Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: Rkp+7Rg4XadRxMMjFa9bvgISYvAGd0TV8nVbnontqns=
Subject key identifier: 21:7A:B5:CC:E0:5A:16:1E:99:1E:DC:D9:67:06:CB:B1:5B:49:7A:36
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 019D37899B7099EFD5FABA24891200EED9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0E80
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: 5cNb8WLwOkyZzxqvZpVV_tXxjZY.roa (hash: kGU2pG7tI4JFvO4VXkUaTdEhyoNcFmBCA+lGdKRbj0g=)
2: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: KwdNZQG+ACDe3R2R9xVmWXXHSipLNIY1Tit2ax2WNxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9b:70:99:ef:d5:fa:ba:24:89:12:00:ee:d9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=217ab5cce05a161e991edcd96706cbb15b497a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:c5:c3:48:d3:52:3f:a8:98:8d:3d:96:fe:
d7:58:0e:b4:64:45:02:2c:0e:c6:20:55:25:3a:b2:
4c:b4:f4:0f:41:59:54:91:4b:38:d5:6a:94:7b:7f:
23:27:50:b7:e0:ea:cb:12:ba:06:95:f7:e0:1f:cd:
e0:84:df:34:d6:98:29:f8:1a:62:d8:dc:ac:2f:bc:
6c:e0:bf:b5:11:a2:0c:dc:f0:73:11:64:02:87:50:
60:9a:4a:5d:c9:5a:ed:67:83:cc:0e:25:3b:d9:b1:
a4:cf:c4:5b:b2:38:24:92:f8:04:87:09:cd:80:c8:
2f:f9:55:d9:96:ed:d0:28:78:a5:1c:c8:58:e8:5f:
94:2b:2a:47:16:89:8d:32:d7:5f:71:47:62:c9:07:
46:7b:10:88:8e:3e:6e:c0:c3:92:97:d5:e2:ea:ab:
16:57:c3:17:81:30:d8:b7:ce:e8:8b:98:80:1d:f6:
cf:2a:4e:ad:25:38:4e:e7:93:6b:6b:0f:c0:4f:ec:
a9:9f:b3:2a:fe:26:61:b0:be:0e:3a:5b:73:c8:13:
d1:48:c8:38:49:e9:05:9c:9b:1f:67:39:03:62:fc:
a8:ce:10:6d:73:8c:16:fb:91:41:92:5a:60:72:91:
be:cb:7b:af:b4:59:56:50:b9:f4:2c:f1:76:2e:09:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:B5:CC:E0:5A:16:1E:99:1E:DC:D9:67:06:CB:B1:5B:49:7A:36
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:6b:53:a8:12:e5:9f:cf:6e:b9:bf:fe:ff:34:0e:a3:b3:
72:e7:9c:02:76:c5:61:87:c2:0d:b7:34:ba:a1:64:54:56:43:
96:07:c9:93:7b:ca:ae:7d:65:67:e4:29:34:ae:07:1c:8e:86:
41:55:31:97:65:16:0e:7f:21:33:11:85:d4:fe:91:55:f0:36:
f9:bf:63:aa:bb:90:69:66:82:a9:16:40:d8:0e:40:da:93:6e:
63:0e:d2:e4:e5:00:71:49:95:3f:7b:08:07:01:71:7f:0f:8b:
6c:65:96:ac:da:70:94:c1:b9:3f:01:14:6b:bd:a7:d1:22:55:
ca:f1:fd:2d:d6:06:63:02:5b:de:2c:c2:50:95:5b:45:00:db:
23:50:06:73:f6:dc:9b:15:c9:e9:d6:93:d4:83:af:c7:69:a0:
77:1d:40:8c:47:40:ae:d1:86:74:e1:23:a3:97:6d:8f:4f:c3:
90:b8:ab:8b:42:0e:64:ad:b1:57:84:66:9c:04:8c:5e:71:f8:
c8:8c:9f:fd:73:80:13:15:23:ba:be:cc:25:a4:64:2d:92:1b:
19:8e:27:c5:f5:4f:11:c9:a2:e2:bb:a0:29:27:8f:3b:23:98:
6e:3e:8a:2d:c6:39:ba:8c:2e:65:b5:40:e1:ef:35:61:e4:3a:
60:a0:68:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iZtwme/V+rokiRIA7tnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm
MjQ0ZDMwHhcNMjYwMzI5MDMwMDU4WhcNMjYwMzMwMDMwMDU4WjAzMTEwLwYDVQQD
EygyMTdhYjVjY2UwNWExNjFlOTkxZWRjZDk2NzA2Y2JiMTViNDk3YTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNfFw0jTUj+omI09lv7XWA60ZEUC
LA7GIFUlOrJMtPQPQVlUkUs41WqUe38jJ1C34OrLEroGlffgH83ghN801pgp+Bpi
2NysL7xs4L+1EaIM3PBzEWQCh1BgmkpdyVrtZ4PMDiU72bGkz8RbsjgkkvgEhwnN
gMgv+VXZlu3QKHilHMhY6F+UKypHFomNMtdfcUdiyQdGexCIjj5uwMOSl9Xi6qsW
V8MXgTDYt87oi5iAHfbPKk6tJThO55Nraw/AT+ypn7Mq/iZhsL4OOltzyBPRSMg4
SekFnJsfZzkDYvyozhBtc4wW+5FBklpgcpG+y3uvtFlWULn0LPF2LgkgWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF6tczgWhYemR7c2WcGy7FbSXo2MB8GA1UdIwQY
MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt
OGMzYjNmMzBkMjE1LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1
LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANABrU6gS
5Z/Pbrm//v80DqOzcuecAnbFYYfCDbc0uqFkVFZDlgfJk3vKrn1lZ+QpNK4HHI6G
QVUxl2UWDn8hMxGF1P6RVfA2+b9jqruQaWaCqRZA2A5A2pNuYw7S5OUAcUmVP3sI
BwFxfw+LbGWWrNpwlMG5PwEUa72n0SJVyvH9LdYGYwJb3izCUJVbRQDbI1AGc/bc
mxXJ6daT1IOvx2mgdx1AjEdArtGGdOEjo5dtj0/DkLiri0IOZK2xV4RmnASMXnH4
yIyf/XOAExUjur7MJaRkLZIbGY4nxfVPEcmi4rugKSePOyOYbj6KLcY5uowuZbVA
4e81YeQ6YKBoUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:46 2026 by rpki-client