1e:d2:43:f0:8a:
70:53:d2:66:54:48:db:36:c1:97:d4:3c:74:21:55:16:50:ab:
26:98:0f:c7:9c:3c:f7:37:f6:a0:41:8e:84:bd:36:77:81:4b:
f8:94:39:f7:bc:3d:60:ab:de:51:7e:64:43:b1:d5:16:b7:97:
75:21:3c:ff:90:79:c2:88:90:df:30:ba:da:f1:21:d2:be:86:
02:1b:9f:ba:a6:3f:5c:15:aa:fb:aa:a0:02:f0:b1:0b:62:01:
d4:a0:ce:29:62:f3:89:13:04:56:8c:61:95:bf:35:b9:e2:67:
a8:4c:6c:7c:0d:29:9f:d7:3c:1f:6e:2d:e3:84:46:82:8a:44:
99:3e:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:41:06 2026 by rpki-client