Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: Qxch5/76QT7SN0+P/BYqiLGxUFYFqTMwG7Pj6d3PDQI=
Subject key identifier: 6E:DB:CD:E8:DE:5E:DF:ED:AD:20:28:7E:84:41:09:87:F6:72:A0:1C
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019CAAFD6612775610B8DA13750E1632D99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:59 +0000
Manifest this update: Sun 01 Mar 2026 20:00:59 +0000
Manifest next update: Mon 02 Mar 2026 20:00:59 +0000
Files and hashes: 1: bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa (hash: brHlGv5imLHwbxwJPoUHI3T7npY3uz8hyi909TKqiCI=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: rqqEbu/pD3TZSbNl9b2INGu/0TIIW94eIKhs3+xHgdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:66:12:77:56:10:b8:da:13:75:0e:16:32:d9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Mar 1 20:00:59 2026 GMT
Not After : Mar 2 20:00:59 2026 GMT
Subject: CN=6edbcde8de5edfedad20287e84410987f672a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:9f:2c:41:ec:0a:1d:9f:46:28:24:5f:3c:
8f:bd:a4:d1:e9:a2:1f:d6:39:2a:00:45:35:a7:9e:
fb:a0:23:72:f3:5c:52:5b:59:35:d3:fd:1f:9c:4f:
c5:7d:13:00:38:62:56:ed:af:38:47:39:76:3b:dc:
6c:d3:d2:0a:cf:07:c7:85:7e:61:ef:b3:4f:9b:15:
b5:b8:92:a8:f1:5e:ff:11:82:6d:00:00:29:cc:79:
a4:20:a5:94:4f:dc:ae:10:13:97:e5:e4:87:e0:d5:
4b:6b:41:87:ce:7c:b2:2d:e6:f0:f9:fc:45:d8:45:
c5:2d:78:7d:5a:02:b4:91:9f:31:16:ec:27:be:3e:
a9:8d:42:74:f4:18:54:50:81:5d:00:6f:c8:fd:6b:
23:57:ac:19:40:df:c7:5c:cd:35:23:ba:3e:b3:16:
d5:87:56:13:2c:e9:25:a3:4b:10:c2:99:ad:82:ce:
db:b5:f4:5a:96:2d:58:83:81:33:9d:44:fe:ef:db:
40:2e:3b:7f:04:8c:78:00:04:71:45:ae:91:7e:3d:
97:7b:4e:f3:b1:a4:09:fe:94:68:63:3c:e3:23:24:
5f:54:e3:fb:7f:b6:32:52:ef:e7:27:65:c2:b4:c1:
2c:4b:58:b3:20:ae:67:6e:7b:95:30:19:89:c7:9b:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DB:CD:E8:DE:5E:DF:ED:AD:20:28:7E:84:41:09:87:F6:72:A0:1C
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:59:d9:f9:40:ac:b4:1a:e7:ba:e0:35:29:bf:cf:97:fe:19:
fa:21:61:b4:68:86:95:0d:10:fe:ab:ba:bb:7f:10:01:2a:4e:
aa:a0:19:54:94:23:a6:3e:04:35:5b:76:b0:81:74:d6:d2:d9:
3d:ac:45:ba:1a:4e:a2:0a:44:dd:b2:c1:d8:4f:54:9d:16:89:
48:b4:f7:a8:d4:88:58:6e:86:44:15:98:41:46:d0:d1:86:46:
84:11:49:6c:0d:8e:8f:fe:6d:85:47:01:81:9c:40:a8:06:31:
03:23:41:42:a0:b0:4f:f8:b1:fa:52:33:6e:24:50:6c:ca:f7:
b3:e3:dd:11:7e:e5:f7:4a:9c:3a:6e:37:79:0a:e1:d3:c7:3a:
a1:23:90:3f:6d:fc:51:33:ce:ab:da:39:9e:66:bf:b6:08:11:
ca:0e:ed:4b:46:38:c5:63:06:68:42:00:fa:ec:91:fd:bf:54:
71:d5:36:e1:ab:fa:27:ca:11:89:74:05:04:87:24:1d:2b:03:
36:a2:77:03:8a:34:1d:49:30:47:c4:bc:fb:75:4a:2c:44:84:
33:ba:a1:62:c1:90:77:91:c7:8d:19:99:d8:4a:4c:fb:59:f9:
14:71:de:61:2c:a8:3a:df:d9:e5:b2:3d:40:b8:0a:54:40:41:
00:64:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:40 2026 by rpki-client