
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: n+z4+enyAzKrlAnZuLC8qiKIbY4F743Ad7PLOEZpmfY=
Subject key identifier: BF:5C:CC:A8:76:A9:5C:3A:55:99:E7:F2:75:E8:7B:AC:1E:CC:87:18
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 019D99CFDA55AB4C772152ABE9B136A425EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0F98
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: vH7rrGITtAP6GmK4LXyxobUcePQ.roa (hash: Wf6Z3W6bIHnyxGibTmjBzRqrlxTUGARmRUFdCoR9nYA=)
2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: c7lWr1v3mKSuYGrWv3J3gfJItIZIu/XIMSyh9njyqn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:da:55:ab:4c:77:21:52:ab:e9:b1:36:a4:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=bf5ccca876a95c3a5599e7f275e87bac1ecc8718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:66:be:66:75:ef:8d:b0:ae:0f:86:70:f9:
58:8d:fa:2a:82:ce:6b:69:da:b8:e8:bf:de:e4:67:
db:fe:59:31:aa:88:af:26:41:8f:42:d6:e6:11:97:
42:4a:2a:ea:0c:5b:2d:c8:4d:6b:72:35:97:75:ad:
cb:8f:10:68:e5:5b:28:80:ca:08:84:04:ab:f6:10:
8e:49:94:db:27:ef:7f:2b:ba:51:8d:6e:a7:a5:82:
c6:bd:32:db:2c:67:bc:00:f1:91:a3:66:2b:cd:cf:
b9:33:fb:84:55:94:95:d1:c0:e5:f4:82:5c:de:e2:
0d:86:a6:bf:0e:5c:6f:1f:24:31:84:f8:48:5f:94:
6d:0a:73:a3:8c:04:5b:2e:a0:e4:c8:96:db:74:84:
5a:92:11:02:5a:03:87:5d:03:b7:0d:4c:cd:98:45:
dd:c1:17:59:ab:fb:cd:9d:8b:8f:b6:98:3a:6a:90:
ae:20:7b:5b:b7:72:6e:4f:fe:11:5b:91:41:db:9d:
f3:c0:27:f1:f1:41:22:97:73:11:08:27:59:f7:2e:
86:12:13:e9:75:89:50:2e:c3:cf:c7:b6:a7:e3:be:
5a:57:50:ef:9a:31:b9:6e:6a:18:93:dc:3c:5e:2c:
29:32:18:76:bf:97:f9:4c:f1:91:ee:1e:29:05:fd:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:CC:A8:76:A9:5C:3A:55:99:E7:F2:75:E8:7B:AC:1E:CC:87:18
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6b:ac:b0:bc:41:57:5f:07:69:f3:ff:b2:71:6e:15:10:b7:
a6:31:f5:d9:fe:d2:61:c0:90:ed:e2:87:1c:3d:9d:7b:17:e1:
7e:99:e4:c2:29:8c:f6:dd:4e:fb:22:7e:20:fc:2f:3c:c6:03:
2c:53:88:50:c1:75:b0:78:b0:ea:07:74:62:cc:b3:57:43:90:
7e:27:fc:cb:05:df:85:e8:82:a4:fa:d2:3a:0f:a6:95:e0:f5:
17:95:0c:6a:cf:75:f7:a8:52:7d:59:37:89:44:f2:f3:ca:f5:
ba:7a:b0:22:98:3d:b2:05:f3:a4:3d:d6:98:c3:11:71:fb:af:
b5:38:ae:f2:57:cc:38:f8:24:c2:fc:65:02:1a:72:b9:1e:e1:
6a:fc:f9:e2:c9:4e:c8:3e:78:11:1d:77:b0:5e:19:04:64:ef:
62:c1:1b:ef:a2:0a:85:77:5a:a3:6a:f5:e5:e6:8b:d4:e7:cf:
f4:1a:5e:af:24:87:dc:11:b0:ed:49:cc:22:2c:8c:05:77:9d:
9d:1e:84:f9:4d:a8:61:17:f8:dd:29:ec:d8:95:a6:ac:31:ab:
2e:79:54:a0:3e:dc:21:b5:19:0a:2a:08:86:a0:9d:dc:e8:7c:
44:40:34:26:8c:07:c7:60:84:df:c7:88:5e:b7:9b:64:5a:39:
d1:4f:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:22 2026 by rpki-client