Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier: g8FFoFrzPoRFIqehtJbF4c3v2WAnrTZ3uHtgHTChOsE=
Subject key identifier: 82:DB:2A:82:6B:18:F0:27:A9:C8:C4:C2:9B:F7:FC:46:D9:9C:87:3D
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial: 019D130FAB4E4CE188116593AEF7E19C330C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number: 06B4
Signing time: Sun 22 Mar 2026 01:01:26 +0000
Manifest this update: Sun 22 Mar 2026 01:01:26 +0000
Manifest next update: Mon 23 Mar 2026 01:01:26 +0000
Files and hashes: 1: LbD094gia2V-CM9R1s_eaxUYrLA.roa (hash: qpCuUSL2x3JZyrYkw1LLZ2ApxVtSu8qTNSF8qZkIL9c=)
2: UAj8pMDVe1e_Bkx0I3cCM4tHXx0.roa (hash: UfnTgECqiB69+vQOPwrym36fQCF1IKiWDwU9p+yi/X4=)
3: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: aDUhPmPUayW8UV761Ne7z3urHrYmQxbN5tmg6U1dWpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:0f:ab:4e:4c:e1:88:11:65:93:ae:f7:e1:9c:33:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
Validity
Not Before: Mar 22 01:01:26 2026 GMT
Not After : Mar 23 01:01:26 2026 GMT
Subject: CN=82db2a826b18f027a9c8c4c29bf7fc46d99c873d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:06:5f:5a:ca:e7:24:d9:d0:f7:7c:33:aa:
df:ce:70:8c:f7:ac:35:3c:ab:08:bd:cb:a4:cf:42:
2c:d6:b8:68:50:3a:62:ca:7f:74:f1:7a:b2:42:c0:
b3:35:fe:e6:a9:de:ab:14:17:c5:3b:2b:62:e2:c5:
73:d1:fd:ad:06:05:b6:75:f4:5c:79:58:b7:7a:96:
9d:97:b1:ba:ba:95:a6:46:fd:8e:c6:c5:83:85:fa:
00:1d:a5:fc:a5:62:61:29:be:0b:73:31:3e:86:f2:
18:2d:98:33:a6:58:33:72:5b:a3:f7:4f:35:61:e9:
4d:2e:98:92:75:c1:00:bf:44:7e:00:73:46:f1:8d:
a9:5c:2c:03:b7:f3:fb:51:36:75:d0:14:22:64:54:
d4:57:f8:32:e9:6e:66:3c:66:81:e7:37:54:d2:02:
b7:e9:3a:7f:33:9d:0f:a3:e7:f8:58:f8:6b:5f:7c:
02:7d:ff:f6:13:74:57:26:b2:97:96:4a:3e:4d:65:
a9:31:4a:5c:7f:fb:7f:ca:9d:82:63:a1:26:33:35:
a7:a1:01:8f:41:30:78:03:f6:3c:39:e5:f6:57:7e:
93:46:23:19:25:3d:c2:5b:8b:1d:34:77:43:ed:cb:
ab:60:5c:23:2c:9a:de:50:5e:99:c4:fe:01:63:54:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DB:2A:82:6B:18:F0:27:A9:C8:C4:C2:9B:F7:FC:46:D9:9C:87:3D
X509v3 Authority Key Identifier:
keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b6:8b:f6:c0:aa:11:46:44:de:80:ee:71:14:76:54:1c:f0:
49:47:f7:c5:62:af:bd:95:83:e7:1e:6f:fd:4c:56:73:65:be:
b2:62:45:b0:37:13:59:3a:0b:f6:f0:d8:33:7d:39:72:75:c4:
f6:6e:e6:2c:cd:82:ec:60:d8:a0:9d:6e:f2:9e:01:b3:d1:4e:
d2:17:de:3a:1b:df:d6:5a:c5:f9:90:f8:7d:ff:93:d7:64:c5:
c1:21:f7:68:37:85:17:f4:70:77:98:42:a3:32:cc:b4:40:9d:
3a:29:fd:f0:7f:8f:7d:10:ad:a1:44:f6:c6:10:55:35:7e:d5:
c9:ec:60:ef:7d:5a:b9:4b:7a:13:55:ec:ce:64:42:cf:70:45:
d0:6f:2e:ee:39:69:0e:de:e4:3c:5b:a5:62:38:94:07:fd:bf:
af:5c:ad:82:09:5a:e4:ba:4a:ed:7e:b7:f8:21:e2:f5:d2:ab:
90:1b:5b:fa:dc:e9:f3:04:33:a8:cb:50:7e:8a:e3:57:24:10:
20:87:43:91:a3:03:22:d7:98:15:7a:9b:1a:af:46:1f:41:f4:
f4:f4:2d:5f:61:92:62:a5:71:44:3a:f6:cd:59:4a:45:4f:07:
57:36:6b:86:b7:7f:c4:ce:39:a4:a1:5c:64:2d:7d:36:7b:6a:
d9:21:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:43:13 2026 by rpki-client