Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier: SqwWnDyy3OABoT0MN8XBzCi5JHT9JguFdrkyk3oxLHg=
Subject key identifier: F9:1B:B9:3F:48:D3:34:FF:D0:CF:7C:53:FD:EF:07:DF:63:14:41:DD
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial: 019D38664DF4EFE4512BDD2117EBD15BD2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number: 120F
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: GQuqiJCjADcOHZotsrXYJd_Wc00.roa (hash: L+5tYtA+LDnIm5xyBc0OjV0H0SUAJm6feygTs+2eqRo=)
2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: hTgLN1Yzfg4YZJ3m9Wsm5kotEx2ZtAnfXh1b8kf+rQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4d:f4:ef:e4:51:2b:dd:21:17:eb:d1:5b:d2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=f91bb93f48d334ffd0cf7c53fdef07df631441dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:80:0b:00:1b:7f:54:5d:b7:c3:15:79:67:
66:7c:b6:8c:48:59:a0:81:8e:7a:14:f4:d8:de:7d:
a4:e9:4a:87:58:9e:70:56:90:b8:31:6c:32:a1:d1:
87:fc:f5:cc:1c:c9:f6:5e:cc:2d:30:2a:b0:15:aa:
ae:6c:0c:2c:25:dd:57:0b:49:8d:81:9d:ff:ae:93:
14:33:7e:cd:96:11:48:8a:bf:c6:01:cd:d2:ab:bc:
79:53:27:f8:ff:50:3a:34:61:0b:32:77:de:2c:95:
c4:79:f1:dc:08:ba:3e:3f:a4:5c:94:ab:80:94:c2:
52:f4:bf:9d:07:e1:bb:cb:8e:a5:d1:8f:4f:4f:4a:
96:42:9c:b8:ef:34:b4:71:bd:8a:b3:cd:89:73:ea:
10:7c:96:e4:ee:54:38:9c:b7:01:a5:28:e1:1a:40:
12:94:53:27:4b:71:f2:d0:15:7f:5e:69:3c:4a:37:
a4:2e:2e:d5:da:d5:5b:91:54:68:19:93:bf:e4:be:
57:ef:ae:20:e8:d9:8d:e9:65:b4:91:87:b6:f3:f0:
35:65:66:6e:a7:0c:2d:77:47:de:b1:5d:cf:ce:6c:
92:36:68:e2:53:e6:34:ba:9b:08:0a:ca:d7:0d:4c:
81:fe:55:f8:b3:9b:29:aa:d9:1f:df:e5:b1:16:4e:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:B9:3F:48:D3:34:FF:D0:CF:7C:53:FD:EF:07:DF:63:14:41:DD
X509v3 Authority Key Identifier:
keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:78:8b:ca:91:58:a1:d4:b8:a1:6c:61:18:78:26:fe:bc:55:
8e:1a:1b:f1:a3:d0:2e:d0:de:b7:1f:6e:02:5f:82:79:48:49:
e3:7a:09:59:cc:28:ff:9b:d7:05:26:18:14:96:eb:80:e0:4b:
5d:78:e7:eb:35:d4:eb:cf:1a:8e:23:52:8d:50:ca:64:22:45:
73:0c:b8:c8:be:17:4d:9d:b7:80:9c:f1:60:ac:a9:7f:47:37:
1f:56:b0:a2:02:3e:ac:6e:1d:33:12:98:0e:be:32:33:ad:88:
f8:de:88:a0:45:8f:ce:e9:07:e2:9e:d2:29:b2:34:23:49:19:
36:fa:58:5a:88:60:6e:5d:f1:9d:e0:1d:84:98:1a:0c:0c:08:
c3:11:51:75:99:45:f9:cc:1b:46:c3:d0:fe:10:86:80:15:8f:
94:03:2e:b6:ec:1d:6e:7f:cd:f4:86:bf:b0:03:bc:e4:cc:01:
9e:94:44:64:da:26:38:d1:b7:0d:74:af:f3:b5:75:91:82:0e:
c4:7c:a8:e1:b3:67:d2:b9:aa:d1:ec:dc:80:0c:ce:37:56:b1:
d4:d1:d2:85:f5:62:ea:b8:dc:5c:d7:f1:16:1d:80:a7:16:e7:
e3:2a:b1:74:26:26:ee:3f:d2:cf:32:23:07:0b:94:eb:6e:8f:
b9:f1:b1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:56 2026 by rpki-client