Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: tqfilYOZqV9vLzwGhfKuNP+2TdZZFgH4GSF4SEXIpzo=
Subject key identifier: 29:9C:E9:9A:26:89:33:0E:CF:44:5F:C3:A5:28:9A:A1:87:CB:5F:D1
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 019CAC7E223E2E43BE4F715510992F2BF773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0E38
Signing time: Mon 02 Mar 2026 03:01:13 +0000
Manifest this update: Mon 02 Mar 2026 03:01:13 +0000
Manifest next update: Tue 03 Mar 2026 03:01:13 +0000
Files and hashes: 1: 5cNb8WLwOkyZzxqvZpVV_tXxjZY.roa (hash: kGU2pG7tI4JFvO4VXkUaTdEhyoNcFmBCA+lGdKRbj0g=)
2: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: BW9YeuQKJvQSGc9oOCiLhosHOZkzvsI/wiV/h8T23/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:22:3e:2e:43:be:4f:71:55:10:99:2f:2b:f7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Mar 2 03:01:13 2026 GMT
Not After : Mar 3 03:01:13 2026 GMT
Subject: CN=299ce99a2689330ecf445fc3a5289aa187cb5fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:91:98:fe:47:79:a8:26:a4:4f:e7:a0:83:
97:a1:1e:cf:05:02:e9:7d:1d:52:ee:06:38:86:11:
b4:af:2f:3e:84:27:18:ec:45:6c:5f:54:9e:8e:cc:
13:6a:16:2d:d2:d6:79:46:6d:1b:4c:ee:a6:6d:69:
87:4a:5e:dc:bf:55:07:f7:c6:e9:07:34:40:11:3f:
11:60:b3:10:e2:e8:ad:ea:07:c5:37:82:23:be:f0:
30:89:57:86:e0:41:2a:fc:08:ce:4a:02:43:3f:62:
9e:99:1d:5f:8f:c5:25:da:41:bd:bf:3d:8a:b2:67:
48:03:bf:cb:21:f4:a4:80:a2:cb:15:61:b1:a4:5b:
78:00:4c:3d:fe:8e:fd:f4:53:d0:1d:91:45:4d:3e:
e1:d7:9b:f9:60:20:bc:c9:a2:3c:86:3d:2a:16:0d:
4a:04:90:e8:a5:1e:46:4e:85:49:40:98:d9:7a:68:
49:a2:c9:40:ea:97:e9:c2:36:3e:fa:a5:96:60:8c:
84:7d:5e:97:52:d2:b1:ab:32:f5:63:b8:8c:ce:57:
de:cd:eb:0a:a9:ce:68:01:db:e8:a9:c5:ec:1a:9f:
1a:6e:7a:f0:b7:f7:ff:6f:f4:b9:97:d9:aa:57:5f:
6a:54:82:0a:3f:75:ae:45:8d:09:3f:e5:d0:9f:ea:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9C:E9:9A:26:89:33:0E:CF:44:5F:C3:A5:28:9A:A1:87:CB:5F:D1
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:57:93:f8:21:fa:1b:f7:cd:73:91:68:75:51:b6:db:e1:05:
f0:3d:f1:a0:de:3e:14:de:16:a1:f6:85:5a:46:9b:ac:df:15:
ca:99:c7:9a:19:cf:ad:5d:00:20:13:48:ec:30:fc:51:15:f4:
8b:f0:9f:c5:6d:ce:78:3a:6e:fa:dd:77:46:39:7e:48:5b:82:
19:ca:b6:30:eb:64:74:ba:27:fb:15:f8:c1:30:74:31:ec:5b:
a3:58:6d:72:06:0d:29:c4:c4:1d:e5:52:9e:35:0e:fa:a1:e6:
41:d3:28:ec:52:7d:9c:04:1f:a4:48:36:70:08:14:cc:ca:9a:
52:4e:7e:90:65:38:e8:85:db:c4:e5:d7:c2:05:6a:1a:a6:19:
fd:e7:42:f1:60:d6:b0:c0:13:1a:18:66:a3:61:96:a2:60:98:
15:37:22:40:8e:58:ba:a9:8f:0d:60:f1:ad:1b:3f:ef:96:ad:
09:bf:cf:17:ec:b8:8c:9b:1b:5e:f9:56:d4:63:62:47:f0:c3:
95:6b:17:96:f9:cc:07:2d:93:90:50:bb:01:6a:22:70:e7:9f:
43:38:ce:ca:f6:62:a8:c5:f0:cb:f8:f3:3e:dd:cd:a9:19:9a:
ca:23:31:95:b9:c7:bb:55:93:5c:15:2b:dd:9a:39:7d:37:dc:
fa:04:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:51 2026 by rpki-client