Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: w9Bg7nJ/1guO5Nq7iyDQlZ4Z2c6Mey7VgfcAiCDJXAw=
Subject key identifier: 3F:72:0E:E0:CC:F2:63:C6:21:57:E7:E9:AB:F2:3A:7E:45:DF:13:3A
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019D1BA4A1B60EBA608186B594D39571991B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 1883
Signing time: Mon 23 Mar 2026 17:01:07 +0000
Manifest this update: Mon 23 Mar 2026 17:01:07 +0000
Manifest next update: Tue 24 Mar 2026 17:01:07 +0000
Files and hashes: 1: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (hash: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k=)
2: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (hash: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI=)
3: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: GpN+enEvrK7mS2xoTbb2JAPK2f+kAXo4C1ZsyCn9fl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:a4:a1:b6:0e:ba:60:81:86:b5:94:d3:95:71:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Mar 23 17:01:07 2026 GMT
Not After : Mar 24 17:01:07 2026 GMT
Subject: CN=3f720ee0ccf263c62157e7e9abf23a7e45df133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:90:20:0c:e9:33:6d:22:a0:12:d3:3b:b2:
de:dd:b8:bf:a6:fe:41:bb:19:19:10:4e:25:53:b7:
47:4c:fc:c5:45:2e:fe:f7:bc:06:93:cb:eb:ef:5e:
6a:ea:a2:6a:4f:20:6d:a9:20:e4:40:8f:b3:e3:e0:
56:7d:73:6e:43:63:40:90:4b:6c:55:cf:55:4e:7a:
cf:b4:56:ff:7b:c4:d7:d5:9b:87:f1:d1:f7:78:f0:
b7:1d:05:c0:b8:f4:b8:c7:4d:81:89:5c:72:38:5a:
ba:68:88:0f:b1:f1:4e:69:6e:1b:0c:ab:4d:ef:e8:
08:1a:ca:f0:e4:9a:cf:10:18:bf:b9:de:05:7f:4b:
5e:99:84:95:e6:e9:52:9d:58:57:22:2e:a8:24:32:
9d:15:43:25:5d:11:3e:ea:6b:a1:0b:08:35:02:e1:
a5:ff:2a:6d:35:0a:93:8f:26:ae:7c:2f:cf:7f:44:
46:94:91:f8:90:4b:fd:c3:58:85:86:7b:82:7d:81:
40:3e:0d:0d:83:f6:92:55:8d:be:04:2e:45:58:e3:
42:a7:87:70:8b:54:11:73:e0:e2:32:63:b3:4c:f0:
25:d1:f6:ac:66:e1:dc:3b:c7:ac:55:47:3b:ac:36:
be:c8:ff:b5:52:cf:2f:df:e1:33:c3:be:8f:62:29:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:0E:E0:CC:F2:63:C6:21:57:E7:E9:AB:F2:3A:7E:45:DF:13:3A
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:58:72:ab:ad:38:d6:e1:bb:0a:73:1d:f3:a1:0d:58:e5:ad:
d6:a0:91:11:98:9f:a1:eb:0f:e8:bc:21:5e:94:cf:b4:77:c1:
91:0d:69:fb:85:16:83:f5:d2:dd:f1:42:42:84:8c:fb:8f:d6:
0e:22:13:da:6b:a9:41:3c:93:33:29:cb:54:66:dc:16:e6:cf:
23:a1:0b:5e:3f:31:0f:b6:74:22:1b:5f:c2:d4:83:04:e4:3c:
a6:d0:54:87:a2:f3:25:ab:a4:1d:a7:28:60:81:a0:a5:9c:38:
04:fd:ed:b5:dd:d8:93:64:01:3b:05:5d:e2:48:30:5a:03:ce:
4b:8c:05:63:de:f7:8e:d5:e0:29:c7:a8:3d:69:63:7e:c2:0c:
cd:d5:a2:c7:15:16:25:a7:df:fa:63:5b:41:4c:16:54:4f:11:
62:42:fd:2d:68:fc:13:c1:9b:15:43:3f:e8:cb:4d:d1:85:e4:
01:61:bf:45:36:6b:6d:e9:a3:f8:82:c2:ce:39:0a:7c:d9:47:
97:d7:00:b1:11:63:4a:1b:4c:d5:13:03:0c:b3:7e:a4:6e:74:
2b:f1:00:c7:40:4e:dc:ad:87:92:72:44:b9:02:61:30:8e:5b:
0f:54:17:10:c0:bb:b2:46:3f:d3:3f:e3:ad:98:25:29:d8:4f:
c4:c3:13:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0bpKG2DrpggYa1lNOVcZkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj
MzYyMmIwHhcNMjYwMzIzMTcwMTA3WhcNMjYwMzI0MTcwMTA3WjAzMTEwLwYDVQQD
EygzZjcyMGVlMGNjZjI2M2M2MjE1N2U3ZTlhYmYyM2E3ZTQ1ZGYxMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+OQIAzpM20ioBLTO7Le3bi/pv5B
uxkZEE4lU7dHTPzFRS7+97wGk8vr715q6qJqTyBtqSDkQI+z4+BWfXNuQ2NAkEts
Vc9VTnrPtFb/e8TX1ZuH8dH3ePC3HQXAuPS4x02BiVxyOFq6aIgPsfFOaW4bDKtN
7+gIGsrw5JrPEBi/ud4Ff0temYSV5ulSnVhXIi6oJDKdFUMlXRE+6muhCwg1AuGl
/yptNQqTjyaufC/Pf0RGlJH4kEv9w1iFhnuCfYFAPg0Ng/aSVY2+BC5FWONCp4dw
i1QRc+DiMmOzTPAl0fasZuHcO8esVUc7rDa+yP+1Us8v3+Ezw76PYikSNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9yDuDM8mPGIVfn6avyOn5F3xM6MB8GA1UdIwQY
MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt
ZWYwNjNlNzg2ZTU0LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0
LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFhyq604
1uG7CnMd86ENWOWt1qCREZifoesP6LwhXpTPtHfBkQ1p+4UWg/XS3fFCQoSM+4/W
DiIT2mupQTyTMynLVGbcFubPI6ELXj8xD7Z0IhtfwtSDBOQ8ptBUh6LzJaukHaco
YIGgpZw4BP3ttd3Yk2QBOwVd4kgwWgPOS4wFY973jtXgKceoPWljfsIMzdWixxUW
Jaff+mNbQUwWVE8RYkL9LWj8E8GbFUM/6MtN0YXkAWG/RTZrbemj+ILCzjkKfNlH
l9cAsRFjShtM1RMDDLN+pG50K/EAx0BO3K2HknJEuQJhMI5bD1QXEMC7skY/0z/j
rZglKdhPxMMTYg==
-----END CERTIFICATE-----
Generated at Mon Mar 23 21:55:45 2026 by rpki-client