Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier: ohy+w5bHq6smLKl6hqIyAFIpcf9XUAH/idnHno/9+yU=
Subject key identifier: 03:D2:05:D3:7B:20:70:97:01:53:CF:49:AA:8A:1F:E4:33:EE:C9:55
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 019D284DC70481C5B6C2C4F17F557C0BCCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: 7lFYs7eKgq5MTaDO4e_G6n4_rC4.roa (hash: IJh5ThEm6TXUbPCunEfndZGbjB6YP5UPF/UHUKZqQrg=)
2: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: umuq30rkiIxfd//oFUMylUxayRF9i5IFVkLlDMScFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c7:04:81:c5:b6:c2:c4:f1:7f:55:7c:0b:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=03d205d37b2070970153cf49aa8a1fe433eec955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:b1:ed:56:c5:da:f6:6e:8c:9a:5a:ca:47:
bc:75:ac:7a:7b:55:81:8c:98:84:98:14:98:f4:80:
be:fe:a0:b9:80:2b:04:d2:d0:9b:18:bb:8e:36:c9:
96:83:4e:61:5c:06:84:56:c0:8b:d5:4d:45:be:86:
68:4d:f5:60:9b:6b:27:fe:bb:ce:45:4f:6f:50:f6:
9d:60:5c:c2:a5:a0:c2:7b:fa:db:75:a2:e0:83:e0:
bc:5b:82:ce:b9:76:fd:45:db:c7:ef:c2:80:7a:a6:
8e:c8:1e:65:b7:21:0a:0d:a8:00:df:50:fa:26:d2:
17:03:11:95:53:ed:3f:28:bb:a4:3e:e3:89:75:c7:
10:2b:49:93:bf:16:81:24:b1:98:23:84:64:70:d6:
9b:93:11:da:64:49:91:94:a4:14:8c:8b:22:72:dd:
a9:0b:ab:ef:96:f0:bd:ac:b5:ff:5c:7a:63:a9:c6:
bc:02:f4:7d:a9:27:10:13:92:62:53:4f:97:19:69:
57:0d:ae:f3:01:44:79:dc:34:09:95:1b:8b:84:c6:
75:c0:01:e3:80:67:07:cc:f3:11:3d:e5:a0:f0:e2:
b3:be:e7:5b:8e:c3:00:25:6f:e8:e5:e0:ea:2b:c5:
c0:5a:2a:a4:f5:47:67:63:44:e8:a9:ed:56:fa:1c:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:05:D3:7B:20:70:97:01:53:CF:49:AA:8A:1F:E4:33:EE:C9:55
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4a:11:54:69:c1:5c:b0:1f:be:11:8c:53:97:02:24:6e:fc:
fe:ed:70:6a:77:83:84:b7:03:17:1d:b9:fb:31:b6:71:ec:bd:
d8:ca:1e:88:e6:90:ed:c6:1a:28:f9:d4:4f:d1:45:dc:0d:c5:
f6:6e:db:10:68:75:8e:ba:98:1d:6a:0b:5a:bc:1f:c3:bf:c6:
84:22:8c:43:36:19:21:19:c1:b5:98:23:b0:a5:2c:f7:3a:0d:
39:33:c3:4a:b9:d5:46:e3:9c:aa:63:ea:b0:3f:23:57:4c:23:
54:a2:b9:1f:7d:b4:0d:46:fe:56:03:a8:b7:04:61:e8:e5:91:
04:be:ca:1d:21:af:6f:3a:14:41:48:6c:d9:65:3d:e4:de:02:
a3:6a:8f:4b:d9:20:49:ed:df:2f:b8:12:49:7e:41:8e:91:04:
a0:81:cd:9b:cf:7e:2d:c1:4b:9f:b5:dd:42:2b:9c:48:f8:59:
4f:ac:77:e0:43:59:f5:c0:fa:e7:e7:5b:7e:d9:c1:02:84:40:
76:e2:80:04:f9:f1:de:ce:76:1d:0b:cd:a7:72:a7:b5:28:26:
9e:f2:82:d2:13:f7:7f:d4:bc:00:d7:0c:06:b4:cd:73:c5:f8:
88:06:49:61:6d:c7:2b:43:d6:d4:93:40:84:55:1d:90:60:a0:
23:af:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:11 2026 by rpki-client