Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: 1moycu6vT+XMk70tua5iAXGk8vLTvMQUhmoPbBav0gc=
Subject key identifier: B3:A6:45:C2:1B:40:B7:AB:C8:24:7F:C4:1A:82:B7:F1:68:CE:AD:78
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019D28841E3C1DAC6CD3A35D4EC94FE12C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 115E
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: 464gVZb8knaH69BFmygOUkdcxZI4VxDb5PIY1z4WHQs=)
2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1e:3c:1d:ac:6c:d3:a3:5d:4e:c9:4f:e1:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=b3a645c21b40b7abc8247fc41a82b7f168cead78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:ef:09:36:a9:bb:0f:3e:23:ca:b5:c6:73:
56:77:0d:76:e5:b4:83:74:58:2b:76:2a:5c:58:d8:
75:08:f7:fa:70:db:f1:a0:80:e2:93:cb:20:c9:7f:
3e:a0:c7:85:94:64:92:d7:29:8a:c8:a0:3b:20:5f:
31:80:40:c6:3d:1a:e9:25:90:51:d9:81:c4:05:20:
36:72:a0:48:f0:c4:f6:5e:23:14:69:41:c5:e6:cb:
97:10:6c:66:be:11:e4:50:44:78:2d:28:d8:59:e9:
ef:de:f3:97:98:c2:d6:a3:46:fb:a9:d0:95:51:0c:
aa:fc:71:68:94:aa:06:0f:c9:56:07:03:a1:6c:b1:
2b:1f:65:9b:28:a4:2c:02:bc:a9:e1:2e:43:d6:8d:
6d:65:c7:7f:a7:77:9f:ce:a0:d7:ea:f7:9f:74:cf:
54:0e:a8:b4:92:b9:13:8d:37:30:25:75:6c:c2:89:
7e:74:e9:aa:2a:d7:37:05:fb:b3:32:f0:bc:1f:b4:
bc:0c:57:1f:27:5a:d5:3c:43:07:eb:a4:4c:6a:44:
2e:48:ea:b4:92:37:94:9c:fb:60:a4:6f:88:94:08:
16:64:5f:ed:b9:1c:2e:88:1c:dc:3a:50:e7:61:49:
ca:d7:96:6e:08:c5:3d:52:2d:38:3d:03:b9:1c:35:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:45:C2:1B:40:B7:AB:C8:24:7F:C4:1A:82:B7:F1:68:CE:AD:78
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b7:40:9d:62:78:5c:29:d8:32:e7:c9:14:34:cd:a0:d3:0e:
65:1e:78:a2:68:47:75:97:8a:6c:19:1f:ef:76:38:99:77:f8:
31:35:f3:5d:84:16:fb:4b:38:49:8e:9a:fe:03:7d:e3:c3:a3:
dd:cd:10:76:73:ec:1a:a5:f3:4b:a6:77:f9:da:96:94:04:8d:
01:a1:1b:2d:f7:8b:89:c5:fe:1f:f7:14:f9:c8:f2:24:0e:36:
76:05:01:66:66:19:af:76:12:8e:71:92:fe:c6:fc:dc:40:cb:
4d:63:a3:8a:f0:c6:10:e0:ef:8f:e4:21:96:ce:26:a1:c4:a4:
f9:7f:ce:03:7f:d4:5f:be:a9:e0:d4:b7:3e:77:f4:01:9e:1a:
b2:71:0d:72:2a:de:40:52:24:6e:e7:2e:2b:f9:db:de:80:11:
58:62:dc:98:2b:17:ba:47:37:0d:d4:50:ad:7e:65:e6:fd:a6:
da:43:54:40:34:8d:5e:31:8b:9d:9f:3a:68:57:bf:51:68:c9:
32:1a:7f:d1:b0:e0:46:ea:55:95:8e:e0:6f:e6:aa:61:87:49:
8e:88:b0:7c:93:55:3e:52:cf:f0:1c:76:7c:cd:b7:f2:b3:f0:
d4:69:f8:31:a8:5f:b7:ea:b7:72:52:8e:8a:73:20:f8:5e:25:
4a:53:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:19 2026 by rpki-client