Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier: flwQa6Dk4r3DuE2UbviAj7uYDWRE3i26NKKxFDHQ0CY=
Subject key identifier: 7F:37:DD:C3:3C:97:44:DB:0A:96:2F:50:99:3D:8C:EC:93:8A:59:CD
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial: 019CE7120380F466486BBA017F22310AD4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number: 0D44
Signing time: Fri 13 Mar 2026 12:00:43 +0000
Manifest this update: Fri 13 Mar 2026 12:00:43 +0000
Manifest next update: Sat 14 Mar 2026 12:00:43 +0000
Files and hashes: 1: AKJixgIyoiFRAuVwrU9Uh1udzZc.roa (hash: ohFD+m2QlHY4K3mvt7FqZXItot4Ux3ki91yXb1hPG1s=)
2: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: 08HPjpSf02Ly5V6QRKZLFc6/5VA+pnT25w2O999aZZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:03:80:f4:66:48:6b:ba:01:7f:22:31:0a:d4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Validity
Not Before: Mar 13 12:00:43 2026 GMT
Not After : Mar 14 12:00:43 2026 GMT
Subject: CN=7f37ddc33c9744db0a962f50993d8cec938a59cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:a6:9b:f0:74:ce:a5:ad:7c:c4:03:d7:cb:
a5:67:1f:00:6e:9c:49:4a:e1:ba:87:2e:2c:3a:93:
36:4a:36:8d:25:38:7a:1b:46:96:11:c8:7b:f7:87:
ab:76:2d:74:a7:7d:51:19:c7:7e:9a:c9:23:62:58:
5d:42:c2:a4:fc:1b:86:e0:64:d1:16:42:bf:13:62:
67:16:b9:6f:63:56:d5:1b:16:2c:fb:d5:07:52:e2:
e4:09:22:ab:f0:20:6f:ab:83:97:e7:49:da:04:bc:
78:c1:93:1d:e5:99:7b:ee:b9:e6:10:82:80:44:82:
16:59:7b:a3:be:b9:b2:7f:3e:5d:89:dc:30:69:c2:
72:14:d6:7a:5d:0b:4b:9b:df:9e:6a:3e:e0:9e:9f:
ef:96:7d:3c:04:72:18:44:db:e9:45:91:fa:7d:ce:
93:25:a9:72:3f:bc:d0:47:60:17:60:37:ba:48:ac:
4c:f2:71:b8:6b:25:ff:18:b7:f6:c1:ec:26:b4:7a:
e6:c2:ba:09:92:83:ec:94:4b:ca:79:67:cd:18:ce:
b2:44:86:70:f3:77:17:8e:47:47:07:9f:c8:60:b8:
31:9d:8c:f5:ef:87:f3:57:f4:78:56:64:c1:db:65:
c8:b6:55:62:cb:db:1e:aa:9b:cf:79:1b:d2:37:ab:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:DD:C3:3C:97:44:DB:0A:96:2F:50:99:3D:8C:EC:93:8A:59:CD
X509v3 Authority Key Identifier:
keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:83:d8:a3:1c:d3:b0:c8:ca:ea:b6:9d:59:73:50:61:4b:21:
1a:1c:2f:1d:8c:db:50:05:03:2d:00:4f:14:91:ff:a6:2d:f6:
35:ca:4a:34:f3:63:0f:20:fb:c2:07:c0:91:4e:46:41:2d:a4:
d8:e2:de:78:ec:b3:32:8f:5a:d6:05:50:c2:71:eb:cf:b3:ac:
96:1e:5c:9f:a8:db:f3:d6:10:93:eb:33:dd:52:18:a2:78:d5:
3d:df:b0:e9:e3:73:e7:8a:ce:30:0f:cc:d4:a4:eb:51:57:96:
2f:05:59:00:33:67:5f:ed:f9:b3:18:56:12:38:9d:dd:c2:3a:
bc:3a:ba:17:e8:d6:24:74:7a:1b:9c:34:dc:c3:3c:db:45:16:
ee:4e:cb:ce:73:44:fc:28:fa:13:45:51:fd:f4:ac:c8:51:55:
9b:e1:a0:fa:13:df:14:5d:52:58:2c:50:de:c9:99:b5:7d:fb:
7c:66:94:7f:e2:72:31:3a:18:b2:c7:b6:97:97:5a:6d:58:5b:
d6:d3:50:e4:2c:63:91:e1:09:e1:ab:2e:56:a6:ab:52:5f:e0:
69:d6:ff:a2:6e:53:d1:e1:2c:d5:24:88:13:d0:31:66:87:a4:
66:03:40:8d:00:fe:f1:6f:1e:78:14:85:d7:c3:b8:af:ef:41:
51:ff:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:33:37 2026 by rpki-client