Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: QxusIwG4lo07Y1oYpqAy/9ibnFihMyQHXqtQTttzuhQ=
Subject key identifier: CA:0A:C2:2C:7E:05:B1:F3:55:99:93:0B:80:EB:AD:A0:44:3A:DF:9A
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 019D3752CE05A7B04F81C81CD7BBBE899C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0970
Signing time: Sun 29 Mar 2026 02:01:06 +0000
Manifest this update: Sun 29 Mar 2026 02:01:06 +0000
Manifest next update: Mon 30 Mar 2026 02:01:06 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: m6KQC50WkTN45llQPO2VDE5Urtx2UhGefjc1u1jWr2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ce:05:a7:b0:4f:81:c8:1c:d7:bb:be:89:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Mar 29 02:01:06 2026 GMT
Not After : Mar 30 02:01:06 2026 GMT
Subject: CN=ca0ac22c7e05b1f35599930b80ebada0443adf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:32:47:dc:52:c8:47:cc:3f:2b:17:29:a8:
89:1b:b0:b7:fb:61:fe:13:2f:d8:92:e6:25:cb:a8:
3a:7e:4d:c0:7a:29:7f:18:dc:e9:fc:3b:30:5f:40:
25:0a:39:74:91:2f:79:e5:bb:8f:c8:83:58:0b:33:
cd:74:73:b5:90:3c:a5:21:84:e2:83:d1:2b:17:33:
98:1a:35:9d:8d:e1:b0:0f:db:30:f6:ef:c0:dd:1f:
dc:ea:00:38:25:77:b6:2c:73:2c:ea:1d:a0:c6:b2:
10:e2:a4:ce:bf:e6:c5:68:b9:94:28:6c:ea:b7:bd:
e5:ff:f3:b0:f6:ef:cf:28:fc:c1:fc:26:1a:ac:fe:
52:d2:1a:2a:83:01:37:88:59:ba:b1:80:9c:17:e6:
34:6b:ce:f0:2f:2f:f0:96:63:94:a7:7d:49:c5:14:
62:4b:45:67:8f:5f:70:bb:5e:78:e2:eb:53:50:14:
47:34:72:8f:31:4f:21:5b:1e:d5:87:aa:19:2f:c6:
bd:b6:0f:42:93:20:80:66:24:a7:7a:12:52:a0:e6:
a2:9c:02:4f:74:19:db:6e:f4:12:e7:61:b0:73:95:
d6:bc:c3:84:3f:90:ad:76:2f:7f:b4:44:fc:d6:ca:
40:35:f2:e1:65:d8:f4:0b:52:3f:6f:3e:67:5c:d0:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:C2:2C:7E:05:B1:F3:55:99:93:0B:80:EB:AD:A0:44:3A:DF:9A
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:64:8b:76:ac:b0:e8:13:ad:b9:f1:fa:78:2b:68:68:2e:bb:
72:3d:f5:62:40:dc:c5:fa:58:9d:34:e1:ac:0b:19:af:29:93:
56:e4:75:71:a0:5e:ab:e5:2c:03:a4:74:5f:42:d5:d0:6d:ba:
50:ea:8f:af:82:31:73:29:1d:fd:dc:a2:eb:f5:b1:89:83:19:
c9:64:39:58:97:2c:c4:91:1c:05:7f:cf:88:3d:88:55:40:60:
8d:d0:3a:af:2e:d8:fc:a2:48:25:4f:6d:91:3e:cb:ba:6b:e5:
ff:60:c4:e0:83:78:41:d1:8e:59:a6:9e:fd:4e:6a:03:bd:bd:
ed:d5:24:cf:17:19:c4:25:2d:7d:14:c5:4e:37:df:b1:39:08:
1f:14:74:45:a3:9d:39:b3:80:5f:04:96:4e:dc:19:e5:0e:3b:
34:c7:6b:34:d0:c4:20:4e:7e:2e:f9:01:2c:11:24:75:0b:5e:
0b:33:f4:60:79:84:95:f1:00:59:03:20:04:9d:44:6d:39:45:
ae:6e:2a:76:bd:74:ff:bc:e7:94:05:f4:0b:d1:62:eb:47:1d:
03:80:4e:57:ce:6b:cc:69:e7:4a:73:91:66:bc:f0:19:c5:18:
d9:a4:fd:bd:00:e4:d6:9e:95:13:fb:0e:6e:cb:80:10:87:57:
17:c3:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:01 2026 by rpki-client