Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: IhgZMzKLy3p3H7Wigda0NRIbmQiGzz/bjcuzG7UfuXo=
Subject key identifier: 12:AA:38:D6:CD:3F:D2:F5:58:BE:1A:27:A5:4A:DA:51:D7:91:2F:FE
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 019D371C04DF8B3E8895920B704B6BCBA7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 0BF7
Signing time: Sun 29 Mar 2026 01:01:16 +0000
Manifest this update: Sun 29 Mar 2026 01:01:16 +0000
Manifest next update: Mon 30 Mar 2026 01:01:16 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: 0GrDnZoSQvrzGgcUyA94YFVI1HCvclUhqm65s7nDUsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:04:df:8b:3e:88:95:92:0b:70:4b:6b:cb:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Mar 29 01:01:16 2026 GMT
Not After : Mar 30 01:01:16 2026 GMT
Subject: CN=12aa38d6cd3fd2f558be1a27a54ada51d7912ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:91:23:e5:0e:bc:39:50:79:3b:48:33:2f:
10:8d:67:ff:f6:69:7d:13:65:70:8e:8b:2d:69:04:
0f:55:e8:7f:6e:75:71:21:8c:4e:93:e5:da:9a:25:
26:71:a9:14:28:48:32:e1:c2:74:88:7e:72:e9:1f:
2d:7a:d6:9a:8b:30:94:a9:66:18:e0:66:63:dc:02:
6f:01:e6:e1:f0:2d:b5:66:ca:b7:7f:8b:a2:e2:d8:
a9:4a:8d:61:0e:2f:0c:39:50:d2:5e:4a:1f:b0:d4:
41:18:91:61:15:8c:3a:02:95:77:47:4e:7f:77:9a:
7b:ac:30:47:61:01:43:f9:83:21:34:15:30:e6:77:
1d:1f:25:78:9c:f5:71:54:27:a3:8e:6e:c8:af:ed:
b6:ec:a9:82:7d:a5:c2:a6:7c:13:47:3a:ca:d0:83:
cc:a1:ff:b9:78:b3:c8:56:4b:72:77:af:fc:ca:43:
07:ab:8d:be:03:0d:0a:ff:28:10:e7:a9:8c:9a:91:
9c:c1:f4:55:d2:86:cd:ec:80:63:17:00:23:6e:62:
9f:67:b7:58:9a:24:e8:df:84:30:4c:8b:29:90:c0:
36:a4:9f:ff:f5:ac:5e:78:35:98:9e:b6:dd:0c:c1:
e4:54:be:67:f2:2d:0d:8e:ba:c7:f1:e9:df:57:f5:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:38:D6:CD:3F:D2:F5:58:BE:1A:27:A5:4A:DA:51:D7:91:2F:FE
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:d4:aa:4f:89:0a:64:2c:12:0c:1a:cd:9d:ae:46:e1:5a:
59:08:de:fc:6f:ad:af:70:48:8f:cb:06:81:e4:ef:95:e4:56:
e8:e1:01:0d:4c:62:48:2b:26:dc:1c:5f:48:79:17:fa:50:a8:
26:77:b4:85:c7:21:f1:8e:72:2f:a3:49:69:0c:70:58:8a:18:
0e:ae:ec:f1:7a:47:23:1a:96:a8:38:16:83:b7:65:4f:ef:4c:
84:73:b9:be:fa:d6:d7:1e:8e:39:04:32:d8:e4:97:f1:3d:a6:
cd:db:0b:58:14:2a:77:d5:5b:57:32:a3:e5:4b:89:4b:3f:b9:
9d:be:58:3e:83:96:df:88:d9:fd:11:ee:57:3a:75:0c:ed:6a:
d2:f9:df:fb:d8:25:0b:36:93:6e:6b:e5:71:0a:68:f8:f1:4d:
fb:b9:f7:82:06:e9:f5:4f:86:4d:4b:44:15:fb:1f:32:76:36:
de:67:82:a1:b0:b1:96:be:56:b8:9f:5d:9e:66:05:b6:dd:58:
49:05:0b:6b:83:d6:5d:bc:3f:72:2d:d1:1d:3e:b0:f6:ad:5c:
20:cb:3f:32:57:27:ac:56:fa:48:1a:97:f2:9a:46:df:79:e5:
1f:52:28:17:e6:66:34:19:b3:65:ae:52:b5:de:05:e8:9f:49:
f2:b9:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:58 2026 by rpki-client