Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json)
Hash identifier: T1FYiBHr4JsS1/9ZUnJ2JipDVbYJc1FS0z3jwStQtJM=
Subject key identifier: 09:D9:BA:3B:D0:74:30:BD:EC:45:21:2E:A4:99:86:59:8E:B0:9B:A8
Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Certificate serial: 019D37F6F906B4138D469B758BC283F83078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
Manifest number: 038D
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: IBGO-I7f-Bxf5flZlSUpyiUE_zA.roa (hash: MEvjGUC5VTgMRrOy7YLZDcVgLghn/454RnFu57ROP3Y=)
2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: wgBw5t6YNdxoEFk0WpXjES7A4usks6jYZNfG64tPECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f9:06:b4:13:8d:46:9b:75:8b:c2:83:f8:30:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=09d9ba3bd07430bdec45212ea49986598eb09ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:d2:57:6e:3a:17:a0:e5:14:65:8b:02:77:
1d:72:7f:c5:5a:66:34:a1:6b:79:47:5a:90:b9:4e:
cb:f3:6f:fb:e6:8d:f7:38:f2:96:b7:49:83:55:4b:
6d:f6:21:2a:09:94:e6:ad:aa:7e:80:45:e7:b1:6e:
d5:92:8d:30:f5:e1:21:da:7d:bd:0d:de:37:ee:bc:
5e:55:ff:7e:9e:a9:c4:cb:da:80:47:91:32:7d:f5:
39:3d:be:75:2b:f2:99:4f:95:f3:b9:d7:ec:ba:41:
c7:e4:66:d4:ef:1d:e3:ec:0f:c9:37:d9:01:21:9b:
6d:2f:4f:18:2b:a6:d5:01:78:8e:eb:2c:0d:2c:26:
e9:5b:ca:7f:ff:2d:26:c2:73:87:0c:d9:14:42:d3:
f7:a9:d6:4d:d7:ab:41:0d:01:5c:ba:76:6b:5f:18:
85:e8:67:56:f9:52:58:2e:f5:ac:f7:e4:c4:eb:55:
90:81:1e:69:27:83:c6:b3:10:3b:24:ed:41:93:a4:
72:f3:e4:08:29:13:44:ff:f4:eb:43:d4:68:c6:a5:
2a:36:a2:b8:db:43:bf:a8:7a:20:03:d1:e0:bc:8b:
78:c6:59:14:a2:1c:a2:e5:72:9f:e8:6f:8e:75:43:
0f:e3:23:65:e3:58:29:c3:15:24:79:db:cc:ee:80:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:BA:3B:D0:74:30:BD:EC:45:21:2E:A4:99:86:59:8E:B0:9B:A8
X509v3 Authority Key Identifier:
keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e8:07:96:06:19:cc:d2:90:2d:fb:90:e8:55:00:9f:64:c1:
48:bf:10:59:2b:c6:74:59:54:13:80:2c:d3:ce:ec:ab:04:c0:
2e:80:7b:8d:de:19:31:de:b2:f7:c8:34:7e:9b:c5:68:6c:46:
44:1d:35:be:fd:76:aa:0f:b5:7d:e4:c6:be:46:52:94:57:d9:
9c:58:4d:1d:19:de:e9:05:50:25:01:1e:44:55:ff:84:7b:a0:
e4:e5:83:09:59:c2:12:c9:65:fb:17:41:44:c6:fb:bc:13:ff:
bb:c5:7a:df:7c:17:94:07:4b:d4:cb:9d:04:0f:4f:aa:b7:b8:
9d:d3:6c:15:78:64:f3:6c:16:e7:41:5a:db:49:35:cb:be:89:
bf:b6:3e:d9:de:e8:09:47:76:57:2d:2c:11:c2:b5:44:b8:72:
8f:34:09:99:e2:95:62:6f:61:c9:a4:c8:38:ed:11:81:16:09:
b8:43:63:f5:08:cf:64:30:e5:be:08:f4:c2:a8:06:a3:5f:ae:
f7:fd:b3:a7:d3:8a:09:94:7c:4a:fb:05:7e:76:3f:9e:fa:3c:
08:f0:75:c0:e9:2b:ec:e7:e5:56:ca:1f:3b:40:5e:8e:6a:75:
08:63:1a:81:6a:50:c7:d7:e9:bb:f1:35:b4:1e:82:02:c8:b3:
1f:97:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:45 2026 by rpki-client