Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: 36hsNhLUwIX5YWyFnUmtw/GyhKCX0O1wmfsdmalQnUM=
Subject key identifier: 6D:41:75:6A:C4:66:DE:6E:6D:29:8C:4F:AD:96:0C:8D:49:7C:81:71
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019CAA58A7EA7E96064F58750FC4E50509BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0F2D
Signing time: Sun 01 Mar 2026 17:01:02 +0000
Manifest this update: Sun 01 Mar 2026 17:01:02 +0000
Manifest next update: Mon 02 Mar 2026 17:01:02 +0000
Files and hashes: 1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=)
2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: DvFL/44qXI3Vv2oDcgCDxmlW7pLnh+SN3uvTjX2VgAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a7:ea:7e:96:06:4f:58:75:0f:c4:e5:05:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Mar 1 17:01:02 2026 GMT
Not After : Mar 2 17:01:02 2026 GMT
Subject: CN=6d41756ac466de6e6d298c4fad960c8d497c8171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:bb:1d:60:c6:eb:a0:2c:c4:2f:4d:34:c6:
86:6e:5a:e5:e3:b8:f2:66:d5:47:65:85:7e:0e:13:
fb:c7:02:92:14:a0:d8:16:d9:52:d4:aa:57:d6:1a:
7e:d0:26:2e:31:a8:ce:e5:55:3f:8a:e3:00:4e:95:
b3:24:64:b0:70:88:9f:b1:7b:56:6c:cd:01:a9:b4:
4f:f6:d3:f0:6a:18:d3:2b:9d:65:2a:2d:91:82:25:
da:52:4b:5d:e7:08:e7:d2:93:1e:2a:5b:47:a3:de:
6e:91:ed:a7:3e:ec:52:f0:c3:0f:c2:6b:f6:16:fe:
70:ac:ab:3d:48:1a:60:57:13:cb:6b:f3:9c:52:65:
5d:ce:ba:ed:84:4b:d6:a6:3e:ea:42:30:29:71:51:
55:49:e9:77:09:21:d3:ba:23:45:1e:a9:8a:af:da:
ac:e6:8a:e5:91:4d:ae:f4:b5:0d:78:18:e9:0c:89:
0e:2d:4e:a6:9e:53:f5:cb:e3:5e:ca:e0:86:a3:4b:
06:d1:5c:49:ba:a7:1d:3b:53:92:2a:93:36:5b:d5:
31:d0:14:4a:e9:23:15:72:6d:ee:4a:58:5a:78:a3:
a6:ff:32:fd:17:71:20:93:8a:f6:87:0d:10:b4:48:
98:96:81:59:c7:ff:8a:bd:5e:ae:14:42:4c:92:b9:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:41:75:6A:C4:66:DE:6E:6D:29:8C:4F:AD:96:0C:8D:49:7C:81:71
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:52:c0:67:cd:fe:7a:7c:71:3b:ec:46:b2:c8:13:5e:54:
30:0e:e6:01:6e:7f:f0:84:ef:ee:d3:7d:b4:df:d2:42:78:e4:
fb:89:92:67:19:9d:45:09:b4:e9:10:85:a9:74:90:ab:ae:06:
2c:2d:c9:49:f4:92:31:45:a4:da:9b:a6:a2:64:e3:ae:dd:4c:
29:05:ca:93:24:b9:73:21:97:02:3a:6c:d9:c5:7f:1e:99:13:
ba:0d:34:17:29:b6:e2:c7:23:9d:d5:fb:3c:9d:e6:16:48:92:
67:e6:29:0c:06:95:f4:83:ea:96:50:f2:cd:6d:71:ac:b7:0b:
6b:34:99:e2:08:02:07:76:a1:9e:c9:20:6e:2a:f7:3d:c3:35:
1a:0a:bd:e9:be:b6:71:c7:17:6b:3a:6d:12:9e:4f:08:48:61:
5b:a7:89:2c:00:3d:b0:16:cb:44:46:b2:fc:05:a4:cb:40:2c:
8e:76:c5:24:4a:47:90:bb:93:99:36:32:c7:c7:ed:af:7f:56:
f0:73:bf:11:a5:26:d4:12:6b:7a:7b:51:3f:63:73:54:d3:dc:
ef:4b:c8:09:c0:70:4e:da:fa:de:02:21:a0:6e:62:7d:55:fc:
ce:ae:2e:eb:41:6d:1a:f6:e1:59:93:88:11:f2:38:5f:ab:83:
38:a1:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:09 2026 by rpki-client