Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: 9WdscTsFhIcJ37ekqAkdchO9vrANckfjZL3bLC+9cAw=
Subject key identifier: 0A:E4:53:35:8A:7A:56:28:AD:1B:9A:5F:A2:1F:D5:90:14:56:4D:66
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 019D2703BC45D2A23D95E66D8FE277F778B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 04F8
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: /HBn3zFsKRakQNql3/GrmWOLy3MddFYGn/g+eKOablo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bc:45:d2:a2:3d:95:e6:6d:8f:e2:77:f7:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=0ae453358a7a5628ad1b9a5fa21fd59014564d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:34:d5:60:50:ed:c8:8c:fc:74:bc:cb:6c:
48:fb:d3:58:c4:a0:cd:f6:5a:b9:5f:1c:17:85:37:
50:26:2b:90:e1:d0:c5:8a:3e:80:c6:41:a7:64:ea:
37:a5:d5:a1:aa:5d:d3:2d:fa:12:51:e5:4f:e5:f3:
8f:07:73:d6:d4:d9:9c:1e:8b:7b:bc:5c:3b:17:ff:
52:40:84:87:88:54:b7:30:54:f7:66:2c:e2:28:ac:
19:fd:08:f8:5d:c9:0e:eb:d7:00:47:be:00:e1:17:
97:e4:9f:66:ff:7a:3e:53:fb:3a:80:9b:97:e0:ae:
6d:b4:6e:db:4c:23:5f:4f:3e:a5:ef:14:bf:e2:b2:
a9:72:e6:81:89:52:aa:91:41:10:a3:f4:3f:e1:4c:
a2:75:ca:3b:09:4c:1b:2e:fc:14:9d:1a:e5:c2:be:
02:63:7c:48:7d:d2:e9:54:ea:ba:75:a9:f3:f8:fd:
39:70:12:b7:6e:f3:a1:be:47:34:f6:9c:8d:cb:c8:
5f:3f:6b:5b:67:ff:e3:17:ef:15:0f:1d:fe:c7:0d:
ce:ac:c7:73:e9:f8:bb:b9:f8:35:53:c8:f0:43:c9:
1a:44:55:cd:df:81:b3:66:d9:1a:5d:a4:e2:fe:2d:
4b:7c:0e:fd:f0:05:b7:44:b6:09:dc:79:13:ab:e0:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:53:35:8A:7A:56:28:AD:1B:9A:5F:A2:1F:D5:90:14:56:4D:66
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4c:b9:07:03:4a:d4:6b:a0:26:b7:34:f0:03:b7:ef:8f:ef:
62:55:00:9e:08:18:52:af:3e:1f:4c:8d:e2:9f:4a:a7:0d:9f:
48:db:84:b5:23:f3:48:36:56:e0:1f:36:99:d3:25:46:6f:13:
bd:47:5c:88:71:0c:4e:00:c2:80:fa:84:d5:65:0f:2d:39:af:
61:30:d3:5d:0a:8b:e6:85:d9:f9:04:2a:3f:60:f6:2f:73:78:
78:80:97:94:ce:05:69:59:4a:86:1a:01:78:cd:70:fc:d4:1c:
70:39:fb:4f:db:9c:a4:76:c6:48:07:0d:7d:fe:41:0f:43:49:
3e:c1:ae:fc:50:18:6b:1e:de:33:42:d2:06:e7:8c:71:bc:4a:
e2:7e:df:c8:80:28:6d:e5:ce:ee:6c:d8:bb:7e:20:c8:ae:c9:
d5:f1:d3:50:75:15:e2:a5:b6:cf:cf:8b:eb:8e:eb:52:94:f1:
e9:a3:2e:ad:5f:9c:6a:ab:38:c8:2a:ef:ee:06:51:4e:c1:94:
bb:cd:b0:8d:2e:8a:a2:9e:75:ae:47:ee:f4:9c:5d:94:6f:05:
fa:d3:d5:b0:f5:67:1f:81:ab:3d:b1:8d:95:91:5a:4b:03:62:
bf:22:0b:03:82:e8:d1:94:5d:54:79:2f:da:4f:0d:14:c6:37:
0f:e7:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:01 2026 by rpki-client