Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: uUjThEftUbx4RET9ia6hZOtwYp860HyJY3fouCUcdxU=
Subject key identifier: 6F:16:0D:DF:E9:C7:86:55:94:D8:83:1C:D1:4E:75:58:0B:70:D8:57
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019E03636A898A15E3D90D5123C87B131AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 18FB
Signing time: Thu 07 May 2026 17:01:47 +0000
Manifest this update: Thu 07 May 2026 17:01:47 +0000
Manifest next update: Fri 08 May 2026 17:01:47 +0000
Files and hashes: 1: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (hash: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k=)
2: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (hash: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI=)
3: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: uBVAuoOIdCVN1zf71nlmuCSgWtv6Abif96XDpYbt3Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 17:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:63:6a:89:8a:15:e3:d9:0d:51:23:c8:7b:13:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: May 7 17:01:47 2026 GMT
Not After : May 8 17:01:47 2026 GMT
Subject: CN=6f160ddfe9c7865594d8831cd14e75580b70d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:40:d1:a0:53:b8:8f:d1:44:6b:b9:95:30:
5d:37:a0:78:43:39:59:e7:81:19:f4:28:d1:da:85:
79:1a:19:49:17:60:01:38:50:f8:f3:0e:59:d8:0a:
49:85:c5:20:12:3d:33:c6:5f:d6:16:03:e9:20:b7:
be:80:e7:de:55:a6:16:32:94:1d:db:3f:29:ba:6a:
b6:40:c1:fd:5a:fc:72:d5:2b:d4:2e:0e:c3:64:f0:
90:56:0c:35:00:a8:ad:d8:8a:8b:4d:aa:8d:d7:a8:
2f:f2:33:b9:77:2b:d0:0e:65:d1:f7:0c:69:63:e0:
ca:63:6f:a4:54:cd:30:d5:af:01:a0:25:1b:17:9c:
de:09:2c:39:0d:2a:75:a0:46:18:f3:f5:73:4e:22:
38:2d:5d:7f:94:a1:72:ad:05:e3:91:f4:5c:ec:b2:
34:a0:dd:a1:92:79:e3:e3:d3:d5:07:9a:b2:48:18:
d3:f1:db:85:08:fa:ac:4b:d7:a1:d6:1a:24:7f:ba:
c4:d2:f5:5a:ef:55:b2:0a:9d:bb:dc:6d:ee:e6:b4:
f6:ad:1e:20:ad:42:03:bb:5c:6d:fb:45:e8:ec:a9:
89:6f:19:99:d4:76:56:a2:64:fc:a7:f9:ca:6c:ef:
bd:ea:ec:5b:c2:14:cd:0d:83:89:92:a2:4f:f9:86:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:0D:DF:E9:C7:86:55:94:D8:83:1C:D1:4E:75:58:0B:70:D8:57
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:74:42:09:31:3a:dc:4a:42:74:71:b7:50:cf:06:06:f6:83:
ec:3c:1c:51:db:0e:f5:df:4d:c5:b6:c8:df:a8:82:1d:25:31:
07:d1:4f:2c:a1:5d:5f:a4:c0:a2:1f:fb:05:e9:c8:48:c0:57:
db:99:18:aa:6f:dd:95:e3:8c:84:94:f9:67:82:80:93:22:07:
ef:6e:7b:2b:f0:59:41:d9:cf:ed:da:b2:c1:3e:b9:c7:a8:3a:
fc:85:99:e0:f2:ad:be:f7:85:0e:e2:f1:2d:3e:a9:7e:4b:61:
db:04:0e:46:6d:1a:e4:44:a0:06:48:7e:02:bd:a1:1a:64:b4:
e0:6d:ec:81:47:76:23:e6:a4:fc:bf:2c:05:46:2e:c9:a1:47:
fa:fe:3e:1b:81:23:26:d5:f5:c0:b7:f4:7c:f2:ef:d0:6e:3c:
f8:92:58:7a:87:b0:b6:1e:ae:68:76:df:37:32:bc:df:9f:49:
e8:21:12:6e:f4:25:39:b3:3f:3e:05:ee:67:2f:d3:ad:02:cd:
7e:0f:44:82:1e:2c:3c:e1:ff:d2:c8:1c:87:a5:c5:6a:c9:6f:
3d:a5:f9:8a:fb:01:e6:07:ee:ec:18:6b:7b:fe:81:17:f9:8d:
12:e8:f3:b4:eb:96:4e:c4:58:19:96:b4:52:9f:96:6b:d8:42:
9a:03:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:19:12 2026 by rpki-client