Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: Ld3aaW7fI4tRbZQlk1qQiOwskl1FGUSoLSJ87pWbT5g=
Subject key identifier: D7:FB:79:1C:73:F8:09:6A:CC:CE:08:F4:B9:51:3C:D1:17:C8:62:76
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 019D2A724708ED75040C779014370EF8747D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 13CC
Signing time: Thu 26 Mar 2026 14:00:25 +0000
Manifest this update: Thu 26 Mar 2026 14:00:25 +0000
Manifest next update: Fri 27 Mar 2026 14:00:25 +0000
Files and hashes: 1: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: iWmnDthj42UO4SauIAJKicyUR8WDucJDR7DouU1v97I=)
2: TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa (hash: V0MpIpfQqolsEoLYmXod5/+AyCdlRH/FtrIJe/Y/B+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:47:08:ed:75:04:0c:77:90:14:37:0e:f8:74:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Mar 26 14:00:25 2026 GMT
Not After : Mar 27 14:00:25 2026 GMT
Subject: CN=d7fb791c73f8096accce08f4b9513cd117c86276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:18:a8:2c:c8:10:47:d4:f5:f1:3c:f3:44:
2b:3f:94:ae:b9:d1:22:0b:8f:ed:2b:c9:b5:b2:71:
74:da:33:13:5b:c9:90:49:cc:79:6a:30:5d:e0:1f:
6e:25:a1:02:2b:e2:3a:22:a9:b9:ac:f6:00:b3:95:
d1:a0:7b:ca:01:a6:3a:c3:8b:b6:07:d7:c1:20:d4:
87:06:34:2c:fd:92:4f:de:7f:34:1b:b6:9b:e7:35:
9b:08:27:2e:10:ca:b6:55:70:1c:dd:10:c5:8c:ca:
a6:e4:50:b4:4a:a4:84:c1:18:d6:2c:b0:f9:53:f7:
5c:6b:60:fc:f5:e2:4c:e9:81:c6:89:c1:cb:c2:12:
65:01:c7:2f:97:5a:12:4e:e6:ac:92:63:7b:4b:cc:
85:3c:9d:de:7e:59:d8:49:71:d4:a8:0e:fe:c9:66:
22:c8:ff:36:0a:c8:9a:80:17:43:82:12:f2:2c:b3:
e7:23:81:b1:ea:c1:24:cb:5a:ed:3c:48:87:e8:e6:
50:39:57:ab:89:82:d6:15:b3:31:fa:12:76:26:c0:
83:c1:a1:10:23:15:af:5d:eb:4a:f8:9e:cc:6c:33:
aa:90:d5:ab:82:4a:51:19:cd:fb:63:77:8d:54:63:
e8:84:25:eb:1a:5e:8a:62:9f:0f:f9:d1:2e:72:a5:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FB:79:1C:73:F8:09:6A:CC:CE:08:F4:B9:51:3C:D1:17:C8:62:76
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:43:71:27:af:ac:7a:e4:ec:ff:20:ad:ee:22:9a:84:bf:6b:
6f:a3:a9:81:d8:ea:94:48:58:a0:25:c8:73:6f:cc:23:60:db:
18:a5:64:e4:33:f1:b2:4e:2f:eb:3a:b0:aa:96:10:c9:18:b2:
3f:ad:e9:04:67:d5:15:d0:da:4e:09:24:12:6e:7c:8c:65:6b:
9f:86:d1:d8:48:34:08:bc:6b:93:62:53:3c:e3:50:1d:ad:b4:
ac:80:41:39:d1:f0:c7:c5:e8:40:f8:58:3d:3d:88:28:d6:81:
aa:b0:49:b9:7c:5c:01:94:e0:21:6f:03:9d:6e:9b:8c:a0:30:
57:e0:4f:01:7d:b6:a4:76:63:f7:9c:2c:26:41:2d:30:99:e4:
1b:a3:b8:18:c0:cc:03:2e:0e:76:f5:f6:ca:35:6e:a8:c1:7f:
fa:4f:f1:14:1b:93:5a:1f:29:e4:6f:b0:f6:60:d1:84:53:d8:
7d:4c:c2:2a:a4:47:f8:d1:b2:e7:c8:5a:0b:a6:bf:78:10:bc:
e0:62:44:73:67:a1:e0:a0:e3:01:3a:80:6f:d4:0f:33:f8:27:
b2:0e:15:c8:d4:55:c5:5d:4b:04:73:80:71:92:30:a9:2e:af:
6e:57:38:a3:df:94:49:48:05:28:cd:53:dc:07:9e:18:b5:07:
0b:9f:38:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0qckcI7XUEDHeQFDcO+HR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjcwNjZkYTA5YTU2MjI0MjYwZTQ2ZWEyNmRjOWNiMWRi
YThlMzcwHhcNMjYwMzI2MTQwMDI1WhcNMjYwMzI3MTQwMDI1WjAzMTEwLwYDVQQD
EyhkN2ZiNzkxYzczZjgwOTZhY2NjZTA4ZjRiOTUxM2NkMTE3Yzg2Mjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo40YqCzIEEfU9fE880QrP5SuudEi
C4/tK8m1snF02jMTW8mQScx5ajBd4B9uJaECK+I6Iqm5rPYAs5XRoHvKAaY6w4u2
B9fBINSHBjQs/ZJP3n80G7ab5zWbCCcuEMq2VXAc3RDFjMqm5FC0SqSEwRjWLLD5
U/dca2D89eJM6YHGicHLwhJlAccvl1oSTuaskmN7S8yFPJ3eflnYSXHUqA7+yWYi
yP82CsiagBdDghLyLLPnI4Gx6sEky1rtPEiH6OZQOVeriYLWFbMx+hJ2JsCDwaEQ
IxWvXetK+J7MbDOqkNWrgkpRGc37Y3eNVGPohCXrGl6KYp8P+dEucqUISwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNf7eRxz+AlqzM4I9LlRPNEXyGJ2MB8GA1UdIwQY
MBaAFPr3Bm2gmlYiQmDkbqJtycsduo43MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12Y0diYUNhVmlKQ1lPUnVvbTNKeXgyNmpqYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNmRiYzJmLTBmMGItNGEyZi1iMTQ5
LWI3NTk4MzEyMjQ1NS8xLzEtdmNHYmFDYVZpSkNZT1J1b20zSnl4MjZqamMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EzLzZkYmMyZi0wZjBiLTRhMmYtYjE0OS1iNzU5ODMxMjI0
NTUvMS8xLXZjR2JhQ2FWaUpDWU9SdW9tM0p5eDI2ampjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaENx
J6+seuTs/yCt7iKahL9rb6OpgdjqlEhYoCXIc2/MI2DbGKVk5DPxsk4v6zqwqpYQ
yRiyP63pBGfVFdDaTgkkEm58jGVrn4bR2Eg0CLxrk2JTPONQHa20rIBBOdHwx8Xo
QPhYPT2IKNaBqrBJuXxcAZTgIW8DnW6bjKAwV+BPAX22pHZj95wsJkEtMJnkG6O4
GMDMAy4OdvX2yjVuqMF/+k/xFBuTWh8p5G+w9mDRhFPYfUzCKqRH+NGy58haC6a/
eBC84GJEc2eh4KDjATqAb9QPM/gnsg4VyNRVxV1LBHOAcZIwqS6vblc4o9+USUgF
KM1T3AeeGLUHC584lQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:20 2026 by rpki-client