Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: TiBr1ayy7otOz8z9ec/5QqKxltZvUsELNhEYF0/GYnU=
Subject key identifier: 2B:B8:3B:C1:CB:27:BE:DA:C0:0A:28:D5:22:B7:8F:2C:40:1E:6D:A1
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019CAE35C224B456D40A68CC9212DDC75F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:24 +0000
Manifest this update: Mon 02 Mar 2026 11:01:24 +0000
Manifest next update: Tue 03 Mar 2026 11:01:24 +0000
Files and hashes: 1: TJJ2gOjBREqpMzOZJTJ2VfBKc3M.roa (hash: peGM10woKh6oL0rMneWbTzD1iT6wAY2ntEnSy9KA6Lo=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: GB8ANJTGSxe1nVayMTzXzk3f1dL9xmmSbwIUuKPEZdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c2:24:b4:56:d4:0a:68:cc:92:12:dd:c7:5f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Mar 2 11:01:24 2026 GMT
Not After : Mar 3 11:01:24 2026 GMT
Subject: CN=2bb83bc1cb27bedac00a28d522b78f2c401e6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:04:9e:eb:e1:bc:76:a3:4f:14:c8:bb:0b:c1:
cb:42:ef:02:4f:64:d7:d0:b1:b7:1a:9f:0e:78:d4:
6d:a2:a7:a3:4b:9c:50:4a:1b:1e:46:52:62:86:67:
de:ba:53:59:04:96:80:17:1f:37:7f:02:6b:e5:d3:
e7:1b:ad:7e:67:3a:24:80:fd:88:13:20:8d:07:8e:
aa:f7:32:49:7b:fc:f4:6e:61:16:f1:31:9b:5e:ff:
14:f5:69:27:a4:fd:77:54:6b:ce:c5:ac:ed:55:65:
ac:5a:87:78:72:8e:be:c2:7f:bf:cd:28:98:77:bf:
14:2e:5a:88:1a:e1:c3:ff:82:84:61:21:ec:47:64:
a5:f9:6c:0c:72:33:27:0f:7c:33:ff:1f:2e:23:c2:
db:23:3b:c1:73:fd:76:06:07:95:11:73:8c:26:cb:
dc:8c:96:83:89:d1:db:b8:34:80:5a:71:ea:4e:46:
61:40:6b:0f:d0:ae:9b:fe:2b:98:2d:28:15:38:2a:
34:43:9c:7c:6b:33:c5:ab:7c:b3:7e:3d:1f:7d:f5:
41:98:81:56:1d:6e:f7:8e:47:40:c2:ba:81:e3:1c:
2c:a4:ea:3f:db:21:1f:34:d1:e6:d7:ff:bf:79:e5:
81:84:9c:07:aa:c1:60:71:9e:20:80:30:0f:14:0e:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:3B:C1:CB:27:BE:DA:C0:0A:28:D5:22:B7:8F:2C:40:1E:6D:A1
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:68:22:9c:9b:5b:98:8b:b1:c7:0d:d5:bd:7c:c9:1d:49:07:
53:08:4c:4b:19:e1:7a:24:ab:d8:ab:d4:61:ba:06:ba:3c:b4:
d5:2b:1f:c6:25:20:31:cb:8d:33:f4:0e:50:93:6d:35:18:14:
98:c8:62:a0:45:31:a0:f9:a0:df:39:0b:cf:42:95:c6:bc:6e:
ec:a7:a0:98:f3:ff:26:37:d2:be:dc:95:b2:c3:fe:21:a8:df:
f6:1b:a5:13:70:7e:b6:15:7a:e2:80:88:e3:54:2b:0e:bb:7d:
be:4c:8c:11:0b:ca:57:1a:91:7c:19:6e:50:e1:2f:61:c7:05:
7b:03:d0:6e:b5:18:8a:24:47:01:ac:f2:83:59:94:d1:ea:40:
be:02:eb:cf:b3:75:a2:bf:5e:1c:6a:cf:07:67:7f:26:8c:cd:
c6:3c:6d:9f:d1:13:f1:a7:cc:6c:11:ba:fd:49:b0:f8:87:f3:
7c:4d:4c:2c:7e:0a:48:76:c2:ff:a6:56:f8:79:5e:da:f3:0f:
8b:22:2f:ee:8d:e6:17:71:90:07:bc:16:b7:27:4d:bc:46:0a:
8c:6a:55:4f:1e:82:22:0b:c2:88:1a:6b:0a:56:8a:40:35:10:
a9:45:cd:6d:48:73:2e:39:bf:dd:a1:c6:8c:0f:09:db:06:d9:
9f:4c:67:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNcIktFbUCmjMkhLdx18MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjYwMzAyMTEwMTI0WhcNMjYwMzAzMTEwMTI0WjAzMTEwLwYDVQQD
EygyYmI4M2JjMWNiMjdiZWRhYzAwYTI4ZDUyMmI3OGYyYzQwMWU2ZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gSe6+G8dqNPFMi7C8HLQu8CT2TX
0LG3Gp8OeNRtoqejS5xQShseRlJihmfeulNZBJaAFx83fwJr5dPnG61+ZzokgP2I
EyCNB46q9zJJe/z0bmEW8TGbXv8U9WknpP13VGvOxaztVWWsWod4co6+wn+/zSiY
d78ULlqIGuHD/4KEYSHsR2Sl+WwMcjMnD3wz/x8uI8LbIzvBc/12BgeVEXOMJsvc
jJaDidHbuDSAWnHqTkZhQGsP0K6b/iuYLSgVOCo0Q5x8azPFq3yzfj0fffVBmIFW
HW73jkdAwrqB4xwspOo/2yEfNNHm1/+/eeWBhJwHqsFgcZ4ggDAPFA7EQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu4O8HLJ77awAoo1SK3jyxAHm2hMB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmginJtb
mIuxxw3VvXzJHUkHUwhMSxnheiSr2KvUYboGujy01SsfxiUgMcuNM/QOUJNtNRgU
mMhioEUxoPmg3zkLz0KVxrxu7KegmPP/JjfSvtyVssP+Iajf9hulE3B+thV64oCI
41QrDrt9vkyMEQvKVxqRfBluUOEvYccFewPQbrUYiiRHAazyg1mU0epAvgLrz7N1
or9eHGrPB2d/JozNxjxtn9ET8afMbBG6/Umw+IfzfE1MLH4KSHbC/6ZW+Hle2vMP
iyIv7o3mF3GQB7wWtydNvEYKjGpVTx6CIgvCiBprClaKQDUQqUXNbUhzLjm/3aHG
jA8J2wbZn0xnow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:10 2026 by rpki-client