Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: aLEpCFYGD17D888M7MYjQFEUaC9psaF494LR3P8mC+w=
Subject key identifier: 13:A5:3C:CE:DF:B6:FC:7C:CC:BC:67:37:C8:C8:64:6E:5C:B5:50:4F
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019D38D2A428E385773750E6B495F6B4A634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: NNFc56iKx5vVFLZUHDppupY+crj2Zsm9VIMGOeU3Z7A=)
2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a4:28:e3:85:77:37:50:e6:b4:95:f6:b4:a6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=13a53ccedfb6fc7cccbc6737c8c8646e5cb5504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:9a:e4:d8:46:22:bf:dd:88:8f:ef:c1:6a:
9c:d7:ce:6b:18:f1:22:5c:f7:f9:cf:4b:d8:4a:af:
d3:90:c4:bd:fe:b5:d0:be:af:f9:06:ab:44:4b:a6:
52:a9:c5:81:fd:22:2e:7a:3d:12:a5:e0:37:c9:be:
fc:d5:8c:4c:b3:0f:05:71:d5:55:dc:80:4d:56:1d:
68:3d:9d:92:f0:81:2f:89:a9:ab:45:48:75:ac:14:
69:54:87:57:50:9d:d3:b9:7b:bc:01:d0:ba:9b:40:
4b:78:3c:f5:1c:60:c6:62:3f:f8:6d:d2:5b:dd:47:
23:2f:66:59:be:63:a6:d3:bb:e2:fc:7e:d1:60:e9:
1b:f5:96:f3:10:b1:74:49:43:85:a1:9e:f8:53:69:
32:83:f9:cd:0e:b3:cd:05:76:1b:6a:cf:77:95:b1:
6b:f9:10:ed:e4:b7:56:88:51:af:b1:0f:88:1b:3c:
b3:3f:09:c8:59:4c:61:51:25:81:7b:96:f6:05:d1:
3e:e1:cb:41:53:d9:9f:c5:26:9a:f6:15:a2:f5:b8:
db:8e:b8:86:58:94:f5:83:8a:51:da:ee:75:e4:1d:
72:ec:be:f6:da:79:36:a4:85:39:1d:bb:6e:8e:86:
2e:b1:7b:46:f1:63:2b:8a:60:34:af:6e:42:e9:08:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:3C:CE:DF:B6:FC:7C:CC:BC:67:37:C8:C8:64:6E:5C:B5:50:4F
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2f:46:3b:db:5e:52:36:3d:4e:a1:bd:d4:81:7f:89:3c:db:
04:0a:64:16:f6:b7:93:0a:d2:fa:54:ff:aa:8b:9e:c7:9e:36:
19:bc:56:18:fd:92:fc:56:88:0a:5c:2d:43:b4:ae:49:10:4c:
16:1b:4b:36:60:79:b5:b9:58:7d:3c:e9:12:c1:20:91:25:80:
8d:ac:ec:75:3d:a0:82:68:62:81:46:e5:63:1a:7e:a7:ef:29:
c7:33:0e:57:1d:2f:f4:82:b1:6b:a5:1c:be:e4:1c:ca:65:cb:
4a:53:1b:38:73:d3:35:a5:cd:3f:e9:06:0d:ca:e2:67:c5:f1:
e6:53:d6:0d:b0:d1:0b:da:a9:fd:1a:6f:19:a5:f6:b3:e5:a2:
89:cc:53:ab:72:1c:62:f6:d7:44:40:a5:f2:68:19:2d:1f:e5:
33:34:51:0f:1f:8e:81:ee:ae:47:f9:2c:72:39:27:ba:66:38:
02:87:66:b0:9b:48:5f:5e:ad:33:b1:82:b6:63:f7:77:e2:a9:
18:cf:c0:1f:7e:61:26:a3:cf:ab:87:96:ab:fe:94:c7:08:ef:
5e:b1:5d:ff:5d:76:65:27:dd:46:d1:fa:98:aa:06:2f:45:51:
7d:9d:f4:c4:56:40:ef:41:90:20:bb:3b:b3:5e:f7:25:0a:cb:
ce:4b:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:54 2026 by rpki-client