Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: BR96HXPaBjz9MJxDZeLt1VKTFwhFjMYAuc65x6J1pGc=
Subject key identifier: C5:64:FB:08:4A:BF:03:F8:62:E3:0A:5B:4E:C3:8F:1E:17:BB:8F:1A
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 019D25F13AF0B7006545F84798281FB80F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0F5C
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: vH7rrGITtAP6GmK4LXyxobUcePQ.roa (hash: Wf6Z3W6bIHnyxGibTmjBzRqrlxTUGARmRUFdCoR9nYA=)
2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: CRkABumR6Y/g+Ts2lSwS28lC8CKlzNA2GxG2b2OpypY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3a:f0:b7:00:65:45:f8:47:98:28:1f:b8:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=c564fb084abf03f862e30a5b4ec38f1e17bb8f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:be:30:8f:8d:80:89:7e:4a:f2:f1:ce:5a:
f7:4d:a6:76:bd:e3:e7:b8:c0:96:dd:3a:4c:74:9c:
bb:56:f5:f3:05:cb:9c:f6:63:4e:4f:f2:cc:43:ce:
a2:b0:ce:21:81:e1:66:15:d4:56:0b:da:a5:ec:94:
08:b0:03:cc:78:c0:6a:b3:b4:9d:06:30:30:7e:8a:
6c:bc:fd:01:1e:d3:18:8d:00:d5:4c:c5:d3:6c:59:
dc:e6:dd:78:89:5e:5e:84:15:e4:f2:95:65:80:03:
c6:ad:36:26:9e:e1:7e:cd:dd:23:a2:66:c9:33:78:
d1:08:c4:52:40:68:b1:3d:6f:5c:83:6a:67:1b:7b:
b8:f3:01:9b:20:4e:29:39:58:5d:7d:ff:38:fc:0f:
01:80:dc:08:60:4b:db:19:71:22:d1:9d:25:21:54:
ae:09:e0:0b:25:fc:a5:1e:a2:fa:1a:a4:e9:67:c9:
ec:07:1c:58:04:ca:de:17:8c:b4:3a:a0:e1:a5:51:
f7:59:f3:ac:e9:20:0e:54:53:e8:30:a9:82:f8:7d:
ae:4e:c6:2f:80:6b:f9:71:d2:ce:9c:e2:ef:d4:28:
1f:6a:83:f5:82:8f:87:cd:64:2a:e1:1e:f7:13:61:
ce:5b:96:50:26:53:c6:e2:7e:fc:89:53:32:4f:be:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:FB:08:4A:BF:03:F8:62:E3:0A:5B:4E:C3:8F:1E:17:BB:8F:1A
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ae:71:a3:7c:f0:03:1b:f1:17:43:82:a1:9d:32:b1:06:00:
e3:61:c7:b1:11:23:49:b6:b3:ca:5b:68:bb:d6:fe:4c:35:8c:
69:20:e1:c3:69:8b:a0:6f:e7:65:ac:65:c2:0b:10:a2:5d:c7:
6a:96:a8:79:4f:ac:75:f0:c5:2b:46:b3:4d:90:dc:f4:92:00:
c1:84:b4:56:ed:81:12:b0:7e:aa:ec:bb:91:2b:c5:41:a8:af:
1c:2a:03:e3:71:7c:70:3f:25:3c:a4:98:27:99:fe:5d:5b:22:
fc:76:31:4a:b7:ed:f7:c1:a1:f1:04:ce:91:9f:b8:aa:41:aa:
87:15:4b:d1:89:aa:90:53:83:80:3e:ea:25:20:f9:eb:9b:21:
f3:de:35:42:f8:15:67:96:da:bf:ab:c0:89:51:f2:2a:7d:c5:
af:ff:0a:7b:a5:05:b4:c6:6c:5f:43:6f:93:34:7e:30:43:90:
4f:e8:44:9d:c5:38:18:9b:06:86:b1:a6:16:52:5d:d5:b0:8f:
be:f7:b6:08:f9:c9:a4:77:4a:15:0e:12:8a:c9:29:e6:9b:85:
39:6e:52:9a:0f:36:16:61:b8:01:f4:81:08:b8:fe:e4:e1:69:
6b:11:5e:32:23:75:5d:39:fd:f9:f0:00:cb:ee:8d:83:99:48:
bb:79:da:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8TrwtwBlRfhHmCgfuA+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMGY4ZjE0ZjIyMGU5M2VlMzQ3NDdjNGQ2ZGJmMWFkMzVi
MzgzZmEwHhcNMjYwMzI1MTcwMDU5WhcNMjYwMzI2MTcwMDU5WjAzMTEwLwYDVQQD
EyhjNTY0ZmIwODRhYmYwM2Y4NjJlMzBhNWI0ZWMzOGYxZTE3YmI4ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttC+MI+NgIl+SvLxzlr3TaZ2vePn
uMCW3TpMdJy7VvXzBcuc9mNOT/LMQ86isM4hgeFmFdRWC9ql7JQIsAPMeMBqs7Sd
BjAwfopsvP0BHtMYjQDVTMXTbFnc5t14iV5ehBXk8pVlgAPGrTYmnuF+zd0jombJ
M3jRCMRSQGixPW9cg2pnG3u48wGbIE4pOVhdff84/A8BgNwIYEvbGXEi0Z0lIVSu
CeALJfylHqL6GqTpZ8nsBxxYBMreF4y0OqDhpVH3WfOs6SAOVFPoMKmC+H2uTsYv
gGv5cdLOnOLv1CgfaoP1go+HzWQq4R73E2HOW5ZQJlPG4n78iVMyT74+EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVk+whKvwP4YuMKW07Djx4Xu48aMB8GA1UdIwQY
MBaAFL4PjxTyIOk+40dHxNbb8a01s4P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQt
YjBjNjA0NjRkZjA2LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQtYjBjNjA0NjRkZjA2
LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA65xo3zw
AxvxF0OCoZ0ysQYA42HHsREjSbazyltou9b+TDWMaSDhw2mLoG/nZaxlwgsQol3H
apaoeU+sdfDFK0azTZDc9JIAwYS0Vu2BErB+quy7kSvFQaivHCoD43F8cD8lPKSY
J5n+XVsi/HYxSrft98Gh8QTOkZ+4qkGqhxVL0YmqkFODgD7qJSD565sh8941QvgV
Z5bav6vAiVHyKn3Fr/8Ke6UFtMZsX0NvkzR+MEOQT+hEncU4GJsGhrGmFlJd1bCP
vve2CPnJpHdKFQ4Siskp5puFOW5Smg82FmG4AfSBCLj+5OFpaxFeMiN1XTn9+fAA
y+6Ng5lIu3nahA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:27 2026 by rpki-client