
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: 4L9Vt0WKz5XqSq/kbdrv8tiHpZO2DElgU8Vi6wIKboA=
Subject key identifier: BF:21:0A:89:C1:3C:65:6D:91:7D:8D:BC:5C:DC:CA:AD:C8:EA:4F:DD
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019F946D8F6FA349A14E60F6F519276F5A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 129F
Signing time: Fri 24 Jul 2026 14:00:35 +0000
Manifest this update: Fri 24 Jul 2026 14:00:35 +0000
Manifest next update: Sat 25 Jul 2026 14:00:35 +0000
Files and hashes: 1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: cKf+r9kMiY9S/FrBylICJO6O9MEpMWQe8ge68EOgRdA=)
2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:8f:6f:a3:49:a1:4e:60:f6:f5:19:27:6f:5a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Jul 24 14:00:35 2026 GMT
Not After : Jul 25 14:00:35 2026 GMT
Subject: CN=bf210a89c13c656d917d8dbc5cdccaadc8ea4fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:d7:0b:fc:22:1d:a9:ff:bb:ea:dc:75:85:
58:b6:a6:ea:36:8c:83:6e:4b:5b:d9:1f:ab:66:9d:
32:ee:f2:32:7f:de:7a:3d:cf:ab:b7:29:16:c5:02:
c2:59:8b:32:ab:e3:1a:e8:8c:c0:eb:d8:d7:5f:f0:
3c:c4:21:15:18:ad:61:38:d5:0d:a6:45:ae:7f:f7:
a3:72:22:87:22:c4:e9:4d:b8:1d:3f:d0:e7:29:ec:
d3:ed:20:13:b2:bf:3f:3b:80:26:55:6d:ff:37:06:
28:30:6a:2e:20:5e:4d:4a:27:72:80:d6:96:4f:b5:
b6:a1:da:e3:3d:8f:6f:6a:a7:f6:8c:eb:60:1a:4f:
be:f9:fd:33:0a:0c:5d:59:0e:95:91:ff:f8:c7:75:
49:41:ee:43:89:fc:38:be:3e:4c:f0:79:c9:8b:45:
7f:54:e0:c3:52:d9:d6:22:ac:db:f1:cb:7b:23:70:
b7:4a:a2:48:c0:63:34:fa:ae:02:56:4a:70:e0:31:
bf:a1:59:e2:7d:ca:ef:4d:ca:93:08:3d:5f:5d:e6:
3a:96:7a:60:99:ab:dd:2a:80:7d:24:24:ad:69:ba:
53:9e:59:fb:e6:0b:dc:19:35:fa:dd:e4:c2:ba:81:
31:2e:d5:3e:6a:9a:be:4c:3c:17:30:84:66:bf:e6:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:0A:89:C1:3C:65:6D:91:7D:8D:BC:5C:DC:CA:AD:C8:EA:4F:DD
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:12:7d:5d:59:a2:ba:73:c6:f2:d9:32:0d:d1:2c:a8:56:
88:43:bb:fc:af:ae:63:29:ec:09:8a:4c:53:59:01:5d:52:39:
9e:fc:5f:de:aa:64:83:13:71:56:0b:01:6d:47:5a:c5:d2:4e:
f3:86:b6:72:d3:12:10:ad:2c:c0:6f:60:ca:e6:c9:6e:2f:18:
04:96:64:97:a9:a2:f0:af:59:e4:d5:7b:70:73:1a:02:21:6f:
5f:65:c6:1e:c0:e6:43:7d:b6:c2:1d:99:99:e6:d7:42:83:32:
01:c8:c5:a5:04:6b:8d:f0:24:2c:bb:b2:e5:0a:dd:f6:f9:d4:
60:68:cd:b6:c0:f5:e6:34:8c:16:c8:94:20:84:a3:2e:a8:10:
d4:2b:62:cf:94:2a:78:5e:e9:05:c5:ce:4a:df:df:35:1f:35:
84:f3:b6:06:b1:d2:e1:59:79:c6:29:32:a3:51:85:69:5c:cb:
ac:0a:55:b5:f1:85:49:15:5b:74:93:cd:37:e3:33:e3:cc:3b:
2e:3e:18:f5:0d:f9:34:97:ae:a1:fb:15:84:96:ed:62:a7:c6:
52:65:94:47:89:b3:99:82:71:c7:39:b1:b2:15:ef:af:17:64:
5d:2c:7d:78:0e:7f:1d:45:3d:3e:12:c3:50:a3:ed:99:88:b1:
18:3a:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:18 2026 by rpki-client