
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: WFjyd/OXRPk0HZ4RaPV1c4rPbcWiIqNd61dFnpFH+9U=
Subject key identifier: DC:FA:75:FC:D1:8C:2C:EF:75:E0:CC:32:26:23:79:D3:92:0E:BB:57
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 019CAC0FD73176C8DAE4DCA0E16D725F743D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 0BAF
Signing time: Mon 02 Mar 2026 01:00:44 +0000
Manifest this update: Mon 02 Mar 2026 01:00:44 +0000
Manifest next update: Tue 03 Mar 2026 01:00:44 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: 6+rSzfj3Hm7RKPE7vXzHm6LR+RlP3c7abadCyq9SPJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d7:31:76:c8:da:e4:dc:a0:e1:6d:72:5f:74:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Mar 2 01:00:44 2026 GMT
Not After : Mar 3 01:00:44 2026 GMT
Subject: CN=dcfa75fcd18c2cef75e0cc32262379d3920ebb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:c3:d7:f5:1e:15:40:4c:f3:cd:04:46:9d:
67:4d:b2:15:3a:5d:a1:a8:9c:fa:9c:cd:6a:fc:38:
08:b1:ce:f4:d6:63:12:18:71:aa:04:9d:7c:13:29:
1b:8e:37:6c:2c:70:eb:7c:c8:2b:81:f6:83:17:04:
5b:19:f7:aa:b3:de:77:fe:40:32:99:2b:96:28:a0:
c2:bf:f5:7c:65:bc:9c:ff:1d:5b:e3:38:93:61:7c:
8b:3c:48:1e:e0:ad:74:8d:e7:f7:12:17:19:b9:29:
2f:89:a0:57:77:73:6c:9a:8d:b8:54:9e:32:56:f9:
31:ee:17:6e:e3:cf:53:46:b6:10:ee:be:da:f2:c7:
b4:05:ae:93:66:43:0d:51:28:de:28:ae:0f:19:1b:
68:b0:64:7a:40:69:31:99:1f:02:66:e9:3d:2d:a5:
f8:ab:a8:c3:0e:fc:17:b0:b3:76:82:6a:83:44:b4:
bd:b1:95:5c:bd:72:c0:4f:2c:57:44:43:b9:00:3b:
69:56:0a:6a:24:7a:e9:9a:9c:26:ff:43:1d:96:3b:
43:15:de:b3:b2:6e:98:fe:e2:5c:fb:64:38:12:63:
9f:c8:39:c8:92:22:fc:1e:36:cc:28:01:25:e9:2b:
06:26:c4:72:a6:e5:40:ab:71:82:7b:eb:8e:49:19:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:75:FC:D1:8C:2C:EF:75:E0:CC:32:26:23:79:D3:92:0E:BB:57
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:76:09:52:7f:6b:d6:2b:05:37:70:f5:fc:90:a7:13:2f:ca:
48:3b:9c:2f:32:42:96:14:f3:ec:dd:b2:14:d9:d4:8c:64:00:
4d:28:2b:bd:32:a1:50:81:fb:4d:9b:2f:87:2a:2d:5c:6c:bd:
f3:c4:7c:34:b8:09:83:bd:64:a9:82:83:64:fd:3e:3c:04:d8:
58:71:19:be:bc:7d:ac:99:dc:b7:2b:79:66:b2:3c:30:73:20:
bc:e3:5d:cb:b9:cb:7d:26:10:92:3e:a7:08:73:96:1d:c6:07:
ce:e1:ac:40:27:7c:fe:b6:db:1f:20:33:63:54:0b:74:0a:cb:
05:73:ac:45:e0:5d:4b:4a:6e:08:ee:88:5e:75:84:58:22:1e:
ad:1a:49:4c:85:1e:0d:39:ff:41:2f:25:e4:b8:fd:cb:f4:b0:
e7:f9:68:7c:b6:6a:6a:d3:7d:b1:dc:b7:58:58:92:2b:c9:33:
0d:5f:f0:2f:c3:b0:d8:5b:cb:47:7d:63:8f:4c:e3:41:96:d4:
97:a6:16:12:43:d2:0c:02:43:84:39:37:78:86:b7:f3:33:47:
e2:0a:16:bb:ee:7c:df:ea:54:53:1e:d7:35:90:23:3e:8d:13:
6d:ac:05:d4:63:56:36:a8:f8:ff:71:a7:85:e2:bd:ae:74:34:
e6:35:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:04 2026 by rpki-client