Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: /ty1uCZufT2OC5u0Rrk2mKNST6acU6ob3GUoP77DF0k=
Subject key identifier: ED:F4:E4:74:46:2E:C8:8C:D4:F7:F0:46:33:34:5C:C4:C2:23:C7:79
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 019D2AE127F52DDC9BBC70A26E952CFABE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 16:01:31 +0000
Manifest this update: Thu 26 Mar 2026 16:01:31 +0000
Manifest next update: Fri 27 Mar 2026 16:01:31 +0000
Files and hashes: 1: K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa (hash: TugPqaQtZD9qSBdI5JE+l1/X09jHGI4DmWPMzdxCeJw=)
2: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: lwpZXQHmz7oAL6mfE5IjZ0onEk+i9oaniKmC0iAdEcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:27:f5:2d:dc:9b:bc:70:a2:6e:95:2c:fa:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Mar 26 16:01:31 2026 GMT
Not After : Mar 27 16:01:31 2026 GMT
Subject: CN=edf4e474462ec88cd4f7f04633345cc4c223c779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:bc:11:c0:63:ed:c7:eb:d5:c0:b7:f4:64:
ae:d4:49:0f:9d:78:26:98:ba:53:eb:dd:3f:5f:4d:
5d:0b:b2:dd:8e:a4:45:6b:16:21:3e:6b:28:0c:ba:
db:bc:f9:2a:c0:27:7c:25:c1:6f:4c:c9:54:52:b9:
2b:1f:2f:f0:69:a8:36:cd:67:38:a4:42:0c:f6:27:
e9:18:e7:cc:e1:04:18:21:31:a0:64:b4:12:1a:f0:
09:ef:b5:30:96:4f:b2:ec:06:bd:c9:33:6f:c9:31:
da:0a:14:3c:23:c0:07:0c:b9:36:01:11:28:7b:5b:
07:a6:8b:59:f5:a5:0c:b9:61:95:bc:9b:11:60:66:
cf:f3:cd:57:52:59:68:e2:64:7f:65:c5:b1:2a:01:
24:82:7c:9b:64:68:fe:a9:3e:5f:2b:66:54:79:53:
4d:e6:c4:5e:16:9c:9a:11:6e:33:22:83:ed:a3:d0:
ad:5d:9d:5b:94:c9:e1:31:62:df:16:b7:73:b3:13:
8a:36:05:6d:c3:33:12:b6:52:b9:f5:8c:68:81:7b:
e5:d4:8e:7c:df:b1:1b:a0:e9:2e:09:1c:a5:f9:05:
89:78:b3:82:26:f4:19:cc:ba:74:eb:da:10:5d:b6:
82:9b:64:62:03:e0:ce:21:f7:df:b7:54:c2:c4:4f:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F4:E4:74:46:2E:C8:8C:D4:F7:F0:46:33:34:5C:C4:C2:23:C7:79
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:57:a0:23:58:c0:39:2d:7a:ba:70:ea:2b:93:f2:af:e9:d4:
31:f6:fb:61:46:3e:5f:c9:d0:d5:18:48:c7:8b:ff:ae:ca:45:
40:8d:53:f5:9f:5f:6e:4e:88:ef:17:32:f3:6b:98:ef:be:d5:
dc:29:a8:0f:ae:81:13:54:78:a8:b3:4b:30:48:0b:85:27:cd:
6c:95:e4:0b:ee:ed:9d:d1:81:db:db:96:76:60:32:d1:77:32:
d0:79:5a:00:fa:fe:a0:5b:57:41:04:df:9c:de:52:aa:2f:ba:
58:c6:e3:92:80:07:00:c6:65:85:5a:2c:9a:f0:d0:c3:b3:89:
4d:e1:7f:40:6a:a9:18:d3:07:da:b7:ff:28:0b:b5:f9:a0:3c:
2c:f8:4a:f4:d1:d0:ef:98:cd:93:f1:ae:9e:4c:d3:da:45:cd:
38:50:0e:cd:6c:e5:5f:ec:a7:63:04:cb:04:cc:2e:71:43:41:
95:5e:2b:a0:9d:63:c7:b2:9a:f7:e5:1c:db:98:3c:ad:c4:33:
dc:fb:12:e4:15:b1:fd:70:68:31:94:ce:e4:bf:f9:d2:e3:c6:
98:70:53:98:2e:b4:77:a7:8b:02:eb:a9:39:26:5f:ae:b3:b7:
59:43:5a:bf:41:f0:08:5a:70:e7:0f:33:18:ed:49:56:6e:2a:
81:7d:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:49 2026 by rpki-client