Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: rlfj7cUAEgFP65Kadxb39DCzCRgQ8/lo+gmak+xsAK8=
Subject key identifier: 8E:51:0A:41:67:32:3C:60:5A:4F:79:4F:24:87:95:BE:EB:7F:18:08
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 019CAB6ADEF981BFD0959F8F728209C7C78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:33 +0000
Manifest this update: Sun 01 Mar 2026 22:00:33 +0000
Manifest next update: Mon 02 Mar 2026 22:00:33 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: gPLEsSXJAioVrxz/7Go/kmAHA+6IkQeFT/72w40npdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:de:f9:81:bf:d0:95:9f:8f:72:82:09:c7:c7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Mar 1 22:00:33 2026 GMT
Not After : Mar 2 22:00:33 2026 GMT
Subject: CN=8e510a4167323c605a4f794f248795beeb7f1808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:4e:fd:85:16:89:96:af:6a:1e:08:8a:26:
f1:13:d5:c1:18:b2:e2:eb:1b:44:37:a1:58:5d:55:
46:57:da:d0:42:a4:30:93:1e:bd:2f:d6:0a:24:ef:
4b:c1:52:67:cc:c6:26:f6:e3:27:75:45:8f:39:bc:
50:60:c9:bf:b8:d8:ed:79:93:ad:0a:8c:2f:74:c2:
34:34:b1:11:52:a6:ea:b5:5e:09:26:87:94:6a:67:
fd:e6:72:e9:40:72:ca:79:ba:cb:f8:b3:83:8e:06:
9a:5a:ab:87:9d:42:d3:0a:84:7b:a7:89:7b:1a:2a:
10:bc:11:15:7d:f2:b1:a1:df:fb:b6:22:ed:6a:1d:
2c:12:a7:0c:d1:1b:ad:8b:bf:74:c9:96:09:b7:66:
b3:a5:ce:22:d4:63:15:14:79:5f:6f:62:bf:70:24:
3d:c0:24:bb:12:45:18:14:3b:7e:58:5d:1c:97:68:
98:5f:fb:d0:f5:68:8c:2f:fb:f6:d0:76:2c:64:b8:
56:94:24:2c:d6:12:02:56:1e:9e:37:56:37:63:14:
35:ad:00:aa:74:73:c5:56:fb:df:dd:f2:38:b3:10:
39:06:2a:18:db:0c:bc:54:f8:f9:77:38:56:52:ba:
86:6d:bd:a2:29:4d:4d:cc:02:4d:13:37:fc:f3:ce:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:0A:41:67:32:3C:60:5A:4F:79:4F:24:87:95:BE:EB:7F:18:08
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:28:e1:b2:0d:ee:29:7f:f4:ab:95:7e:23:ac:23:e7:9d:48:
e5:61:5c:b6:cb:0b:b4:14:32:7e:d9:1a:63:2a:43:fd:59:b7:
02:9f:d6:87:4f:44:1e:bd:15:4f:4d:92:7a:fd:13:8f:1b:81:
ac:41:e3:90:f1:02:a0:1e:d0:93:a8:72:8a:17:24:03:1e:a6:
44:57:69:53:e1:d3:bf:64:ae:e9:4a:34:ac:be:26:af:04:fe:
39:07:71:da:07:7e:7b:45:0e:b4:d7:93:67:14:eb:49:57:7a:
38:b4:90:21:fd:3c:ef:68:68:3e:cc:3a:47:c2:5f:97:ad:19:
d6:7e:34:34:e7:c5:6b:2f:ab:2e:53:1e:b8:eb:23:f1:a7:a2:
4f:5c:4e:6a:85:11:ec:5c:3c:bd:37:98:27:d2:4c:1f:3e:4a:
64:bd:3f:38:66:bb:94:d3:2b:c7:c7:c8:ad:41:92:c2:93:29:
7c:6f:19:1b:7a:eb:79:c7:34:b4:70:ed:c3:65:19:27:07:b2:
5a:9b:19:f0:81:61:da:ec:fd:d7:08:9b:27:b4:2c:19:a1:c8:
5d:a2:2d:88:d1:3e:bb:01:85:b3:11:52:7f:1b:d7:8a:40:23:
5c:71:f0:37:05:a9:7f:67:97:5a:cf:18:37:4b:ba:80:1f:d5:
71:5d:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:43 2026 by rpki-client