Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json)
Hash identifier: aA01syMNz1ngK/usi4y7AGdoYKp73br2XPGCr1SQBIU=
Subject key identifier: 9F:AA:76:7A:70:2E:D9:12:06:BE:DB:3C:C2:D4:53:1F:5A:BB:5C:79
Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Certificate serial: 019D2A726FB4EA9FDE13F2411EC9C8C82ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
Manifest number: 0386
Signing time: Thu 26 Mar 2026 14:00:35 +0000
Manifest this update: Thu 26 Mar 2026 14:00:35 +0000
Manifest next update: Fri 27 Mar 2026 14:00:35 +0000
Files and hashes: 1: IBGO-I7f-Bxf5flZlSUpyiUE_zA.roa (hash: MEvjGUC5VTgMRrOy7YLZDcVgLghn/454RnFu57ROP3Y=)
2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: mtHFr5VF180ISGxz6ERZ5keuAE22rhUb9FxgfMaELqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:6f:b4:ea:9f:de:13:f2:41:1e:c9:c8:c8:2a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Validity
Not Before: Mar 26 14:00:35 2026 GMT
Not After : Mar 27 14:00:35 2026 GMT
Subject: CN=9faa767a702ed91206bedb3cc2d4531f5abb5c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:62:fe:a9:0f:e7:14:c6:4e:29:81:ff:ed:
07:78:cc:c2:12:5b:0a:e1:b6:40:18:38:68:ab:b3:
d2:07:70:bf:d4:99:a3:7f:3b:4a:f2:07:20:69:eb:
69:33:07:38:8d:b7:ec:ad:81:d1:95:89:7c:ee:4c:
3b:08:b1:c9:40:77:5a:b0:ce:3e:82:e5:2b:f4:25:
f2:4a:fa:6d:2b:d8:99:0b:75:f4:67:6d:5a:a8:a1:
67:0d:9d:49:fd:9f:72:d0:c9:5e:fc:59:69:bc:3b:
2e:0e:6c:54:75:29:47:85:5e:8f:c0:a6:c5:90:e7:
e2:e8:e3:79:ce:92:de:06:99:73:1c:37:c6:8f:c5:
03:fa:a6:0c:6c:00:36:61:2d:d6:1d:cb:5a:53:3b:
d3:48:fc:4b:85:a5:e6:99:14:f8:1f:58:9c:c1:12:
c8:da:60:79:c8:40:33:48:3d:77:70:bd:8e:f5:63:
a6:df:bf:d1:48:8e:1f:28:53:d1:28:9d:29:b8:35:
89:8f:45:7c:fb:48:23:a5:30:42:63:2e:e9:33:a6:
23:6e:a5:38:14:1a:43:ee:6e:c0:fb:5d:13:71:d2:
c1:60:d6:e0:92:ee:b6:87:8d:dc:be:16:66:39:1c:
9f:e3:cd:5d:cb:8f:73:ee:45:71:1e:44:b6:e3:b3:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:76:7A:70:2E:D9:12:06:BE:DB:3C:C2:D4:53:1F:5A:BB:5C:79
X509v3 Authority Key Identifier:
keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:41:4b:5d:1d:1d:74:30:3f:6a:19:71:4d:a5:c3:bf:91:
e5:56:66:6a:2a:2a:0b:99:59:ed:42:19:27:3d:35:b3:75:d0:
c1:4c:2f:e4:3a:c2:69:38:2c:c3:cb:4a:de:35:ff:57:2d:55:
7c:28:7d:37:29:e2:4f:6a:c3:09:c3:68:ae:35:6b:1e:08:b6:
53:27:bc:d2:21:0d:df:9f:4b:95:74:0c:99:f9:df:99:5d:44:
41:37:41:ec:a1:bd:86:60:59:02:06:1d:91:d4:ff:df:e4:6d:
49:24:37:32:d5:4e:ae:62:8f:77:6e:c3:7a:83:69:49:cd:b9:
2e:a3:9a:d9:67:26:71:6b:98:27:58:0a:c6:20:f6:a0:1c:d5:
85:8c:8d:c5:1e:de:95:89:ec:29:46:69:93:d7:c8:8e:6d:56:
01:d6:20:c8:83:b0:42:e9:22:9a:17:4e:38:fe:8f:22:f2:23:
16:7d:b8:d8:05:86:84:04:a9:f9:b7:eb:14:28:4b:a9:b4:5b:
33:89:98:9e:7c:d8:60:75:7c:e3:9f:24:15:0c:d5:77:3a:2f:
87:33:fd:92:8b:d6:36:55:11:af:cf:19:eb:fe:99:b4:32:f3:
03:34:cd:56:83:a9:9f:c7:2d:c3:f3:92:05:74:f0:bd:5d:fe:
6c:11:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:55 2026 by rpki-client