Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: xRqtXrqRensX/TsE8SC61gtsUjWtU9t2vnw4NM/a6A0=
Subject key identifier: A2:2A:FB:C3:78:B8:9D:3C:F1:72:45:3D:83:77:1B:17:6F:2B:21:DB
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 019E917002BC752C45DCA7DFAF7757A13AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 153A
Signing time: Thu 04 Jun 2026 07:01:37 +0000
Manifest this update: Thu 04 Jun 2026 07:01:37 +0000
Manifest next update: Fri 05 Jun 2026 07:01:37 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: liAyNvVaO2h5AQvePyKO7iGvfo+qeitvaans9enKBXI=)
2: gid3PHY7_WHPVtbluwSuNieeZ-Q.roa (hash: 4gqwUBOsuCwNSypnwWO7WCLX7NlTT/vUufoeKcrMUME=)
3: ziiqrtMgnlnu-hPLFOMONS1-3pU.roa (hash: 8ZnAKWsJ3RNRSyRqd1uds5FxjmnKS3VN0RT4iyIYFXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:70:02:bc:75:2c:45:dc:a7:df:af:77:57:a1:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Jun 4 07:01:37 2026 GMT
Not After : Jun 5 07:01:37 2026 GMT
Subject: CN=a22afbc378b89d3cf172453d83771b176f2b21db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:a8:bf:42:38:3f:7a:72:15:90:b8:49:39:
fe:19:03:a0:7a:36:28:ad:ac:53:22:0d:1b:4e:d4:
88:28:72:9d:9f:d7:e7:96:45:8a:05:69:f3:ce:b7:
fb:29:93:88:23:74:2b:73:1c:a0:c9:12:a2:e9:fd:
5a:37:bf:f0:68:bd:78:f0:40:4c:43:07:a1:18:af:
0e:d0:20:d2:cb:a2:28:95:47:32:6f:93:fa:c1:42:
ef:e8:b4:15:e5:24:6d:12:83:ba:e9:b3:69:9d:d0:
b8:bd:e0:9a:36:be:7d:e9:3e:ab:57:92:2b:a5:2b:
fb:bd:9a:99:0f:5a:c8:47:83:1a:91:08:3e:a3:d2:
9b:d3:c1:c9:65:97:61:66:f4:ae:db:e6:0b:33:21:
cd:bc:a1:0a:a5:45:47:a7:21:98:ae:24:04:20:d9:
a1:75:a8:cd:93:5c:f5:2e:12:a3:74:22:84:08:fd:
32:b8:9d:d3:a7:f6:a9:dd:1b:5e:73:f6:ca:4d:5b:
df:07:1d:6b:c3:54:3b:c1:a8:d3:db:cc:8c:c6:86:
e9:a8:65:3b:33:ad:81:6d:13:b0:d4:c6:e8:0a:f1:
dd:93:1a:0f:bc:d7:94:b6:24:ff:64:f3:5f:d9:e0:
50:76:7d:a2:1d:88:f5:8c:9a:ac:ee:c6:59:5b:fe:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2A:FB:C3:78:B8:9D:3C:F1:72:45:3D:83:77:1B:17:6F:2B:21:DB
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f2:35:e1:fc:4e:ab:c1:86:bd:b6:43:04:76:69:43:4b:08:
3f:06:eb:a1:cf:75:f9:21:af:96:8a:15:98:1e:2b:e3:43:d5:
70:69:5c:d2:04:c7:8e:d4:88:d8:e9:f7:26:b4:87:a8:54:e5:
5c:15:3b:36:6a:f0:6b:e3:99:4a:d1:71:bf:a1:b8:6e:95:aa:
74:8a:49:19:dc:73:b2:62:bb:8b:0b:7f:f4:5b:64:ad:2c:f5:
0e:b8:d1:74:19:8f:57:3f:08:99:e0:61:89:08:03:c9:64:4b:
3b:80:16:eb:b9:2b:e0:11:72:c6:2c:0b:0a:ba:1e:bd:81:c7:
16:65:5f:76:8f:25:de:ba:30:cc:9a:f3:9b:7c:00:00:9a:3f:
a2:7c:45:e7:e2:ce:e0:8a:e7:cf:fc:f5:f2:7c:60:f2:d5:d9:
2e:1d:e5:94:97:87:f8:57:53:69:37:84:bd:6e:27:d0:ff:54:
83:b5:7f:73:c2:3d:3c:08:2a:d4:fe:26:bf:9e:15:90:44:37:
1f:90:ad:0c:35:73:c0:fb:7f:c9:d3:98:b1:1f:f2:c3:de:6d:
87:a7:3a:e9:51:d7:e3:70:78:a1:fb:77:dc:d9:88:bd:64:fc:
a0:a7:b0:51:09:2b:b7:cc:7f:50:f2:f7:d2:16:73:11:b3:27:
64:4c:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:31:05 2026 by rpki-client