Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: /3lzCZO1za2T/OvkvK5S/Baa6dcVVudZnGxO11Y+Erw=
Subject key identifier: 89:28:9E:E4:0C:7E:66:25:F9:51:10:5D:05:32:99:52:0C:A4:6D:22
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 01A08A1F2D9613DD5FF666E8EB708D16F125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 07:01:34 +0000
Manifest this update: Thu 10 Sep 2026 07:01:34 +0000
Manifest next update: Fri 11 Sep 2026 07:01:34 +0000
Files and hashes: 1: K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa (hash: TugPqaQtZD9qSBdI5JE+l1/X09jHGI4DmWPMzdxCeJw=)
2: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: algFK65eITXwJoGuk/UKr/jCOJ/8bHWsWcpDk1YWwPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:2d:96:13:dd:5f:f6:66:e8:eb:70:8d:16:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Sep 10 07:01:34 2026 GMT
Not After : Sep 11 07:01:34 2026 GMT
Subject: CN=89289ee40c7e6625f951105d053299520ca46d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:81:a6:41:90:b7:dc:62:ea:ba:b3:09:38:
dd:bc:fc:66:a3:67:14:93:bb:02:aa:25:2c:b1:74:
60:a2:ef:51:42:b9:a6:44:89:f5:82:35:33:ac:bb:
bd:29:2c:44:47:bd:24:bd:5a:d3:5c:9a:51:b3:3f:
39:a1:37:15:21:1d:f4:da:5a:02:c4:16:da:f1:0b:
5c:4a:7a:ff:b5:72:68:dd:d5:c6:8a:3e:bd:fc:39:
d1:c2:74:ef:cd:1a:4a:05:51:f9:ab:d7:7e:80:14:
6a:1b:42:4e:27:03:85:68:75:18:73:9f:cb:93:ba:
c3:83:30:07:df:88:f4:17:a9:8e:4d:43:4b:33:e5:
18:73:27:7d:1d:f5:45:aa:26:4a:4a:c3:d7:c9:45:
1a:50:03:0a:d9:0d:06:ad:c4:92:42:2c:14:8e:eb:
bf:dc:ef:f0:22:60:af:bf:b6:69:c9:f7:97:ff:79:
8d:e5:92:1d:cf:1e:24:82:8a:c7:fe:6b:04:09:f2:
14:93:ab:ae:79:5a:44:cd:40:28:b0:ea:87:1f:2f:
90:fd:c6:91:90:5f:23:99:d4:7e:47:c1:d5:c9:25:
b3:6d:25:d0:63:70:7f:e3:42:8e:78:4d:a8:2f:1f:
50:fa:20:f8:8c:c2:c9:b6:4d:7a:a6:1d:f6:58:79:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:28:9E:E4:0C:7E:66:25:F9:51:10:5D:05:32:99:52:0C:A4:6D:22
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6c:94:a1:94:5c:3d:80:af:6f:15:8c:0c:b9:43:db:b6:c7:
56:5b:aa:c7:c0:39:03:77:9c:1e:85:47:95:26:3c:12:60:a6:
28:6d:65:bd:1a:41:3d:70:7d:41:82:d6:a0:4e:9c:42:e9:8b:
2d:59:d7:3f:19:b6:b1:2f:8e:e3:97:8f:3c:27:56:a8:6d:4b:
64:30:f5:03:ca:6c:1b:19:3d:fc:a2:71:cb:82:be:e7:8b:ae:
11:2a:87:78:56:5e:c8:5d:e8:93:d5:01:82:24:6a:ed:ed:a8:
4b:1f:d0:9b:0e:76:a7:0a:d0:f3:e3:1d:3a:f0:49:ae:c7:65:
03:06:aa:d0:2d:77:33:81:50:9e:f5:c1:7b:cb:4e:81:07:db:
77:98:9b:5d:6b:0b:66:e7:5e:4c:bb:28:20:6d:28:b2:f5:3b:
cb:3b:b4:4c:ba:81:bc:be:7c:d4:f9:1d:8a:14:a1:21:b8:64:
4a:3e:b5:25:cb:e7:61:7f:f0:6f:da:01:63:33:71:f3:97:47:
4f:c0:d0:53:10:3b:45:2d:a5:9a:f4:e6:c6:96:18:bc:8e:b1:
d3:52:0b:2e:96:14:8a:c8:e0:e1:62:aa:cc:0c:33:ea:17:7b:
be:e6:8d:46:cf:af:ae:09:99:6c:61:73:ed:20:dc:41:e9:23:
4e:9b:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:39:11 2026 by rpki-client