Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: +a52OsT57AfxwE0IXYVCp3tT7DoE4auP5JOdWA+DQR0=
Subject key identifier: 8A:FA:B8:DC:C3:AA:0F:86:7E:8D:1C:D5:4F:FB:0C:94:3D:E5:32:57
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 019CAAFCEF53DC5C459CE4D471816C0EB792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 138A
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: BIERhgkhnoCCOOeAB5ktCGme+WkwZrEfQjxfJyqRuS8=)
2: TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa (hash: V0MpIpfQqolsEoLYmXod5/+AyCdlRH/FtrIJe/Y/B+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ef:53:dc:5c:45:9c:e4:d4:71:81:6c:0e:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=8afab8dcc3aa0f867e8d1cd54ffb0c943de53257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:49:e1:57:14:24:56:8d:b0:29:fa:b3:6e:
25:b5:0b:ca:bc:45:85:81:65:4e:f3:7b:ad:aa:70:
f6:16:af:c5:98:4a:a5:56:18:cf:59:69:3d:d2:7a:
71:31:3f:6b:f1:4b:74:c0:9e:f0:2f:7c:6a:1b:98:
04:e3:86:38:10:27:9b:9f:7b:7b:0e:44:92:ed:37:
e7:32:cb:6d:3c:6e:b9:91:e6:83:b4:28:82:09:22:
41:49:3e:86:a4:d8:7f:18:73:6b:50:d5:2e:c7:87:
e9:cc:a6:fa:0e:df:43:89:7b:87:7f:6f:99:22:e5:
47:20:d2:b0:1f:f7:d7:dc:5a:d8:cc:76:ce:13:7b:
a0:75:59:b8:fe:9e:84:35:76:65:5a:a4:ac:5f:ef:
2d:21:c7:78:93:ad:61:28:c6:fb:78:e0:2e:8c:8e:
31:64:28:81:87:96:c3:fb:e2:13:03:61:ea:25:6b:
e7:d7:fc:d0:84:a7:5a:af:b9:81:85:19:1b:21:eb:
2d:b0:13:b0:22:bc:4c:b3:15:7b:2e:7b:b1:ed:bf:
91:50:f1:32:8e:8d:29:66:10:4a:ea:3d:22:43:66:
48:3b:89:e0:2d:3d:fa:ed:28:9d:d5:44:3c:39:14:
87:6c:f5:27:1e:cd:01:76:f1:59:8e:72:ba:9d:20:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:B8:DC:C3:AA:0F:86:7E:8D:1C:D5:4F:FB:0C:94:3D:E5:32:57
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:5a:47:38:d9:90:fd:4a:5c:f3:f9:f4:2c:e4:ae:a6:1a:
be:96:09:0f:cb:56:f9:93:31:25:b8:99:87:58:57:50:87:3d:
cd:b1:77:0e:4c:f2:37:37:48:0c:07:89:f9:80:f5:f5:62:08:
9f:bd:cb:9b:78:99:d7:98:15:a5:11:ba:cc:1a:b5:84:84:a7:
05:07:f7:b8:3a:21:45:52:57:f5:84:c2:2a:ce:b3:82:4d:30:
7c:97:5f:e6:78:8d:78:0c:31:9c:11:45:d4:cc:07:fa:b8:9d:
9f:25:5a:59:35:54:76:8f:22:ca:4a:c4:cd:a6:e0:d5:68:7a:
4f:8f:62:b6:99:b6:b4:93:35:07:f6:33:1e:85:ef:ba:d2:3c:
fb:cb:e1:ca:f5:9f:91:54:bc:3f:3d:ae:0a:ba:52:22:01:8d:
ce:c3:7f:35:37:43:b2:be:bd:7e:01:ed:5a:cf:b0:a6:66:9f:
51:9e:3c:00:50:c0:43:1d:c3:b8:43:67:45:43:9a:0f:b4:9b:
23:fd:38:93:44:07:3c:6d:82:79:e0:a3:ff:41:0a:2d:b0:c0:
0a:aa:fe:d7:2b:2c:4a:f9:f8:a8:a1:10:fb:11:38:c4:1d:58:
6f:4a:66:63:e3:97:b4:11:02:06:36:82:0a:28:8c:56:d2:7e:
30:78:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:47 2026 by rpki-client