Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
File: VgYV3qcNgLblEAE38HRCF7eHopw.mft (raw, json)
Hash identifier: 14Y9ppn70y6iZB9DEMMAArKWHkdytWCc03egpbnnPKs=
Subject key identifier: AE:B4:4E:2D:5A:05:81:97:5C:85:57:85:2A:A8:2D:A7:39:E4:4E:33
Authority key identifier: 56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
Certificate issuer: /CN=560615dea70d80b6e5100137f0744217b787a29c
Certificate serial: 019D3977881B66FC34ABAC10AE72A2F74A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
Manifest number: 35
Signing time: Sun 29 Mar 2026 12:00:27 +0000
Manifest this update: Sun 29 Mar 2026 12:00:27 +0000
Manifest next update: Mon 30 Mar 2026 12:00:27 +0000
Files and hashes: 1: VgYV3qcNgLblEAE38HRCF7eHopw.crl (hash: tZskkr46JQUYk0jmjsLEl9/Q8j5AiU4AuVarYI4Kuto=)
2: mXn0MKmHDy1aT83WYfadFmq0_G4.roa (hash: R2FDSVyHViAgLea0vkfodWf9cM1uOy5XpY9Z9jCfAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:88:1b:66:fc:34:ab:ac:10:ae:72:a2:f7:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560615dea70d80b6e5100137f0744217b787a29c
Validity
Not Before: Mar 29 12:00:27 2026 GMT
Not After : Mar 30 12:00:27 2026 GMT
Subject: CN=aeb44e2d5a0581975c8557852aa82da739e44e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:55:b6:6b:76:61:87:0d:b1:c2:f1:87:da:96:
03:0e:11:92:0b:da:6e:f8:6e:c0:6e:91:6b:86:06:
54:66:16:0e:2c:41:c8:42:72:5c:ba:71:25:0a:0c:
e1:1e:02:18:d5:8d:6d:1b:fe:1c:ef:1a:c2:14:a3:
02:50:76:5a:4e:85:bf:56:bf:1a:bf:27:f5:c5:69:
e7:2e:fa:62:ca:0a:6f:ff:2f:83:1e:ee:5b:83:71:
d8:be:ca:72:ce:fa:11:05:d7:b8:cb:ed:d8:f1:89:
ae:d4:f8:27:7b:61:b7:b3:c7:32:b2:13:3e:95:c1:
ac:59:ce:95:c8:9a:b8:63:5e:f1:e5:99:54:19:e8:
d7:e1:43:b6:6c:7b:21:75:93:bc:69:dd:76:dd:5d:
d2:ca:9c:69:f1:50:c8:d6:4e:eb:60:e3:2d:aa:09:
d8:1c:de:da:b2:c2:7a:98:2b:b4:2a:0b:a9:60:00:
cf:e5:fe:47:b1:29:89:86:7a:72:f2:b9:98:e6:70:
4e:de:14:e9:74:4a:a0:bf:0b:90:80:28:13:42:d9:
52:65:a6:62:19:27:4c:99:d3:24:f1:a4:5d:3c:f8:
80:f8:00:41:42:91:4c:db:ad:fb:7c:a5:67:58:64:
af:45:62:a7:7d:1a:f4:df:12:fe:f7:ca:47:46:b4:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:4E:2D:5A:05:81:97:5C:85:57:85:2A:A8:2D:A7:39:E4:4E:33
X509v3 Authority Key Identifier:
keyid:56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:46:c9:70:47:04:e8:d3:b6:ff:17:bf:0c:a6:63:3b:bc:0f:
8e:0e:97:c4:50:54:2e:70:db:4e:9e:13:ad:ca:4f:5b:0a:15:
5a:dc:c3:8c:90:82:c3:b2:cd:c0:7f:cf:ca:09:54:26:6b:a1:
f2:15:a8:43:3d:c0:47:6e:51:87:be:69:ab:cc:b5:bd:97:ff:
d7:2e:82:e3:25:64:61:33:d1:0a:09:7b:c0:fe:6d:57:1b:32:
35:03:9f:d0:04:9d:11:d0:a9:78:bc:29:0a:84:69:2d:1e:82:
9a:21:ff:0e:93:53:93:9a:7e:df:e1:49:df:49:2d:c2:49:8e:
0b:6f:d4:c1:88:b6:dd:2c:5a:df:5e:1e:7f:3d:bf:80:1c:7d:
91:6b:38:5e:a9:ea:cd:46:aa:17:a6:82:3c:d6:50:9f:5c:0c:
b9:dd:9d:89:21:0b:c4:a4:16:4a:ec:3a:49:6a:d3:c2:d6:08:
5d:3a:f5:94:d4:5e:36:20:d7:2b:4d:9f:22:cb:d8:89:43:c8:
25:e2:b9:28:36:40:fa:a7:40:41:74:26:9e:52:66:af:57:bb:
78:99:05:bb:26:04:ff:60:e6:ec:df:6a:68:fb:cd:d1:54:2e:
84:6f:d2:83:12:92:75:06:13:41:16:0a:aa:c6:d5:82:61:3e:
88:80:5f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:43 2026 by rpki-client