Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: CjXlimnEF5tQSHS1jDdVV1/ZkifV5t1kMtTqQD2Ch14=
Subject key identifier: E0:2B:D7:FF:28:35:3C:EC:7D:64:04:D9:FD:DB:20:FF:27:1D:83:D5
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 019CAA58247A130FE2C9AD502CD0E4801091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0F1C
Signing time: Sun 01 Mar 2026 17:00:28 +0000
Manifest this update: Sun 01 Mar 2026 17:00:28 +0000
Manifest next update: Mon 02 Mar 2026 17:00:28 +0000
Files and hashes: 1: vH7rrGITtAP6GmK4LXyxobUcePQ.roa (hash: Wf6Z3W6bIHnyxGibTmjBzRqrlxTUGARmRUFdCoR9nYA=)
2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: 56vu6T/7ADLW/heOrfjttprCHt123yMxaYoa63y2+Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:24:7a:13:0f:e2:c9:ad:50:2c:d0:e4:80:10:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Mar 1 17:00:28 2026 GMT
Not After : Mar 2 17:00:28 2026 GMT
Subject: CN=e02bd7ff28353cec7d6404d9fddb20ff271d83d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:bb:61:ab:0b:93:d5:ca:0a:cb:95:56:7b:
02:68:99:51:cd:c8:fb:17:38:a9:24:a8:75:e8:15:
60:b3:21:61:82:a0:c2:4f:6c:0d:80:3b:ee:ef:aa:
72:60:11:bd:7e:55:e8:4f:42:2c:15:dc:b9:2d:ed:
56:af:c2:15:e3:94:5a:d3:65:70:a1:2f:52:80:59:
90:e5:ca:fb:ce:7d:41:3b:a3:3c:ed:12:16:d3:b2:
e9:50:ca:16:f5:26:59:83:59:27:91:27:0b:b0:ed:
72:5d:bc:33:34:b6:fd:21:40:4b:41:e7:62:37:44:
54:d4:5e:3b:fc:9e:f0:9e:98:98:9b:b1:4c:17:44:
1b:a8:0b:a6:a6:3e:f1:79:0b:4a:4e:c8:65:aa:87:
d4:9e:06:38:13:3f:c0:1f:a2:9c:9d:1d:4a:c3:ef:
28:d5:29:5f:74:c1:25:c3:f2:96:7b:af:03:df:1a:
48:3c:a1:63:e3:4b:3d:d3:92:0b:fa:f1:d5:3e:4e:
c9:df:49:d5:70:86:40:ba:e6:b7:3f:da:4c:c9:82:
aa:bd:66:30:b9:b8:5e:df:b4:87:4a:0b:89:b3:e5:
a0:a3:9a:29:98:18:4e:77:b9:83:91:32:38:ed:78:
ae:18:91:b7:bc:3f:8b:79:1d:1d:eb:f5:25:2e:34:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:D7:FF:28:35:3C:EC:7D:64:04:D9:FD:DB:20:FF:27:1D:83:D5
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:f8:bf:ea:6b:7a:8f:3e:9e:f7:ef:b4:fd:67:00:47:38:
83:79:58:4e:46:56:35:51:38:4b:7c:ed:33:af:a5:cd:3f:e0:
05:7d:37:db:f7:55:82:8c:39:90:e7:0a:65:b7:2e:83:e0:76:
2e:2c:c1:ad:5c:d0:c4:9e:84:f8:85:78:fd:8f:27:96:5c:a8:
2d:c0:40:b7:3c:44:45:c8:04:46:ab:87:42:cb:1a:63:17:84:
62:37:48:e1:94:29:e9:dd:fb:08:3b:5c:5c:9c:73:f5:bb:bd:
1d:c0:a6:67:62:bb:d5:5b:73:c6:02:43:1d:11:b2:72:2c:90:
4a:ae:d2:69:77:c7:92:1c:16:c5:21:3d:a6:f8:9c:de:a8:ba:
e6:e2:66:aa:db:0c:0a:05:e6:eb:1b:91:bf:a7:23:8d:39:4a:
37:4a:33:7d:37:be:98:e5:d6:57:a7:41:a9:70:d6:89:7b:f2:
4a:20:b4:05:1d:65:01:88:85:46:97:7e:18:3f:6d:e7:e4:e2:
45:1f:d6:61:94:d6:f6:27:d8:ef:8b:40:df:27:d6:30:f1:fa:
fd:3a:ca:ac:2b:80:0b:9a:82:e9:09:b5:2a:5f:f9:43:fc:b3:
89:8b:58:ed:34:85:fb:f3:8b:37:1e:1c:ce:8e:21:a8:87:ca:
e7:31:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:45 2026 by rpki-client