
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: 0XkjksqrdKJdqdZ1rdATsjTDxP+ElnvIHS03Bol/whI=
Subject key identifier: 2E:54:61:BD:97:B5:7A:3B:C4:55:8E:47:2E:1F:6E:F4:1A:C2:FA:FC
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 019CACEBEB1F9BBBDE5BC80267D77185BAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 05:01:08 +0000
Manifest this update: Mon 02 Mar 2026 05:01:08 +0000
Manifest next update: Tue 03 Mar 2026 05:01:08 +0000
Files and hashes: 1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=)
2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=)
3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: Ik7pUklqavgxCwqILZQPmCgPbt1fkeJf4hmQLAi+b0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:eb:1f:9b:bb:de:5b:c8:02:67:d7:71:85:ba:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Mar 2 05:01:08 2026 GMT
Not After : Mar 3 05:01:08 2026 GMT
Subject: CN=2e5461bd97b57a3bc4558e472e1f6ef41ac2fafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:62:0c:e0:67:4d:6c:12:a0:6b:3f:75:0a:
fc:d3:03:de:36:c6:e9:27:9c:b4:3d:3e:a6:46:a4:
3b:b4:eb:84:27:d5:33:75:c7:c1:5f:94:5d:94:a8:
a2:21:74:e4:ad:f5:59:b6:91:26:23:37:d2:4a:9e:
fa:e3:0c:1a:cd:fa:ba:98:4c:48:51:e3:e8:ae:ae:
06:f9:6f:02:e2:a3:98:72:c0:bc:7a:52:cc:39:31:
c2:87:85:b9:d3:c8:28:89:fc:3a:0e:72:01:5f:63:
b8:8c:c1:76:0f:48:8c:36:10:48:64:32:f3:5a:bf:
c1:27:94:eb:ce:8f:c4:ce:35:06:32:59:a7:3e:7e:
61:f3:f2:cd:da:39:3b:60:ab:8a:4b:7d:ce:bf:90:
1d:2d:b0:13:07:ca:89:d5:ec:8c:b9:4f:18:28:92:
26:12:ae:44:79:cf:79:97:34:47:bb:93:ad:98:21:
c1:cd:a2:bd:c3:18:d8:84:f1:74:60:bc:e6:ee:c4:
53:d3:70:96:75:b4:86:1e:62:e0:cc:bc:75:c0:b2:
f9:95:1a:92:1a:69:a6:f5:32:29:d8:ab:c9:fa:75:
37:8f:28:67:a2:d6:c2:7f:f4:2b:fb:8d:c1:56:9c:
92:60:e3:d8:e9:a8:07:0e:e3:e9:a1:9a:93:ee:0d:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:61:BD:97:B5:7A:3B:C4:55:8E:47:2E:1F:6E:F4:1A:C2:FA:FC
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:82:cd:c0:24:9a:c8:8c:23:5d:37:4e:e4:f5:b2:f4:8c:36:
4b:31:54:5c:e5:4a:01:71:d2:1b:ac:c7:20:14:51:4d:eb:ba:
8d:12:2a:ef:ce:71:c0:30:e0:a2:a6:fd:d2:27:04:78:2b:7b:
12:e7:9d:32:68:f4:32:4b:05:bd:5f:1f:b6:01:e9:f4:bd:78:
b7:dd:b6:5e:5e:03:4d:50:74:d5:1e:9b:e5:95:e1:fa:e9:f2:
c7:0f:e5:d2:76:31:55:1b:c8:49:b0:a8:15:b2:ee:f2:aa:50:
7d:6e:43:bf:2d:19:ee:9c:47:25:f2:1d:f3:19:c6:e4:f9:1b:
1a:3a:62:91:0d:6a:e1:2d:2e:39:91:10:4b:9e:02:52:c5:3d:
67:aa:54:49:f2:f2:f9:27:5a:b9:c2:26:5c:ab:bb:1c:83:0e:
b4:e2:78:27:b0:6d:72:c8:54:1f:e0:5e:8a:55:2b:5d:67:9e:
2e:30:de:e7:5c:5c:67:09:e6:0d:3b:b9:c2:f4:1b:7c:ff:e1:
e9:19:87:f7:d7:b0:58:78:44:44:22:5d:54:5e:eb:5d:b7:43:
72:d0:e9:9d:d5:49:8c:53:29:42:f0:2d:3b:4d:dd:06:ab:65:
54:ee:61:77:2a:b8:cd:30:d4:70:06:17:a9:32:0c:06:f4:10:
24:0e:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:59:12 2026 by rpki-client