Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: oC3IiUrvHBCQzV0c56t4HkjhlX4imG3uA2zvg0JY7Zg=
Subject key identifier: 91:98:AE:C7:15:D3:6F:B1:0A:01:1B:17:10:AE:AE:58:60:70:B1:FC
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019D18DAA961D20D9769F84D2B304B82DD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1812
Signing time: Mon 23 Mar 2026 04:01:16 +0000
Manifest this update: Mon 23 Mar 2026 04:01:16 +0000
Manifest next update: Tue 24 Mar 2026 04:01:16 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: la3P97p27/el317WCahIf1FBjMko9OB/K0ta7xv0LqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:18:da:a9:61:d2:0d:97:69:f8:4d:2b:30:4b:82:dd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Mar 23 04:01:16 2026 GMT
Not After : Mar 24 04:01:16 2026 GMT
Subject: CN=9198aec715d36fb10a011b1710aeae586070b1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:ec:86:e7:79:0b:a6:f9:33:30:81:d4:a4:
3c:6e:a4:84:c8:25:b3:5d:6f:8a:b2:77:90:3e:b6:
56:4c:85:95:b3:65:1a:a5:02:dd:7a:78:9a:4d:8b:
ff:94:56:5c:8a:57:f7:bd:bf:c2:e9:75:9c:f5:b0:
34:31:93:86:85:df:7e:d5:2f:9c:cf:a7:5f:06:a1:
28:d1:51:d1:01:8b:09:4c:b2:cb:43:3a:f6:c8:cd:
d3:39:8b:cd:78:4a:39:67:ce:f8:d2:6f:01:a0:6b:
b5:01:11:6e:68:1c:6d:e2:3b:30:14:65:f6:cb:43:
a7:8d:0e:42:cf:43:8e:76:34:09:1d:a3:93:7c:48:
39:59:11:89:35:ad:23:79:1d:c1:5a:45:b2:70:5b:
14:b5:3a:9a:4f:84:b6:05:f7:c2:90:16:18:13:c1:
f1:c0:37:44:cf:9c:52:8f:bf:a6:d5:43:c0:e6:ba:
6b:ea:d4:e4:c6:0f:f1:4b:97:6b:f9:61:8d:33:9c:
b3:06:69:3b:ec:ae:fe:50:52:a8:9b:de:ce:c0:ff:
67:4a:ec:13:5d:12:09:5c:3e:b8:09:33:96:fe:78:
0a:dd:68:f7:5b:70:82:a3:4b:15:8d:71:39:26:e5:
68:3f:fa:67:d5:8a:2d:7c:ad:95:9e:5c:1b:f6:2e:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:AE:C7:15:D3:6F:B1:0A:01:1B:17:10:AE:AE:58:60:70:B1:FC
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:84:8b:d9:53:41:34:05:d5:08:6b:27:15:49:b9:60:71:e1:
9d:23:2a:4e:60:95:40:62:7f:6b:b9:74:bb:3a:2e:8a:27:11:
d7:41:5c:f0:47:60:77:c6:91:3f:88:a6:f0:ba:22:e3:01:cc:
40:28:61:40:3f:3b:00:4a:6b:28:13:7a:c4:e7:9a:3c:a5:cb:
bd:aa:76:23:84:45:aa:20:82:c1:82:5f:08:ab:20:24:93:20:
cf:9c:70:8b:fb:f4:73:71:49:fa:fa:62:22:9e:eb:31:37:14:
fa:40:31:e9:f4:35:0e:56:cb:ad:e5:39:24:6c:44:b5:68:41:
ef:99:fe:12:e5:a2:95:b1:40:61:30:da:f2:5b:53:b6:d1:0a:
6d:a0:90:5d:02:6d:c4:5c:59:43:5d:a7:de:7e:f2:74:d4:73:
e1:17:ac:df:10:08:93:2c:1a:83:05:f4:ab:b4:32:9b:ac:0f:
e8:63:36:24:7b:ac:a2:26:f0:8e:f6:0c:14:99:ed:1a:49:42:
42:fb:64:8f:4b:fc:19:4a:37:2c:4f:90:e0:6d:28:b7:ae:23:
c7:d3:db:98:e9:6b:70:06:4f:03:2a:71:ca:6a:3c:c4:37:02:
4a:33:d2:ef:72:4d:d1:cb:ae:14:fa:de:82:13:b5:e4:7d:9e:
ed:65:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 15:49:30 2026 by rpki-client