Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: TUDV/PK+ZFqxSVoVrs42OV1dZfmnMUBMveQX9mrS0tk=
Subject key identifier: DB:89:F6:C4:5F:03:E6:A4:63:99:EB:2B:A5:F4:22:D0:14:A8:E7:38
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019D1AC964FBDC58C0367BC860642C468085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1813
Signing time: Mon 23 Mar 2026 13:01:39 +0000
Manifest this update: Mon 23 Mar 2026 13:01:39 +0000
Manifest next update: Tue 24 Mar 2026 13:01:39 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 2NGaiz0Jvy7HjAvB72TdDW0Lyq+lKd33Vb7a5Dhn/sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:c9:64:fb:dc:58:c0:36:7b:c8:60:64:2c:46:80:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Mar 23 13:01:39 2026 GMT
Not After : Mar 24 13:01:39 2026 GMT
Subject: CN=db89f6c45f03e6a46399eb2ba5f422d014a8e738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:7e:d9:2f:fa:73:eb:d8:82:23:3e:33:c7:
92:c9:8f:ca:5b:b3:ff:eb:22:a1:b6:d8:79:61:a2:
9c:28:a8:e5:80:ea:76:16:24:32:ae:15:33:19:9e:
97:02:2b:95:fb:e5:8f:30:52:0f:d0:28:bc:ff:d3:
07:b5:99:0c:9c:9f:d1:8f:b6:f8:12:ad:b2:66:da:
be:aa:53:2e:7f:c1:99:ed:95:a5:21:c0:66:05:17:
32:30:38:6f:f2:70:33:bf:a9:10:8a:d4:ce:64:f1:
10:8e:17:ba:49:12:f0:f3:82:b0:1f:c4:74:78:ed:
ec:e1:7b:ce:a6:dd:c7:ae:84:dd:fc:f2:db:51:07:
cb:60:16:2d:a9:8a:bf:b5:0b:ed:84:6b:94:11:d2:
12:00:f3:7c:b8:20:0c:d2:ec:2e:87:68:53:7f:2d:
5b:39:12:e5:2b:55:83:1a:4e:ea:67:db:db:49:48:
43:af:37:88:9c:1a:fc:55:36:5a:b3:80:bc:22:3b:
e2:36:c0:85:c7:8f:1a:1c:98:9c:86:19:82:a0:ca:
b3:40:1c:f2:15:d2:bd:74:82:95:60:be:8f:f4:f0:
d7:68:4e:95:d2:95:55:3e:fa:dd:da:b6:99:3e:63:
01:a8:c1:2d:53:c7:ab:1d:32:ff:4a:1f:c0:fe:37:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:F6:C4:5F:03:E6:A4:63:99:EB:2B:A5:F4:22:D0:14:A8:E7:38
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a7:a5:4a:9c:e4:a8:ec:42:ce:9e:0a:4c:63:7e:19:b9:36:
4b:fc:da:70:a8:5f:89:97:18:f3:08:96:dd:bf:04:2c:ff:d8:
64:68:15:75:a5:20:02:75:ab:8d:26:13:ad:5f:d8:12:53:a3:
77:cc:60:10:19:8a:42:3d:59:04:56:5c:e1:3c:06:7d:f5:51:
31:4c:6b:18:f0:df:f8:d1:55:f0:50:3c:9b:33:c1:e5:d4:ae:
fa:6b:4c:da:0c:8b:34:0e:b3:c4:f1:59:c1:ec:1b:50:00:56:
68:4c:85:88:b1:bb:39:d4:5a:75:54:cd:05:04:74:54:d7:e6:
26:28:e5:7e:47:66:14:68:9e:e3:c2:03:00:a2:c6:f9:03:78:
51:b3:55:6e:91:bb:5f:b6:23:b9:55:fa:e4:e1:95:90:24:82:
bc:27:ae:e5:02:bc:b2:1f:01:f9:d5:f8:9e:23:b5:5f:98:d6:
94:0b:7e:7b:b4:54:6b:ba:ae:d0:d7:26:cf:bc:a3:97:63:7c:
81:3b:69:72:70:5d:a3:cf:de:d8:06:66:0f:77:36:77:31:3d:
33:8a:54:b8:cd:ca:da:d3:94:a5:a2:bc:65:70:0b:d9:95:d3:
29:74:e0:d2:6b:f6:d4:98:6b:7f:e2:b9:4e:f4:f1:5b:0a:56:
75:5a:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 17:22:36 2026 by rpki-client