Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier: PzTZ9Ma9y7q1WUoQBdQ5n++p6c3/WESTWr1P5k8oF0A=
Subject key identifier: 8D:B0:0D:B3:78:B4:8C:FA:20:64:BE:E2:E2:97:4E:97:B4:9B:A7:97
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial: 019CBB15154337A6E429B68160011F7BF658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number: 02B9
Signing time: Wed 04 Mar 2026 23:00:46 +0000
Manifest this update: Wed 04 Mar 2026 23:00:46 +0000
Manifest next update: Thu 05 Mar 2026 23:00:46 +0000
Files and hashes: 1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: NQZq+PM2ycHzNaXY+Qujema4pSd3AGs2o9QO/qtmz5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bb:15:15:43:37:a6:e4:29:b6:81:60:01:1f:7b:f6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Validity
Not Before: Mar 4 23:00:46 2026 GMT
Not After : Mar 5 23:00:46 2026 GMT
Subject: CN=8db00db378b48cfa2064bee2e2974e97b49ba797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:90:f4:b5:3a:ab:0c:d6:dd:70:80:9f:82:
39:22:79:d2:80:77:06:b1:5e:8a:d7:93:18:a8:84:
58:34:4f:3a:a9:09:f1:2d:e3:4c:87:86:c4:5d:a6:
f2:31:82:39:21:98:3c:7a:58:e9:61:1a:7e:98:85:
07:a5:92:3d:76:3d:75:01:29:11:e6:f7:45:3b:4e:
79:2a:b5:5a:82:d5:74:4b:00:58:65:b9:92:ae:5a:
bb:9a:74:64:8c:c3:a0:fe:55:21:1f:36:95:1f:ea:
0a:eb:01:1f:5a:52:5e:a2:25:fc:63:25:71:f9:7e:
45:d0:b8:c0:cb:5a:24:97:61:ea:44:2a:e4:af:b8:
c5:e0:d2:b4:4d:f9:57:85:c2:d1:33:24:8b:f0:69:
4c:9c:9e:63:7c:9e:07:78:4f:c7:87:da:44:c5:8c:
08:02:66:be:d9:f0:7f:3e:3b:f5:64:2f:0b:93:26:
3b:b5:5e:a5:b4:83:34:96:53:ee:0c:84:c0:03:b5:
fb:1c:9d:95:dd:38:81:90:cf:af:87:e3:08:a4:f2:
06:3c:3d:31:56:64:a1:cc:f9:60:7a:d2:cf:ce:a5:
1f:80:41:ae:89:79:24:f9:79:8e:ba:ad:31:6c:f9:
a4:0c:be:41:0e:46:e6:93:e9:88:f7:19:e7:80:0d:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:0D:B3:78:B4:8C:FA:20:64:BE:E2:E2:97:4E:97:B4:9B:A7:97
X509v3 Authority Key Identifier:
keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a5:15:54:a9:78:8e:01:c9:cf:a9:a7:33:b0:e6:9a:28:5f:
0f:09:b8:14:e0:a8:05:c6:96:24:94:14:52:97:e2:9f:b2:0b:
c2:30:2a:64:aa:32:1e:37:0d:1e:93:b7:f0:3e:74:c0:f6:cc:
a1:32:68:df:35:b9:4f:86:23:78:89:0a:82:ed:93:78:dd:7e:
0b:c3:b6:c2:b9:72:9c:9e:25:a6:8c:18:2f:06:1b:67:ef:89:
e9:ee:95:21:2d:7e:63:aa:eb:d6:2f:04:fb:7d:17:35:2c:70:
8d:05:bd:38:91:66:87:58:a9:45:24:45:b8:18:2e:c6:35:1d:
4f:6f:8b:bf:b0:9c:83:5d:1e:50:96:f8:6a:d5:a0:66:0c:ba:
66:c7:ab:ef:00:93:99:b7:cf:ef:a1:9c:a1:f4:40:c7:0f:42:
37:df:23:47:dc:3a:99:a4:ba:ee:4e:9b:11:4b:bd:75:2c:f6:
e9:dc:fb:1b:b9:6b:99:2c:04:48:ca:4a:ff:3b:c8:07:b8:9e:
d2:9e:30:c9:fe:1c:27:3e:4e:22:72:c7:ad:79:56:cb:a3:4b:
0a:49:ef:96:8c:96:a8:92:ad:57:8b:14:aa:8c:55:f3:c7:0b:
01:9d:9e:68:98:e3:05:2b:ad:a7:5d:68:f9:1c:41:94:7d:0c:
cf:90:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 03:09:17 2026 by rpki-client