Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: FPbvryz9hYuQlHLtuXp9iBwe4xHYPIiJ/agu9/NF1/A=
Subject key identifier: 64:48:A5:BB:6A:FF:EC:29:1C:4C:09:FA:1E:23:A8:F7:E2:12:3D:04
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019D39E541B62A97BDB3D6DA42CED21869C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:19 +0000
Manifest this update: Sun 29 Mar 2026 14:00:19 +0000
Manifest next update: Mon 30 Mar 2026 14:00:19 +0000
Files and hashes: 1: bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa (hash: brHlGv5imLHwbxwJPoUHI3T7npY3uz8hyi909TKqiCI=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: fRrJ2NLTXzAVjKuAf293NTVQ9p6BWiTm1mhItCSXj8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:41:b6:2a:97:bd:b3:d6:da:42:ce:d2:18:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Mar 29 14:00:19 2026 GMT
Not After : Mar 30 14:00:19 2026 GMT
Subject: CN=6448a5bb6affec291c4c09fa1e23a8f7e2123d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:9b:ef:9d:8b:ab:f6:85:9e:b1:de:ff:37:
39:a3:55:ed:1f:88:aa:1a:37:49:5c:a4:d7:9e:fb:
79:6f:5c:b4:57:b1:da:8e:69:c5:81:9f:69:d8:2f:
a7:ec:34:3c:f7:fd:bf:f3:4b:2a:13:71:d0:80:59:
a7:58:b8:4f:a9:79:0e:40:f0:f0:32:3c:be:2e:3d:
10:6f:97:25:1e:a3:00:98:b4:d4:0f:a0:43:cf:64:
fd:2b:b2:f7:78:c0:47:4c:f6:04:3a:9a:80:8d:af:
de:10:02:ce:59:d3:55:e2:07:4d:5c:08:67:aa:2d:
88:77:b0:a1:ab:65:50:5f:0f:93:ba:ca:09:f8:78:
84:f9:ae:6e:db:a3:26:72:dd:e6:e3:d4:2b:ee:46:
d0:2b:70:77:13:65:29:42:ce:a1:39:58:07:da:c1:
64:2a:d4:56:41:0e:7c:dd:9b:2e:10:7a:9d:4f:10:
33:2d:1f:07:5b:fd:41:60:84:d5:26:75:33:2f:63:
a5:45:c8:df:27:b3:7c:67:65:04:14:12:43:e7:24:
8b:36:47:06:15:ec:da:c4:26:e5:2e:df:44:6c:2d:
5c:4b:6c:5d:80:c3:d2:43:6f:a4:20:22:82:6b:a4:
a5:33:77:81:ac:0c:dc:79:26:62:f8:b8:2a:a5:23:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:A5:BB:6A:FF:EC:29:1C:4C:09:FA:1E:23:A8:F7:E2:12:3D:04
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:45:d2:45:ff:14:24:bd:5f:5d:94:99:08:eb:f5:23:e7:f6:
1a:9e:21:18:c4:29:0d:bb:0d:8c:19:28:7a:01:e6:db:ea:86:
69:67:3d:03:7b:07:5a:15:38:48:22:1f:94:71:b0:5e:4d:19:
71:24:41:0e:81:86:e6:a1:57:08:14:22:08:ef:d6:ac:e3:b7:
d7:3d:9b:77:6d:6a:1a:6e:02:4d:24:0c:10:73:13:f8:84:3b:
95:c9:fd:3f:d5:2f:a8:3b:2d:fc:f0:6f:74:44:97:97:e7:83:
38:1c:d8:98:71:c4:a9:1c:69:2c:60:47:03:de:a3:cd:30:36:
86:d2:4f:0c:68:0f:5e:eb:57:fc:2c:8f:1d:ba:7f:78:6b:42:
dc:7b:61:24:2b:22:c9:7a:36:61:1b:28:3a:8f:f8:f7:34:e4:
93:be:61:b3:c4:36:3d:c1:d6:00:d2:cf:ae:95:cd:11:a6:74:
a5:43:ef:67:17:4f:02:75:16:54:51:c6:70:4c:b0:fd:81:1b:
31:b3:eb:63:d2:5f:f2:f0:68:78:37:78:7c:6e:a0:93:82:e1:
1f:22:f9:57:6f:bf:d5:43:0d:34:8c:f6:67:7e:0b:8a:84:a8:
45:b8:3c:7d:8c:50:cb:09:7f:6d:49:db:dc:c7:40:1f:2f:3d:
6e:ae:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:48 2026 by rpki-client