Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: ymNBcu3Uj+YQNft67SZQ7M52QsM8jdsrAmEgzm+4T9o=
Subject key identifier: C8:CA:29:83:9A:DE:70:E3:72:AA:0F:77:90:DE:17:05:BB:F1:06:0A
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 019D3866A293BD7613401FCBD26026C04471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:23 +0000
Manifest this update: Sun 29 Mar 2026 07:02:23 +0000
Manifest next update: Mon 30 Mar 2026 07:02:23 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: Z3ighg9QbnRnI39LhQCUpgmwsLKeV/AtzGVayiFjJnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:a2:93:bd:76:13:40:1f:cb:d2:60:26:c0:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Mar 29 07:02:23 2026 GMT
Not After : Mar 30 07:02:23 2026 GMT
Subject: CN=c8ca29839ade70e372aa0f7790de1705bbf1060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:fd:5c:02:79:d2:d4:fd:b1:29:66:c6:35:
33:59:9e:bc:38:42:48:0a:29:41:71:5c:94:cc:dc:
de:1f:a8:7a:84:ed:36:09:78:f3:66:c8:ef:74:13:
b2:3f:90:60:de:0f:4c:f4:6b:18:65:b7:50:ed:d5:
2a:6f:98:15:29:23:94:07:2e:64:fe:b0:bf:ee:e7:
dd:40:57:18:c2:dc:ad:e7:11:bf:7e:22:2b:85:1c:
e6:05:5f:0b:88:62:ec:04:d1:17:b9:cf:be:46:ae:
21:dc:34:22:94:14:fe:7e:77:40:69:bb:79:f3:46:
ae:c8:fa:6c:0b:ec:72:e8:f9:74:18:1d:ec:3b:a9:
ea:6b:28:96:fd:8f:af:c3:6f:f4:68:2f:58:be:b3:
4c:bf:22:37:bb:d7:19:14:d7:99:8a:9f:9f:2c:f6:
78:c6:c0:47:67:b9:ca:c1:05:4e:c0:da:72:05:c7:
59:16:f5:16:f7:08:ec:9d:7d:2f:34:51:38:38:6d:
93:96:7c:02:ab:c3:ef:aa:ff:e6:16:32:ad:25:70:
ee:a8:eb:4a:21:36:c6:81:b6:8a:e7:a8:5b:01:93:
6d:4e:f5:38:52:fa:89:e5:a1:35:b6:42:ca:32:25:
34:2c:aa:8b:e7:5e:47:b5:9e:22:1e:6a:1f:0d:2e:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CA:29:83:9A:DE:70:E3:72:AA:0F:77:90:DE:17:05:BB:F1:06:0A
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:65:4b:9a:63:80:15:b6:a6:33:6e:1c:d3:c3:6f:5f:b5:14:
97:4b:00:b4:f3:f7:17:17:ad:59:bb:df:5d:65:54:ce:15:c6:
78:90:8f:24:ef:b4:5c:6c:2b:f9:5c:b6:9a:61:42:ce:3f:2b:
54:95:e7:e2:46:b5:cf:6b:dc:57:cf:58:15:1a:39:ab:db:75:
67:ba:3c:50:0a:56:0c:34:7e:07:05:27:7f:5d:ba:6a:21:54:
3c:c5:f1:78:df:bd:e7:ad:a7:68:d2:48:4e:7d:8b:e5:7f:cc:
74:66:83:5f:f1:36:13:0e:48:c9:ec:55:9d:5e:01:84:c5:27:
a8:8c:f8:78:61:70:9e:39:26:b1:63:c5:db:c2:21:dd:ac:40:
47:37:8b:b1:8c:06:45:ea:df:ae:3b:bf:d5:d0:e1:e7:ed:2d:
3b:48:ee:b5:8f:aa:fe:4d:1d:e0:aa:95:a8:ff:8f:fd:9e:a1:
55:c1:5b:b4:d7:68:c8:de:90:43:4b:a3:4a:11:d8:36:cd:f6:
10:c3:b1:53:54:8c:22:ef:de:c8:75:8f:58:ed:c5:e6:9a:1f:
45:04:6e:b5:c1:c7:53:ee:57:1d:8d:a0:db:3a:d9:6b:56:6a:
a0:ba:41:14:e1:0e:c5:a2:bb:7a:53:98:95:1b:a4:18:78:d9:
50:a5:bb:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZqKTvXYTQB/L0mAmwERxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjE3NWYyZTgyOWI0NjY1NzU5NmRkOGYzMmUxZjkzZWNi
ZTBhMjQwHhcNMjYwMzI5MDcwMjIzWhcNMjYwMzMwMDcwMjIzWjAzMTEwLwYDVQQD
EyhjOGNhMjk4MzlhZGU3MGUzNzJhYTBmNzc5MGRlMTcwNWJiZjEwNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwf9XAJ50tT9sSlmxjUzWZ68OEJI
CilBcVyUzNzeH6h6hO02CXjzZsjvdBOyP5Bg3g9M9GsYZbdQ7dUqb5gVKSOUBy5k
/rC/7ufdQFcYwtyt5xG/fiIrhRzmBV8LiGLsBNEXuc++Rq4h3DQilBT+fndAabt5
80auyPpsC+xy6Pl0GB3sO6nqayiW/Y+vw2/0aC9YvrNMvyI3u9cZFNeZip+fLPZ4
xsBHZ7nKwQVOwNpyBcdZFvUW9wjsnX0vNFE4OG2TlnwCq8Pvqv/mFjKtJXDuqOtK
ITbGgbaK56hbAZNtTvU4UvqJ5aE1tkLKMiU0LKqL515HtZ4iHmofDS4ZhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjKKYOa3nDjcqoPd5DeFwW78QYKMB8GA1UdIwQY
MBaAFFRhdfLoKbRmV1lt2PMuH5PsvgokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTIt
YmIxYjBlNDE4YTIxLzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTItYmIxYjBlNDE4YTIx
LzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmVLmmOA
FbamM24c08NvX7UUl0sAtPP3FxetWbvfXWVUzhXGeJCPJO+0XGwr+Vy2mmFCzj8r
VJXn4ka1z2vcV89YFRo5q9t1Z7o8UApWDDR+BwUnf126aiFUPMXxeN+9562naNJI
Tn2L5X/MdGaDX/E2Ew5IyexVnV4BhMUnqIz4eGFwnjkmsWPF28Ih3axARzeLsYwG
Rerfrju/1dDh5+0tO0jutY+q/k0d4KqVqP+P/Z6hVcFbtNdoyN6QQ0ujShHYNs32
EMOxU1SMIu/eyHWPWO3F5pofRQRutcHHU+5XHY2g2zrZa1ZqoLpBFOEOxaK7elOY
lRukGHjZUKW7MA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client