Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: E7Fzo6v2ChHA0tQOV6pAumS2k6FBC4TxCiaU+gVSM5Y=
Subject key identifier: A6:BF:C2:C7:A2:33:24:D7:11:74:87:73:00:A6:C7:BE:FB:ED:41:1F
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 019CEC6F795C4418EFCBD2A8DA728BC8659C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 1460
Signing time: Sat 14 Mar 2026 13:00:54 +0000
Manifest this update: Sat 14 Mar 2026 13:00:54 +0000
Manifest next update: Sun 15 Mar 2026 13:00:54 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: k4RGA2lwJGq/xImXsx816wmZ5o8hCta2cH+IR/nx4V0=)
2: gid3PHY7_WHPVtbluwSuNieeZ-Q.roa (hash: 4gqwUBOsuCwNSypnwWO7WCLX7NlTT/vUufoeKcrMUME=)
3: ziiqrtMgnlnu-hPLFOMONS1-3pU.roa (hash: 8ZnAKWsJ3RNRSyRqd1uds5FxjmnKS3VN0RT4iyIYFXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:79:5c:44:18:ef:cb:d2:a8:da:72:8b:c8:65:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Mar 14 13:00:54 2026 GMT
Not After : Mar 15 13:00:54 2026 GMT
Subject: CN=a6bfc2c7a23324d71174877300a6c7befbed411f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:85:af:07:de:4c:02:e5:a6:a9:bb:15:fe:
61:dc:3c:cf:76:39:2d:35:44:bd:6d:41:47:9e:c7:
84:49:cd:29:88:35:bb:16:56:29:c9:6d:8d:6f:27:
30:6f:a6:94:20:cd:7f:c4:05:11:94:04:77:f8:06:
7c:52:d9:bb:72:a7:d4:b8:da:60:8c:df:0a:e1:a7:
f3:98:78:f4:b1:78:6f:ce:a6:0b:a9:0d:37:4f:d6:
35:ea:61:d0:29:b9:eb:7c:26:39:a3:a3:60:80:ae:
87:fa:cd:93:d4:ce:c5:51:e2:54:18:0b:a7:75:0b:
5c:b7:82:e2:94:88:7e:1e:a6:3d:a5:e2:15:e7:69:
41:0f:b3:8a:ea:ea:76:ed:d7:6b:9c:3b:e7:66:54:
c8:f5:b2:83:23:53:c6:ca:c9:8c:33:43:7d:c5:b2:
aa:c4:a5:72:d8:86:5c:fc:1e:95:e8:6c:ba:d6:9a:
10:a7:2f:6a:3c:5f:22:19:dd:1d:1a:41:85:56:46:
56:0a:53:40:fe:22:ea:48:78:d8:22:57:cb:40:6e:
2b:bc:d3:3d:c3:59:be:1c:1b:da:5a:fe:69:49:a5:
0b:f1:bc:eb:96:47:e3:3f:06:79:de:ae:a8:a8:13:
89:38:24:22:45:96:1e:3d:3f:91:33:dd:9c:5c:1a:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:C2:C7:A2:33:24:D7:11:74:87:73:00:A6:C7:BE:FB:ED:41:1F
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6b:96:85:f8:cf:18:f7:e5:b6:9b:c6:68:1b:2e:ef:cc:8b:
37:d1:ca:f7:e9:39:10:ca:ac:0c:82:4b:48:79:85:97:57:3e:
0f:e4:cf:95:2d:c6:49:7a:88:fa:26:bc:19:ef:25:07:9b:a3:
f0:8a:7d:2d:06:a1:9b:72:02:66:a2:78:75:b6:b7:2f:6b:d9:
e0:d9:3f:ae:71:3f:38:a1:bc:f3:59:af:63:52:17:fb:a5:07:
7b:ca:92:0d:bc:8e:b2:6b:eb:bb:a0:42:80:3f:8b:a4:4b:0f:
36:5e:bd:27:bf:19:4d:59:ee:99:f0:f4:45:a6:1b:77:34:81:
89:15:08:dd:ba:38:09:5c:58:e1:38:6c:fb:46:62:0e:88:06:
83:dc:a3:54:cb:60:35:bc:62:df:13:f2:8b:e3:ed:e4:31:ea:
3f:c3:f1:27:1a:3e:64:64:05:4f:c7:b7:0d:65:83:c9:3a:e4:
60:4c:c3:3d:99:b1:81:f9:6b:e9:15:9f:67:51:02:fe:55:ae:
22:72:fe:77:b7:bd:09:e4:7a:ba:e5:e5:23:e6:a1:05:b2:5b:
65:f9:ba:32:80:5a:e6:55:e8:bd:c4:f0:59:ec:49:28:d8:7d:
d6:ca:0f:e5:c9:48:45:bc:76:b7:57:22:49:78:2b:47:77:70:
13:d9:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:15:14 2026 by rpki-client