Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: J0KdsQe1ry6OEp1rNxhHSNF+gOnvEOwgTx5VNMvH3gU=
Subject key identifier: 5D:BC:E4:D6:CA:06:B5:E9:21:7B:F0:9A:1D:16:A2:69:12:53:7F:D4
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019D29CE287A5DA8F09FD2C7B7367110EFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0F6F
Signing time: Thu 26 Mar 2026 11:01:09 +0000
Manifest this update: Thu 26 Mar 2026 11:01:09 +0000
Manifest next update: Fri 27 Mar 2026 11:01:09 +0000
Files and hashes: 1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=)
2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: /1DcCSDE20CYWg/XvN3QsS5PCFEnCXNscDlY7m75Iwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:28:7a:5d:a8:f0:9f:d2:c7:b7:36:71:10:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Mar 26 11:01:09 2026 GMT
Not After : Mar 27 11:01:09 2026 GMT
Subject: CN=5dbce4d6ca06b5e9217bf09a1d16a26912537fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:7c:86:92:b3:1c:8e:11:4c:0d:49:a6:7e:
10:b6:98:25:e5:ae:ac:ae:bf:69:a8:67:c7:fe:aa:
7a:be:f0:68:a8:56:4d:39:bb:0a:17:99:a7:b5:50:
12:0a:d8:5d:83:97:e2:a7:7d:67:9b:0c:63:69:a9:
bd:eb:93:d6:04:3f:f1:9e:44:f8:a6:89:6a:02:8c:
f0:68:69:9d:8a:e4:b5:6b:2e:2a:33:f1:c0:3e:04:
9b:64:6d:70:76:f2:9a:07:fe:5c:b4:70:62:8c:61:
cd:30:56:22:db:c9:4f:72:b8:e5:fe:ce:21:ed:61:
dc:86:c5:06:c9:50:fa:8c:24:66:6e:7b:e2:25:3d:
a4:51:3e:70:76:b5:c1:03:84:ef:93:71:5b:f7:5c:
09:f5:55:2c:09:55:dc:5e:78:e6:38:de:73:19:31:
ca:a2:80:e9:80:9a:b5:65:d5:a8:c1:91:6b:8b:31:
59:a9:d1:39:88:57:b8:04:7a:76:66:79:dc:19:cd:
6c:1b:3e:0f:dc:c5:0b:b4:a5:5b:8f:d2:7d:87:03:
e2:95:fb:0a:a3:f8:28:d4:45:7f:7f:4b:65:e0:ab:
42:6d:1b:c1:7f:f2:37:f0:46:f2:a3:43:44:4f:2c:
ed:95:7d:07:e7:19:7b:b7:bf:9c:a2:04:c5:7e:8b:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:E4:D6:CA:06:B5:E9:21:7B:F0:9A:1D:16:A2:69:12:53:7F:D4
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2c:64:d1:46:a2:5a:f9:c6:0b:8e:66:ce:7f:99:48:68:43:
32:94:47:1f:77:05:5d:52:4c:20:a7:0a:8c:bd:6a:3b:16:a1:
ad:e6:9c:2b:4a:1a:ba:ad:b6:95:a7:1c:d3:b0:e9:22:0e:9f:
b0:70:ca:f8:dd:ee:82:37:2c:0e:c4:25:65:d3:2e:36:af:66:
2a:6f:2f:ab:09:c0:e7:3f:a3:ff:14:38:da:64:80:4d:f3:15:
0a:bf:e6:dc:83:a6:95:65:5f:26:15:91:b0:71:62:82:67:90:
5a:ce:16:94:5e:11:db:15:0b:7d:b3:41:81:29:73:10:28:6c:
7a:c5:7e:48:0e:49:08:c6:0d:9f:02:1f:4a:8a:7b:ec:70:2f:
f6:c3:93:a6:54:d1:88:75:6c:81:f6:52:9f:1b:d5:d5:9b:a3:
81:a1:ea:a8:3b:20:fe:95:c0:8d:b7:eb:c0:a1:5c:db:d7:6e:
af:f0:e2:c4:54:12:1c:fb:cd:06:53:39:f9:9f:09:29:44:59:
d9:9a:95:9e:ff:4a:d2:13:eb:48:c3:7b:35:bb:10:b8:a1:2b:
bd:56:6b:db:7f:03:7d:df:b7:ed:a6:f3:5a:a0:e9:4a:fd:4d:
da:7d:4f:71:aa:6d:37:e9:96:42:cc:10:76:9d:58:c8:0c:28:
99:11:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:48:59 2026 by rpki-client