Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: lXdUcKgcb0YIa3Pa1NhRESeZulS5eLOe+XIQbDHT53o=
Subject key identifier: 6D:EA:11:17:7E:EA:7C:6F:2F:A8:B5:7D:3B:DB:C9:D7:04:D5:E4:98
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 019D39E5B8BA23119081FF435E8EC323C489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 13D4
Signing time: Sun 29 Mar 2026 14:00:49 +0000
Manifest this update: Sun 29 Mar 2026 14:00:49 +0000
Manifest next update: Mon 30 Mar 2026 14:00:49 +0000
Files and hashes: 1: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: Nn4DeufNDL68mGjkhaMo7/PKVKBHggQrpRbdtQmwxgY=)
2: TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa (hash: V0MpIpfQqolsEoLYmXod5/+AyCdlRH/FtrIJe/Y/B+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b8:ba:23:11:90:81:ff:43:5e:8e:c3:23:c4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Mar 29 14:00:49 2026 GMT
Not After : Mar 30 14:00:49 2026 GMT
Subject: CN=6dea11177eea7c6f2fa8b57d3bdbc9d704d5e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:ff:e5:9c:7a:ce:be:98:11:c6:a3:f7:bc:
d3:fb:59:e0:16:58:7e:42:e1:1b:c9:00:2a:6f:ab:
07:05:6d:aa:3b:ff:53:97:14:c7:7e:cc:9d:ad:41:
83:5b:93:00:57:20:48:5b:7b:0c:d4:d2:bb:04:96:
90:09:66:29:83:79:28:3f:cd:e9:dd:be:e9:3f:80:
99:2f:e5:2e:38:24:6d:89:a9:97:d5:2f:62:15:2f:
73:bb:de:c2:ca:e3:66:25:f0:2e:57:6d:3a:39:1d:
cf:21:ed:04:bf:49:31:61:66:8a:26:93:fb:05:28:
93:f2:6f:a6:06:63:b0:7f:08:c1:8e:22:8b:f1:47:
44:01:56:fa:5c:33:f8:ef:c5:8f:bd:30:8e:3d:1a:
8f:05:1a:a4:e7:b6:91:01:cd:d5:46:fe:61:f8:8a:
c6:bd:36:39:48:48:f8:12:34:ec:02:cc:f5:07:9c:
18:8e:b2:c3:c4:49:58:6e:08:53:6c:f1:41:31:e9:
5e:bb:ca:63:3c:db:be:3f:7e:ab:d2:43:a8:76:68:
90:48:42:90:1b:b5:ea:fd:d1:49:26:f3:e1:ad:51:
f6:35:47:c8:89:c3:03:80:e2:e8:54:25:1d:d2:0d:
98:b3:96:ff:a9:6c:1f:a4:4d:91:4a:59:94:29:26:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:11:17:7E:EA:7C:6F:2F:A8:B5:7D:3B:DB:C9:D7:04:D5:E4:98
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:08:35:f8:e5:c4:92:a6:e4:13:04:52:ee:c2:5e:c4:a1:f9:
49:00:0b:33:a3:31:a4:87:3d:7e:93:d2:6e:79:79:56:c0:19:
30:56:ae:41:9f:1d:b4:03:93:30:e0:8c:94:13:09:59:39:4c:
4c:04:50:47:38:e5:f6:e6:c7:e0:4c:8f:db:5e:84:87:b9:56:
69:0c:9f:28:96:36:42:e2:4d:d8:8c:ca:30:f9:81:cc:4a:4a:
e3:bf:9e:bd:8e:77:84:74:9d:b9:00:36:17:34:0a:90:c6:ab:
9a:c3:41:c9:b0:dd:5a:0e:f8:8b:a6:29:a3:8c:7d:54:72:b2:
f0:56:9f:86:3e:38:52:6b:3a:61:dd:8c:85:1c:89:b0:9a:5c:
4d:32:5d:0b:b1:fb:cb:2d:46:c4:ba:e0:9a:ff:9f:27:c8:fb:
5b:5f:f0:85:85:c3:09:7f:be:e7:41:7a:b7:72:4f:b6:3c:0e:
03:f6:f1:6f:ca:31:28:bb:db:c9:e3:4e:7c:78:00:07:a0:12:
d0:bb:45:25:96:f1:db:cb:25:aa:27:63:9d:92:5b:ad:8e:d9:
6f:ea:17:c4:ba:aa:7f:37:7c:f3:cc:6d:bb:9b:a4:c1:56:b7:
f6:99:ea:3d:b9:31:7e:8e:ba:8b:ba:d8:d4:45:2b:95:5c:d0:
07:f5:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:27 2026 by rpki-client