Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: jdKno1ulULchftQ/JMw3r8AynTJ2EG4hdt6pNA2bRgU=
Subject key identifier: 47:11:E4:73:0E:7D:67:AC:F2:20:FE:56:98:35:C0:09:9D:78:6E:6D
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019D2A3BB8207FD5C908D2954D2D841C6408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 13:00:50 +0000
Manifest this update: Thu 26 Mar 2026 13:00:50 +0000
Manifest next update: Fri 27 Mar 2026 13:00:50 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: wc/R7ptNNlwHRxZzaYD7pGiaYStNdvJpLh8OgBrIAJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:b8:20:7f:d5:c9:08:d2:95:4d:2d:84:1c:64:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Mar 26 13:00:50 2026 GMT
Not After : Mar 27 13:00:50 2026 GMT
Subject: CN=4711e4730e7d67acf220fe569835c0099d786e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:fa:e1:76:f7:7f:50:fe:53:a3:f8:31:6d:
8d:5d:76:df:33:50:b7:28:e2:b6:96:22:35:af:71:
f8:35:af:aa:15:34:03:8d:36:ad:16:d4:8e:ff:d5:
bd:6f:ca:c5:ae:92:33:0c:a1:0a:b6:9a:5f:e7:7c:
7a:4e:83:75:41:1e:78:4b:96:4b:0c:a0:e6:f9:cc:
62:d7:00:06:ab:c1:89:7d:7c:87:4e:4d:5d:7b:12:
64:5d:7f:43:d3:4d:ba:6c:ea:64:53:62:57:46:0a:
de:45:03:6e:83:8c:4b:fd:e8:52:7c:df:b7:53:a3:
43:52:95:da:3d:a2:30:30:95:c4:30:d8:a5:41:f0:
0a:fb:3f:09:4c:d0:f7:0a:d8:8d:10:82:db:98:d6:
11:e3:84:2e:95:f4:03:12:0a:2f:fe:64:16:1c:ae:
70:2c:33:b5:15:85:85:62:62:78:e7:8b:f4:78:25:
1c:7e:e8:41:2d:82:a4:27:c1:1e:30:4b:57:52:75:
c5:f3:cb:20:b9:0d:81:f5:c1:84:d3:75:21:9d:7c:
d7:67:de:04:06:22:b0:b1:52:97:12:5c:f7:66:8d:
cc:57:e2:e0:88:f0:c2:27:e8:35:f1:d9:37:7c:22:
8b:05:4a:56:73:36:15:e4:15:46:01:f3:0c:4b:7a:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:E4:73:0E:7D:67:AC:F2:20:FE:56:98:35:C0:09:9D:78:6E:6D
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:d0:24:b4:ac:2e:08:29:19:75:f3:85:f7:13:2e:84:dd:
28:62:89:13:2a:41:7e:32:9e:05:b8:66:c4:58:84:81:e3:70:
c6:7e:15:81:6c:1a:e9:3b:c2:62:7a:83:69:b3:1b:48:ca:55:
77:15:12:cf:d9:68:09:b9:47:cb:13:32:a2:5c:2b:99:c0:f8:
52:85:c0:22:2f:55:d4:f8:7a:1a:90:15:5e:b4:26:01:10:6c:
bd:66:41:b1:2c:2f:e4:4d:a8:78:3b:66:a1:ef:be:92:7a:7c:
c7:fc:2a:54:4a:4b:9e:ec:4a:a0:73:85:68:a1:c2:14:6f:23:
46:93:11:3b:85:c9:b8:2e:80:a7:0f:bc:3a:02:28:4a:38:90:
95:35:9e:87:46:69:5e:e7:ac:9c:9a:25:56:50:9a:72:ff:85:
9e:eb:e1:4d:0e:a1:70:a1:6c:88:c3:2e:23:0d:8f:3d:7a:78:
15:c6:9e:63:a2:1d:ff:f5:e1:ad:a5:a7:ac:51:78:89:bc:c3:
60:0e:a1:bd:b3:6d:66:5f:ba:4e:57:93:9e:f6:b3:87:1e:36:
09:fd:6c:83:8f:a3:ab:4c:23:db:2f:29:92:1b:22:28:49:55:
9b:6e:1f:22:32:48:0c:3d:aa:0d:45:c3:3d:04:bc:53:19:b7:
d3:32:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:12 2026 by rpki-client