Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: gwWXL+4l3P9iB3wWEyYAqIfFHZDA8lnXAXuZCX11GYg=
Subject key identifier: 5A:42:6A:E3:C2:62:59:A3:C2:93:B7:59:C1:EC:E0:E7:B9:D3:89:D8
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019D39E5D54D345196C86F3B9CD2247C353C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 1167
Signing time: Sun 29 Mar 2026 14:00:56 +0000
Manifest this update: Sun 29 Mar 2026 14:00:56 +0000
Manifest next update: Mon 30 Mar 2026 14:00:56 +0000
Files and hashes: 1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: d0VU2ju6MXr9xSmhsyYFd8PuRiTEnAmJsFIPz58c8JU=)
2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:d5:4d:34:51:96:c8:6f:3b:9c:d2:24:7c:35:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Mar 29 14:00:56 2026 GMT
Not After : Mar 30 14:00:56 2026 GMT
Subject: CN=5a426ae3c26259a3c293b759c1ece0e7b9d389d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:bb:34:4f:8e:dc:cb:04:1b:76:28:37:7b:
c7:94:5a:82:bc:e3:08:c3:4a:a7:aa:ad:0b:0c:7d:
72:0e:e8:35:1f:d6:69:ff:6b:c7:9c:f5:ba:1b:84:
06:3d:19:19:a4:48:46:f5:56:06:66:c5:1a:f1:ec:
c8:2e:f6:c7:e1:36:20:ba:ee:21:4f:03:72:93:c1:
2b:c6:12:e8:7e:0a:9e:be:06:cd:95:2d:9b:6a:de:
54:d4:9b:21:24:8e:b3:52:07:a0:46:b8:dc:79:8e:
10:76:85:47:68:de:c0:2b:f5:37:f8:9f:a3:16:c5:
f7:cb:23:f2:77:40:41:59:e9:a2:a5:40:12:d5:b5:
d8:3d:93:1b:96:d7:d3:d2:6f:7b:99:11:7b:3e:16:
ce:10:ab:87:94:dc:3f:92:1c:e8:7c:63:b8:34:43:
d3:28:c2:ee:af:02:d7:b4:07:3d:80:51:90:4d:f9:
98:20:35:7c:f2:c7:42:58:67:ce:af:85:97:8d:70:
79:95:79:48:3b:c6:a7:9a:b6:a6:4d:f9:4b:f3:55:
b8:71:a0:c5:77:21:ff:39:8a:35:bc:66:8d:82:96:
a1:39:e4:5d:e2:ea:d2:ea:7d:2a:96:c9:67:d4:7b:
d8:ae:1f:c6:b7:da:66:ad:77:64:18:44:ad:5f:61:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:42:6A:E3:C2:62:59:A3:C2:93:B7:59:C1:EC:E0:E7:B9:D3:89:D8
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:b0:0d:7e:77:ed:0c:ae:c7:ad:8a:25:87:d7:07:06:11:
69:6d:3a:f0:14:44:b6:7d:c3:52:2b:27:cc:52:14:9c:65:b9:
ea:51:0e:56:cc:9f:c7:fd:f2:e3:0e:68:77:1d:63:8e:67:1e:
b0:44:a2:30:29:56:3f:f4:e3:f2:db:42:5e:70:6f:b2:25:ff:
1d:8a:3a:6d:84:09:41:ad:d4:d4:26:65:f5:40:84:85:c8:86:
af:2e:10:0c:0b:72:27:18:ef:b0:14:4e:65:89:9c:cf:1d:47:
0f:08:cf:56:b0:44:7a:e2:1c:4c:e9:19:37:9c:1d:d9:e2:7b:
8e:57:c8:7a:4a:05:c1:6a:2d:00:3b:aa:cf:26:7f:8f:0d:ce:
c5:12:64:f6:77:08:0c:b3:68:7c:a1:b4:36:36:a9:3e:d1:77:
0b:1e:1e:7d:6d:09:50:bd:8e:f6:6c:ab:6d:d4:eb:2d:76:f8:
4f:67:5e:9e:d0:96:c1:94:72:0a:6e:38:eb:4f:c3:d1:e4:00:
61:3c:99:43:57:6f:e9:4d:ef:dc:d8:48:c4:fb:fd:41:48:a6:
57:dc:af:c9:07:67:7e:3b:44:5c:3d:27:88:f9:5f:0d:bb:da:
00:66:37:78:93:9f:94:90:21:d9:63:ad:87:42:40:f2:48:27:
00:fc:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:49 2026 by rpki-client