Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
File: VGgc0JnIW-caIjUMsT8EglwB-PA.mft (raw, json)
Hash identifier: QiFPr+wEDW49bx/bmHBw8WHalUkj1NTyooBpl+dA6ok=
Subject key identifier: 51:58:22:51:DC:39:28:72:38:07:C3:85:5C:AE:42:DB:14:E8:A9:D6
Authority key identifier: 54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
Certificate issuer: /CN=54681cd099c85be71a22350cb13f04825c01f8f0
Certificate serial: 019CAB6B71BD9CC6B425A294BB30846D40E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
Manifest number: 0E9E
Signing time: Sun 01 Mar 2026 22:01:11 +0000
Manifest this update: Sun 01 Mar 2026 22:01:11 +0000
Manifest next update: Mon 02 Mar 2026 22:01:11 +0000
Files and hashes: 1: VGgc0JnIW-caIjUMsT8EglwB-PA.crl (hash: q4LBrbDVny0CLgh4QJERCusALCCCh8xcaENgw2tvi4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:71:bd:9c:c6:b4:25:a2:94:bb:30:84:6d:40:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54681cd099c85be71a22350cb13f04825c01f8f0
Validity
Not Before: Mar 1 22:01:11 2026 GMT
Not After : Mar 2 22:01:11 2026 GMT
Subject: CN=51582251dc3928723807c3855cae42db14e8a9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:0d:66:01:77:f5:ef:a2:c6:12:e0:20:46:
50:42:9f:4a:ef:dc:80:3d:ab:1e:4c:f8:55:db:68:
36:a4:d8:93:c8:a6:62:d5:a8:44:7e:ee:83:33:63:
2d:97:81:a8:56:44:c2:b7:83:81:dd:0e:e3:8f:f3:
a0:64:40:0d:93:a8:b5:03:67:78:88:f0:df:18:e2:
34:15:bb:4b:2b:37:91:12:8c:53:f2:f8:4b:e1:c9:
6d:4d:cf:06:94:d4:d7:f4:ed:33:ab:24:3d:28:16:
7d:b6:08:51:b5:da:b1:de:49:99:aa:0d:8c:e4:dd:
9f:b3:f6:8f:65:4d:56:40:94:53:e0:64:72:cf:5f:
63:d4:68:7d:32:3e:5c:ca:c4:1c:c6:69:79:72:cf:
31:c8:56:46:0c:a0:ce:2b:be:46:7c:0e:1a:25:13:
fc:29:96:b7:17:b9:db:08:d4:bd:c2:ca:b8:7a:cd:
c8:39:5b:a0:54:d2:8c:dd:6b:69:65:61:bd:4c:ab:
ce:bc:e4:ad:d9:c1:ad:5f:2b:8e:49:6a:6b:47:6b:
6a:9e:28:dd:0a:f8:8a:c2:47:c2:30:3e:e6:b3:f3:
2d:4d:99:35:bb:15:3a:e4:a1:d5:70:ef:05:9a:25:
20:ba:c1:8b:1f:4b:4f:20:ec:64:37:8b:42:07:c8:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:22:51:DC:39:28:72:38:07:C3:85:5C:AE:42:DB:14:E8:A9:D6
X509v3 Authority Key Identifier:
keyid:54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:3b:85:38:d9:57:2f:69:4f:cc:13:cd:a0:b7:a9:ad:11:
b7:7e:6b:26:31:e5:6a:84:d4:1e:8e:9f:11:08:43:f5:5b:6d:
7a:1d:68:cd:4b:c3:0c:42:44:12:f0:2a:a3:e8:7e:51:5a:b8:
63:cf:08:a3:0a:74:9b:8f:67:5d:a8:d8:19:ea:16:e0:b8:23:
03:43:94:f6:19:40:46:62:af:c5:d7:a5:44:1a:51:ec:25:bf:
d9:07:e9:8e:3a:60:0b:d7:0a:f9:a5:ea:06:80:12:c4:be:c9:
d5:a6:06:49:2c:e7:e0:e1:ee:88:c9:68:27:2e:df:db:32:df:
a7:1e:ba:81:4c:a0:a9:0c:c9:c4:5c:e9:e5:db:cd:1d:4e:5b:
20:bd:f7:83:23:09:25:08:07:95:3a:4e:75:bb:b9:06:53:74:
19:d0:b1:96:3c:6d:d0:02:5b:9e:34:e4:c1:61:15:ba:a7:ce:
80:c8:dd:90:0a:31:4a:4f:a1:e1:79:e3:77:ce:23:db:b5:d1:
c7:9c:01:a3:d5:65:4a:0b:e4:da:46:fb:4f:d7:75:91:76:56:
08:16:a3:4e:64:18:cb:d5:00:7a:7c:e0:44:97:e7:53:2b:0c:
91:cf:59:e8:a1:8c:7a:c6:17:4c:17:cf:d5:40:df:22:69:cc:
97:d6:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:06 2026 by rpki-client