Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: KLVxalZIzjJVaNR1W/zVYHIcxfFRo4VRYrFPCkjh3Ao=
Subject key identifier: 8F:93:C8:85:65:FF:6A:CC:44:2D:61:23:E7:4C:48:D6:4F:C4:94:83
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019D273B35FE944B189EF85E6EFD66041B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (hash: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k=)
2: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (hash: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI=)
3: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: jsay1uLLUBRYAuphHaBT8zbk1cuUNczuwf/H6HNOZfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:35:fe:94:4b:18:9e:f8:5e:6e:fd:66:04:1b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=8f93c88565ff6acc442d6123e74c48d64fc49483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a2:59:20:af:29:5b:cf:2c:1e:49:00:bf:36:
4f:6d:98:de:22:7e:2b:dc:54:11:d0:45:7d:22:96:
21:b8:56:24:4b:12:64:68:a0:f3:8a:28:4c:d7:e4:
11:d1:e9:89:5e:57:45:09:65:d2:e4:25:6b:99:c0:
85:71:eb:06:ea:5a:f6:30:42:fa:13:32:cb:4f:35:
39:54:0e:f0:26:d5:be:01:5b:bb:39:ca:62:50:8e:
41:9e:35:1a:23:93:78:09:bb:74:7c:ac:b5:c6:ed:
b6:ff:ab:cc:63:a1:7f:71:de:2f:2f:51:98:da:a4:
9a:9c:ce:11:63:ac:03:98:57:cc:6a:ab:f0:94:79:
a2:63:2f:2f:65:4f:1b:59:11:45:fa:ec:ec:cb:61:
c4:04:5a:98:b4:ed:22:c0:e7:f1:6b:af:d1:05:bb:
08:09:e8:4a:53:77:69:3a:b9:71:c0:07:fd:9d:b6:
54:c7:6e:39:f5:78:55:4a:34:7b:b4:d2:8f:3b:5b:
7d:6c:64:08:2a:d7:fb:95:29:ec:cb:8e:c2:94:b8:
e9:b9:87:8c:9a:28:9c:23:05:a3:a3:92:6d:38:66:
0b:51:e4:8d:a3:c4:ce:4a:5c:ee:80:ff:f2:4a:fe:
10:d5:5b:ed:fd:9c:da:1a:ab:96:8b:f7:94:77:6b:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:93:C8:85:65:FF:6A:CC:44:2D:61:23:E7:4C:48:D6:4F:C4:94:83
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:20:81:33:fd:4e:ec:44:9c:0d:01:cf:4b:36:5b:2b:76:88:
3c:90:62:74:c5:4a:b0:26:17:08:bf:b4:3e:83:56:1f:cc:57:
25:68:12:32:c7:6c:ca:9b:bf:1f:0c:69:c5:26:90:85:ec:62:
f8:c6:8a:0e:7a:0d:39:a0:ef:26:c0:28:97:60:c3:90:b2:3e:
60:6d:93:5a:1d:db:f2:10:43:ef:8c:a6:c3:88:b1:b7:fa:40:
24:ba:2f:0d:36:65:8e:d7:04:4d:cc:45:6e:5c:b2:21:a3:78:
b9:1f:57:88:5a:1b:0a:24:8d:a1:4b:8f:e8:b5:ab:29:48:54:
a2:98:fd:bd:c7:a1:23:48:68:e5:f7:ea:53:e2:8f:3f:6c:84:
28:b6:3c:3a:83:9c:13:bc:2e:bb:9c:fe:de:86:ef:b3:7f:ad:
b8:3d:1c:52:ff:47:75:cc:62:8b:42:d6:94:79:c6:14:64:fa:
7a:e4:d6:23:b3:b1:bd:97:f3:fa:1e:5d:b8:2e:1d:14:6f:e2:
60:d4:b6:1f:f2:25:4e:7c:17:0f:60:de:d0:9b:e6:d0:35:21:
ac:0d:9d:f8:62:ce:3d:47:c9:55:80:c1:7d:9d:a0:20:00:cb:
1c:c1:4c:d3:30:36:1d:e0:11:7b:c4:02:63:b3:61:b6:14:96:
0c:57:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:17 2026 by rpki-client