Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: fE1FkmBUBpthJfWlA7dNBM6k9hd3KC/Cofdsr5cca/M=
Subject key identifier: A8:D9:E6:9B:8A:09:0F:7E:D3:37:9E:BB:71:F9:CA:E1:6B:46:FC:5B
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019D3940CABA208DAEE43713B0BB9F99311A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0F77
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=)
2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: e0+R/K3LYD8eEOw+nELL7FAwUkGPqdLbOmkvKcDKCI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ca:ba:20:8d:ae:e4:37:13:b0:bb:9f:99:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=a8d9e69b8a090f7ed3379ebb71f9cae16b46fc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:6a:91:7c:52:29:26:ff:d7:79:5b:19:08:
b9:31:aa:ff:08:9c:63:b2:ba:be:cd:02:14:52:3b:
de:92:53:f3:dd:9c:3c:b7:95:04:ca:b7:3b:0c:ae:
ae:ec:eb:a1:24:bd:f9:12:d5:fd:ee:21:b3:df:3b:
0f:c7:88:54:dc:87:2c:cc:31:6e:64:9a:22:e2:70:
48:ca:b2:79:46:5a:4e:fc:55:29:9e:ee:f2:b5:ca:
1f:70:d5:68:d9:72:06:9a:e8:2c:d8:fb:1d:b4:74:
8c:1b:a9:03:ca:ba:8a:5a:20:27:15:85:7b:42:75:
58:b6:be:3d:37:e0:ed:9d:e7:57:11:a1:92:f8:53:
f3:c4:28:c8:20:77:f5:cd:8e:d2:ac:20:f1:66:8e:
99:b4:ba:83:bc:62:b5:69:e3:7e:b1:c7:31:4c:3d:
c9:8b:03:1f:96:a7:33:ed:f0:1a:b5:e4:ce:c6:6e:
b8:36:c5:0c:97:d7:fc:94:29:d0:21:c1:c6:42:85:
57:b2:99:f9:74:1a:43:f1:e5:fb:51:4a:48:03:4f:
28:b3:ec:2a:af:39:a5:2c:e1:aa:99:68:db:4c:d7:
8c:61:d1:b3:6d:dd:a6:f9:f9:b1:34:f5:d7:0e:5d:
dd:c7:0b:57:16:1f:91:2c:ee:9c:36:51:dd:7e:4a:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:E6:9B:8A:09:0F:7E:D3:37:9E:BB:71:F9:CA:E1:6B:46:FC:5B
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:36:4d:5a:77:f8:b2:81:01:f6:23:b7:98:4d:8b:da:47:de:
bd:da:fe:a4:a1:c1:ea:d9:45:97:42:e8:2e:f9:82:93:e8:50:
54:aa:42:54:32:50:21:ef:96:94:c9:9c:78:96:8c:ed:ca:ec:
1f:92:3e:69:5c:12:5b:46:23:9a:7c:07:d4:db:8f:6f:76:12:
2d:ea:f7:17:14:e2:5b:04:0e:df:12:60:02:de:8e:fa:f9:b9:
84:26:18:74:f4:0d:b3:5e:04:bf:a3:21:db:22:c2:de:09:f0:
62:e9:0c:b9:cc:2f:84:8c:ab:8d:88:ed:b0:c5:3f:20:c8:3f:
5a:bc:7c:3f:b4:22:dc:ab:c4:e6:bd:80:b4:a9:4c:63:dd:f4:
ae:43:ed:d2:f7:f0:9f:2c:a8:8e:eb:09:75:03:a0:66:61:42:
c7:80:b9:38:13:cc:f4:e2:51:4a:d8:3b:00:bb:ae:c4:2b:f2:
b8:37:7d:7f:6a:5a:82:f2:53:77:45:e2:a3:94:cd:0d:d2:92:
ff:73:f8:e4:39:e6:59:35:61:55:5f:ff:17:29:1b:0b:e3:81:
57:ef:e2:07:02:30:fd:70:52:54:39:b0:e2:96:16:86:55:73:
95:ed:99:d7:e4:70:2e:e0:af:e6:51:fb:c6:4c:84:f6:fb:71:
9d:85:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:23 2026 by rpki-client