Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: fMe9SCGUe6my+p7GaxTOkkz5elEHlkYy/uFB5JFjZY4=
Subject key identifier: 4C:7F:48:F0:B7:F1:38:13:14:B8:9F:D9:FE:64:00:EB:EB:18:7D:E1
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019F91357362800651D1D8F7547C2BEF9485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 23:00:27 +0000
Manifest this update: Thu 23 Jul 2026 23:00:27 +0000
Manifest next update: Fri 24 Jul 2026 23:00:27 +0000
Files and hashes: 1: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (hash: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k=)
2: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (hash: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI=)
3: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: h/mg/ECWjBJGRfReKIxMa0VLjn8IGBtWn30Q2QRSijc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:73:62:80:06:51:d1:d8:f7:54:7c:2b:ef:94:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Jul 23 23:00:27 2026 GMT
Not After : Jul 24 23:00:27 2026 GMT
Subject: CN=4c7f48f0b7f1381314b89fd9fe6400ebeb187de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:3e:6a:99:5d:76:80:c3:4d:25:23:6c:7e:
d0:24:11:d6:5d:05:75:d8:70:00:ca:cc:1f:65:24:
2b:01:16:04:17:2f:e6:c8:91:76:d5:92:0d:12:15:
b7:d7:41:8d:cf:43:40:02:c4:f5:4a:6a:2f:fa:82:
3d:bf:08:6e:06:62:f0:a1:a1:f4:34:41:b8:ef:6d:
bb:03:9d:2d:8b:4e:1a:1e:99:5a:24:25:e8:eb:a4:
41:d4:77:93:c6:8f:40:f7:79:60:af:f1:db:64:b1:
94:73:73:d4:5a:cb:0a:4d:7b:2b:49:66:73:f4:1a:
c0:69:72:93:34:cb:2a:1b:fc:08:26:b9:59:6a:3d:
72:a8:e0:19:fa:33:cb:e7:87:d8:f7:d3:10:35:0b:
e1:f9:a7:48:43:06:3c:ac:b4:a0:31:0a:db:f5:0d:
96:b5:98:67:a3:f9:52:3f:8e:86:99:e6:75:5d:42:
5c:fc:38:7e:05:ab:c1:ff:eb:3a:6c:70:9f:0b:39:
eb:47:30:81:f7:ff:46:b5:2b:cb:ea:8f:16:c5:af:
2b:db:97:33:77:eb:cb:18:72:50:01:7a:ef:8a:c5:
69:87:72:cf:b6:86:71:e6:bd:db:65:06:72:f8:ac:
40:ad:3e:89:69:44:9c:0c:6f:1a:41:c9:d8:f7:2d:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:48:F0:B7:F1:38:13:14:B8:9F:D9:FE:64:00:EB:EB:18:7D:E1
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f6:e9:c0:c4:b2:5f:3a:e7:d1:1c:0b:50:95:cc:e5:ac:10:
b9:b4:65:24:00:8d:b0:14:aa:96:08:a3:d6:82:3f:24:87:8c:
ef:85:39:45:8d:ef:94:4e:57:d3:e2:74:3f:39:05:da:30:ae:
89:12:d4:b2:0a:49:83:38:b2:87:36:d3:40:50:f0:40:53:6d:
37:fd:03:06:1e:4a:f6:fe:1c:12:4a:75:cf:a5:21:6c:ea:9f:
89:31:3c:47:3f:9e:b5:da:f0:f4:27:61:0e:e4:22:b2:13:e8:
dc:b7:e1:d1:8e:53:b6:21:47:c3:c6:dc:34:ce:bf:ca:1a:67:
36:6f:b5:f7:35:d5:fc:db:f0:bd:9d:2f:81:3f:a7:be:35:6e:
17:f2:98:f7:5b:7e:ef:08:42:d4:0c:14:30:d7:ba:a5:d5:64:
96:da:2e:95:a1:c9:6f:31:b5:11:dc:22:16:a4:4c:37:d3:28:
58:94:66:5e:4f:3f:21:6f:e3:5e:35:2e:5e:ae:4a:ad:d8:44:
44:7b:4a:3d:e2:bd:85:35:47:c3:1e:81:d1:f8:24:b5:03:2e:
a7:8b:6e:d4:6c:e1:4b:6e:63:b0:c3:ba:08:a4:2e:69:54:c5:
5d:0e:b1:c3:d8:dc:20:4b:15:ff:84:0c:51:56:7b:1e:7a:02:
57:02:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:25 2026 by rpki-client