Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: bxPHrUXakMA3tg66geDVIdCuoFbkHASNpV8nNG0NIj0=
Subject key identifier: 74:3F:6C:90:52:00:C4:A8:12:E6:28:B8:1A:80:59:20:EA:D4:0D:1C
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 01A13222BA4CB5636C98BC8A9CEBB109587B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 22:01:38 +0000
Manifest this update: Mon 12 Oct 2026 22:01:38 +0000
Manifest next update: Tue 13 Oct 2026 22:01:38 +0000
Files and hashes: 1: K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa (hash: TugPqaQtZD9qSBdI5JE+l1/X09jHGI4DmWPMzdxCeJw=)
2: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: ALD9G100YZJjkRFCT5XMGSJVpE4MvQCq9w11khaoDb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:ba:4c:b5:63:6c:98:bc:8a:9c:eb:b1:09:58:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Oct 12 22:01:38 2026 GMT
Not After : Oct 13 22:01:38 2026 GMT
Subject: CN=743f6c905200c4a812e628b81a805920ead40d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ea:eb:1f:64:1f:54:cc:59:36:41:26:46:bc:
4b:98:43:10:f8:2b:a9:9a:30:a1:b9:45:7a:a5:ec:
84:f4:c8:c5:6d:05:8c:1d:58:fd:3d:c5:0e:b2:d1:
f7:22:50:23:5c:60:72:e1:cd:0a:14:f4:d6:3f:f9:
64:56:8e:65:03:f2:bd:ec:8f:40:64:60:3e:ba:22:
13:e4:7b:8d:cf:ff:ef:1e:2e:ee:79:e3:0e:de:81:
74:ae:b1:9e:f3:71:16:53:8b:a7:6c:0b:2e:07:bd:
4b:a9:80:7b:aa:a8:5f:d4:d3:86:20:b3:d0:b1:89:
52:73:40:34:5b:eb:ac:60:f2:85:8e:2f:de:ba:32:
6b:9d:8b:29:d1:ed:ce:4f:f0:fc:0f:09:2c:57:5a:
5b:bc:58:ae:2a:b7:fd:29:10:fa:30:dd:81:97:e5:
c1:2c:3d:5f:33:1b:86:97:46:78:3c:86:d6:c5:cb:
13:8f:a5:47:23:84:0d:f9:1b:ee:8d:50:79:7e:65:
37:5f:01:8d:f7:04:6c:92:90:8a:14:96:0c:20:76:
f1:75:6e:87:cf:ad:63:8e:6b:43:9d:1d:57:6c:57:
bc:31:49:f3:7c:9b:a8:af:22:b8:e2:a5:42:f0:f1:
77:38:c6:76:18:a3:6e:1a:5d:cf:4b:1f:e7:6c:5a:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3F:6C:90:52:00:C4:A8:12:E6:28:B8:1A:80:59:20:EA:D4:0D:1C
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4d:d9:74:47:78:ec:a7:23:87:9b:2b:0e:0a:19:c5:71:5a:
62:ab:d5:a4:02:18:42:0e:cc:05:0b:a7:88:3e:fd:26:db:fa:
d2:bf:11:e7:d1:24:65:92:a7:78:ec:68:8e:89:73:22:d2:42:
92:c9:df:ce:74:64:7b:8f:7a:5e:1c:2a:5e:17:eb:3c:f1:8d:
5c:a2:03:2e:50:b5:cc:d2:ad:9b:f1:03:6c:b1:75:0d:db:35:
01:48:88:ea:b1:6f:fc:56:46:ab:8c:70:24:cf:0a:b5:4e:e0:
a6:ee:1e:af:10:9b:1e:36:5d:5a:a5:a5:7b:dc:80:55:68:1e:
cf:b6:f6:92:e8:8c:1a:d7:7a:ab:b2:5a:a4:96:41:4e:12:9a:
73:b2:25:d6:86:c4:7c:a8:39:d0:ab:33:54:29:e8:ef:d4:61:
07:0c:b1:9b:ec:a3:9c:50:41:d9:7d:32:e2:1d:38:bf:da:c4:
5f:87:bc:dd:fa:52:e3:7d:d8:34:55:ae:60:30:c8:4b:3e:9c:
39:18:65:95:fd:98:05:eb:5c:b6:ed:47:b6:3e:27:05:f8:fb:
6a:dc:46:04:3f:9d:6a:4e:bd:62:93:b8:f9:14:df:26:a4:aa:
8c:54:5a:95:76:a6:ca:d7:be:49:2b:11:b7:a0:a7:fa:ae:38:
36:7c:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:04:00 2026 by rpki-client