Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: x2GZ/J8fz5HMKjRDkQi7PJa15MRNwHIZUrZeLpBWGAw=
Subject key identifier: B2:AB:DE:95:B9:02:DB:0E:B1:BA:80:4A:B5:21:B6:9E:37:BD:6E:AF
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019E91023480FE5F69DC558EDE60E923B330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 1029
Signing time: Thu 04 Jun 2026 05:01:41 +0000
Manifest this update: Thu 04 Jun 2026 05:01:41 +0000
Manifest next update: Fri 05 Jun 2026 05:01:41 +0000
Files and hashes: 1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=)
2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: nyMhn1x4oZsSlSDdZM/oq5uU5qCZCInj8LCp9fQjNIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:02:34:80:fe:5f:69:dc:55:8e:de:60:e9:23:b3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Jun 4 05:01:41 2026 GMT
Not After : Jun 5 05:01:41 2026 GMT
Subject: CN=b2abde95b902db0eb1ba804ab521b69e37bd6eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:f0:ef:df:bb:32:35:b1:a4:d6:c3:72:6c:
b3:4f:64:7f:aa:57:3e:ed:d4:f3:c6:1e:6f:91:c4:
9c:8b:35:7f:1a:3e:c5:46:7d:82:7f:bb:96:24:26:
91:5b:e2:5a:08:65:89:80:70:c9:9b:cf:64:5b:f2:
8a:3a:6c:8d:a6:3b:e1:97:1f:2b:1d:ee:72:c0:ce:
fd:c2:06:18:55:fa:25:7c:73:d0:ac:73:9e:e2:62:
3a:cf:5d:2d:c6:82:0a:e8:a7:8d:35:34:0c:c2:e8:
b5:c7:4e:d1:33:b2:a1:17:66:ad:02:7a:ff:2f:89:
f6:2e:d5:c3:78:91:78:f2:6a:cf:e8:f7:5a:a9:5a:
73:24:e4:68:2f:a3:37:f0:c6:06:5c:aa:63:37:dc:
71:93:11:43:fb:b6:b1:00:5e:df:db:64:3c:e1:9e:
0e:f7:c7:fe:e2:d6:11:2d:3b:a1:60:69:7b:f3:42:
9d:e1:12:52:42:47:ba:36:27:a3:15:18:3f:08:0c:
3d:ad:8e:e3:a6:b2:4b:42:7f:de:0b:a5:8b:0b:62:
dd:cf:c2:80:e3:d9:f4:bc:fc:98:b4:31:03:f6:21:
71:90:1e:cd:f5:f9:e1:b5:70:e8:73:c0:e9:b1:f5:
12:59:05:be:65:83:14:7a:60:3c:73:75:41:12:da:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AB:DE:95:B9:02:DB:0E:B1:BA:80:4A:B5:21:B6:9E:37:BD:6E:AF
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:44:08:75:4c:08:c0:d8:1e:4d:23:e6:5a:9c:5f:b1:6d:5b:
c0:ab:51:aa:db:fd:83:f5:d9:99:6a:26:e5:22:b0:b9:44:f4:
21:0c:1e:a9:82:82:f6:53:83:75:e7:1a:54:c4:ea:c0:76:45:
68:e0:2c:d7:9a:f2:6b:3f:76:d6:e8:d9:af:c5:c2:30:71:ef:
2a:a0:0f:86:72:a3:82:b0:f1:ed:f9:02:4d:5b:c4:dc:77:f5:
2d:ac:23:06:5b:6d:34:58:43:41:0b:28:a3:d8:d2:a2:d0:ed:
49:fe:72:38:b8:b4:b7:31:cb:ca:ec:b1:7d:05:59:67:87:c8:
1c:3b:b5:f4:96:9a:92:8a:42:4a:a7:1f:22:55:fc:14:c4:93:
7e:46:e7:82:0d:60:ab:53:90:fd:b6:0e:d1:24:86:82:e9:a4:
69:fb:82:70:1c:4a:5f:f5:dc:ec:2b:96:2c:cc:6c:8d:4c:dd:
16:57:a5:4d:9e:f0:a1:ac:7d:b5:1d:57:d5:7f:37:f4:41:d0:
2d:4a:32:fe:dd:22:49:7e:41:cd:64:57:0d:e5:3b:92:39:4c:
71:1a:af:fd:f6:69:06:a9:93:17:3d:c7:9f:2a:32:d4:71:c7:
44:8a:09:ae:ed:ae:9d:7e:28:73:4d:97:7c:ee:d7:fe:d5:d7:
be:16:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:18 2026 by rpki-client