Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
File: VgYV3qcNgLblEAE38HRCF7eHopw.mft (raw, json)
Hash identifier: 47LggukT2tjfwm/3Wa0Lz67nQcIMqylwJsm459o/e5I=
Subject key identifier: 4E:9A:83:26:9C:12:2E:E5:69:1E:A6:5A:0E:4B:F9:8D:66:50:9A:E8
Authority key identifier: 56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
Certificate issuer: /CN=560615dea70d80b6e5100137f0744217b787a29c
Certificate serial: 019D2A04A632C1436EFA0CE69AFEC3EDAC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
Manifest number: 2D
Signing time: Thu 26 Mar 2026 12:00:40 +0000
Manifest this update: Thu 26 Mar 2026 12:00:40 +0000
Manifest next update: Fri 27 Mar 2026 12:00:40 +0000
Files and hashes: 1: VgYV3qcNgLblEAE38HRCF7eHopw.crl (hash: ESoBGKmYMngoKoLOO2VsAPYTLYmBOaHiV/TGdRWgnhc=)
2: mXn0MKmHDy1aT83WYfadFmq0_G4.roa (hash: R2FDSVyHViAgLea0vkfodWf9cM1uOy5XpY9Z9jCfAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a6:32:c1:43:6e:fa:0c:e6:9a:fe:c3:ed:ac:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560615dea70d80b6e5100137f0744217b787a29c
Validity
Not Before: Mar 26 12:00:40 2026 GMT
Not After : Mar 27 12:00:40 2026 GMT
Subject: CN=4e9a83269c122ee5691ea65a0e4bf98d66509ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:6c:2f:27:cd:92:c4:dc:30:ec:da:b6:ca:
ab:aa:76:13:07:3e:e8:cb:17:eb:61:f1:21:f4:08:
52:85:b2:60:e7:2c:93:f8:cf:4d:75:52:36:46:95:
04:81:4f:34:54:13:6e:d6:b4:cd:6a:f7:a6:f1:b7:
f9:27:9d:39:7f:8c:9c:38:54:62:da:67:4c:07:d8:
fd:54:1e:0b:f6:bd:6a:b5:85:a7:f7:34:a2:c6:fd:
25:db:c2:bf:f4:75:55:5f:0b:0e:56:5d:af:ea:df:
d2:34:3f:50:0c:b9:df:41:42:9a:71:2d:1f:e1:4b:
e8:b5:43:f7:e9:7e:09:8a:1e:72:23:c4:b6:8c:6a:
64:da:8f:cf:ae:3a:c7:55:5f:4a:d9:86:ec:2c:bc:
14:9f:32:8d:5f:db:6e:34:5a:ee:17:66:4a:86:3b:
bb:05:fb:7e:a3:65:15:08:99:c4:68:af:83:21:5c:
43:af:36:db:c2:e4:21:8d:2b:e6:7c:1b:67:02:a4:
54:d9:6c:48:71:60:88:a6:78:ed:0e:d6:ba:e6:da:
8c:77:17:13:7c:27:93:7d:f8:84:48:d0:bf:5b:ce:
28:74:55:be:51:30:ca:66:8e:23:ac:5e:f2:2b:0a:
10:6c:bb:79:c1:9d:5e:d1:3b:f3:fd:04:92:5c:57:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:83:26:9C:12:2E:E5:69:1E:A6:5A:0E:4B:F9:8D:66:50:9A:E8
X509v3 Authority Key Identifier:
keyid:56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3f:30:55:a0:e2:f2:6d:98:86:d7:76:6b:f0:fd:bc:07:97:
aa:ed:f6:02:af:c9:f3:6b:22:e8:3e:95:a1:07:60:5e:ba:30:
d0:71:a2:b2:01:3f:f5:ff:89:c9:97:3c:b0:ea:51:59:2f:de:
d5:b9:20:8f:e7:37:27:dc:ad:04:a8:6f:11:44:1f:93:52:00:
f4:e5:a7:49:c7:82:0a:2c:59:d0:df:aa:98:75:7d:20:07:27:
a7:24:b6:a3:01:86:4c:09:a9:7a:f2:f0:73:2e:12:06:d8:53:
56:d7:23:93:ad:fc:47:27:8b:bf:22:40:1a:7f:ed:a3:06:42:
2a:9e:9e:5d:fc:6d:23:e9:99:cd:cd:af:ba:11:e3:00:1c:b8:
3a:e0:a1:21:f5:27:44:bb:e8:c3:55:dd:2f:2c:37:70:a3:14:
df:10:60:59:0b:f3:b9:f4:35:b2:78:39:45:c0:91:6b:aa:bf:
b1:dc:9b:be:be:bf:5a:17:5b:5a:a3:6d:29:36:14:47:d7:e9:
c5:6f:66:03:61:56:b0:29:b7:cd:78:e2:cc:af:25:a1:a1:82:
d3:76:0b:8d:e2:81:2c:0f:01:2b:aa:08:c1:9a:69:74:31:96:
94:dd:d4:e4:7f:b3:8a:65:d8:8a:e9:67:fc:72:e3:ec:05:84:
bd:3a:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:16:37 2026 by rpki-client