Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: U06LDK6i+pK6RTxU0YTHUS9+mDk1GMCf9pMmFMi5NSQ=
Subject key identifier: 29:41:DC:FE:1F:7F:A2:07:8E:2D:C5:1F:A4:CB:4E:68:C2:8B:50:25
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 019D9C9A61C5FC57624D30A3694839E6DB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0F71
Signing time: Fri 17 Apr 2026 18:00:56 +0000
Manifest this update: Fri 17 Apr 2026 18:00:56 +0000
Manifest next update: Sat 18 Apr 2026 18:00:56 +0000
Files and hashes: 1: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: AtleNyDAEn3LdZQJA9FQHn8AkgFq2rzKdZSdKeXkrXs=)
2: n28cYCSgTnP520B781yYlApy_Gg.roa (hash: oPppogarovRMmUPnZholMB6dsQYDDsQ39+mpcmiwa7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:61:c5:fc:57:62:4d:30:a3:69:48:39:e6:db:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Apr 17 18:00:56 2026 GMT
Not After : Apr 18 18:00:56 2026 GMT
Subject: CN=2941dcfe1f7fa2078e2dc51fa4cb4e68c28b5025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:96:e4:fc:de:c8:c8:1b:4d:4f:ef:23:ed:
1d:fc:ec:02:2e:70:a0:3c:37:80:81:51:ad:60:d4:
4f:73:8b:8c:d6:d4:c4:ef:8b:08:4e:ca:39:cb:ac:
5f:41:1e:30:b7:f8:4b:fb:f0:4f:88:94:f5:6e:46:
a1:f9:59:d4:9a:f1:fe:c9:75:c8:97:4f:0e:64:7c:
86:d3:92:10:87:d9:23:57:83:15:b7:38:5b:77:54:
0f:25:43:c2:61:af:a2:8a:68:7c:6a:25:8d:44:38:
6f:62:ad:d4:1e:d5:a2:ce:10:83:e8:e7:88:da:4a:
8c:17:3c:a9:50:e1:e7:ca:db:d6:91:e5:da:2a:47:
98:5d:8a:a3:7f:04:6c:c4:d0:c0:8c:66:a3:84:d1:
e1:94:67:29:da:74:f3:b4:c2:8b:03:6a:31:08:be:
dc:21:5c:09:a9:24:e0:7a:22:87:3a:6d:44:d0:5b:
9c:60:77:89:0c:74:41:2f:8c:00:9e:33:9f:10:d8:
c1:32:78:df:73:1f:d2:89:5a:ba:43:23:79:a8:57:
60:f7:71:c3:27:57:42:cc:a4:94:1f:f3:80:1c:c6:
96:2e:bd:c2:fe:25:4c:47:44:d3:9b:b7:4d:f3:78:
6c:ec:62:e1:b4:7e:3a:89:8c:4c:63:68:cf:07:36:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:DC:FE:1F:7F:A2:07:8E:2D:C5:1F:A4:CB:4E:68:C2:8B:50:25
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f2:f9:83:96:df:dc:a9:cc:5f:27:91:ee:48:7e:fc:6f:22:
00:3b:e1:82:38:4c:b0:60:fd:77:e9:b2:4c:c6:3b:46:d4:13:
f5:4e:f3:4f:e6:94:f4:8e:0d:d8:73:05:c1:66:89:81:aa:66:
89:f6:6a:22:85:2f:d3:58:b0:40:6a:ad:ea:b5:5b:cc:53:38:
78:37:b1:07:f6:01:bd:a8:cc:4b:9c:19:03:79:1d:22:ae:44:
7b:c6:ab:08:f1:12:95:28:0d:c2:38:a5:59:58:8e:26:fd:b9:
d8:2c:5a:df:42:b6:46:2f:33:ae:dc:47:a0:23:6a:b2:b6:84:
36:de:c0:50:b7:06:20:58:dd:6d:d6:d4:ee:24:4e:1e:04:fb:
ab:b7:3f:45:fc:3b:7f:8a:a8:ef:47:99:16:87:54:06:ef:14:
e1:f0:01:70:43:d8:88:53:7f:33:a2:f0:b8:49:99:d9:cd:24:
7d:cc:fb:6c:23:b7:53:05:fb:c8:f1:76:80:73:4d:f8:77:db:
aa:b7:8d:94:07:f0:40:32:54:9f:6a:41:92:e9:45:8d:a2:d5:
d5:ec:27:99:8d:e1:b0:05:30:40:67:dc:9d:e5:09:76:34:44:
af:50:4c:5f:6f:ec:75:9b:8b:54:4d:f1:a6:c0:a0:6b:2e:34:
b3:62:35:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:55 2026 by rpki-client