
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: eyIf5PWJ4x33nYPbmWEjvzXloyEmOlIjQz+ZaOtMnIk=
Subject key identifier: E2:01:F6:4F:00:62:FE:09:63:DC:38:6A:DC:7C:C5:9A:DF:76:6F:B5
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019CAAFD7D679618BD48C290395A238694C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 111D
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: ZPhvQndJ1Xv0xxgZifZ81IvKljWedjuCE97GiVyWm8Q=)
2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7d:67:96:18:bd:48:c2:90:39:5a:23:86:94:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=e201f64f0062fe0963dc386adc7cc59adf766fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:c7:58:ad:bb:36:22:da:f6:ae:a5:4d:fa:
c0:7d:88:88:85:d5:ad:3e:ca:73:9c:f4:95:88:14:
3e:05:db:4e:fc:08:27:e4:99:2f:c2:27:5b:52:57:
9f:ba:57:fe:79:2c:04:61:45:dd:fa:7e:0b:a0:a7:
c5:0e:4a:49:74:3f:bd:64:8c:85:77:8d:0d:c2:19:
10:0e:9b:f5:9e:e3:eb:27:17:6e:a0:17:a5:ca:63:
54:ff:00:73:e4:10:70:b2:50:1b:3a:17:47:39:fc:
46:7a:ee:fe:61:d3:2d:09:93:4b:4c:e2:37:11:89:
d6:09:92:d3:db:09:df:69:ca:8d:60:65:47:f1:d7:
03:4c:5c:bf:36:f8:d7:0b:68:dd:d2:87:ec:67:89:
a1:ac:dd:6d:ec:b2:b2:74:2b:65:4f:55:8b:c9:80:
59:ee:6c:e0:76:00:5c:c1:80:e9:5a:91:ea:34:be:
6e:52:81:90:82:46:7e:c4:16:52:ec:33:f8:56:ef:
40:4c:b9:46:6f:cd:fc:75:5a:62:d7:73:3e:7a:38:
ea:7b:72:0d:01:c4:5b:ba:da:37:72:56:5c:36:21:
86:c0:85:a3:04:63:25:82:14:59:1d:2b:ee:10:29:
fe:e1:a4:87:6e:ec:ba:33:0b:ed:e0:06:e4:ad:d9:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:01:F6:4F:00:62:FE:09:63:DC:38:6A:DC:7C:C5:9A:DF:76:6F:B5
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:ea:73:1f:b8:c5:54:0d:66:08:ef:da:49:64:3a:31:bf:
b2:e7:33:ec:53:9a:45:79:97:05:ab:94:46:03:2c:b5:69:f3:
56:5f:56:b7:22:c2:02:ce:df:1a:e3:ea:04:a0:e9:ce:ad:ce:
01:e5:ad:0f:b4:5e:25:3c:9a:93:18:d5:3d:a4:fa:f7:fc:d1:
b0:ca:bb:7b:bf:04:a0:1f:2d:3a:87:72:60:d4:89:88:ee:a0:
06:fc:4a:5a:56:6d:ac:81:d8:0e:b9:26:ed:1a:88:b8:11:28:
18:76:79:22:0c:dc:4d:a7:50:67:00:55:3f:ba:55:9a:1c:3d:
e7:fe:20:4c:54:af:61:84:e3:f9:ac:20:47:6f:6d:eb:d0:64:
8f:6d:25:73:2c:00:35:1c:68:aa:ef:da:fc:9f:d3:b2:8d:43:
5d:3c:f2:13:6a:42:83:96:29:2e:48:79:65:19:99:bf:69:72:
46:94:19:d2:3b:3f:77:41:f4:3f:50:fb:31:0f:df:c7:47:c8:
3b:ea:e3:20:9f:d4:84:4d:11:cb:a7:a9:d9:92:2c:07:9b:eb:
1b:cd:07:c7:ed:36:13:f2:8e:5e:67:10:13:c0:14:19:19:64:
74:59:e6:c5:0a:46:d2:da:3f:a6:97:db:7a:5d:b3:ab:a4:7a:
2d:26:98:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/X1nlhi9SMKQOVojhpTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRl
NDNlNzIwHhcNMjYwMzAxMjAwMTA1WhcNMjYwMzAyMjAwMTA1WjAzMTEwLwYDVQQD
EyhlMjAxZjY0ZjAwNjJmZTA5NjNkYzM4NmFkYzdjYzU5YWRmNzY2ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OHHWK27NiLa9q6lTfrAfYiIhdWt
PspznPSViBQ+BdtO/Agn5JkvwidbUlefulf+eSwEYUXd+n4LoKfFDkpJdD+9ZIyF
d40NwhkQDpv1nuPrJxduoBelymNU/wBz5BBwslAbOhdHOfxGeu7+YdMtCZNLTOI3
EYnWCZLT2wnfacqNYGVH8dcDTFy/NvjXC2jd0ofsZ4mhrN1t7LKydCtlT1WLyYBZ
7mzgdgBcwYDpWpHqNL5uUoGQgkZ+xBZS7DP4Vu9ATLlGb838dVpi13M+ejjqe3IN
AcRbuto3clZcNiGGwIWjBGMlghRZHSvuECn+4aSHbuy6Mwvt4AbkrdkMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIB9k8AYv4JY9w4atx8xZrfdm+1MB8GA1UdIwQY
MBaAFFURlot5espX1hGAGpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUt
YzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRh
LzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrrqcx+4
xVQNZgjv2klkOjG/sucz7FOaRXmXBauURgMstWnzVl9WtyLCAs7fGuPqBKDpzq3O
AeWtD7ReJTyakxjVPaT69/zRsMq7e78EoB8tOodyYNSJiO6gBvxKWlZtrIHYDrkm
7RqIuBEoGHZ5IgzcTadQZwBVP7pVmhw95/4gTFSvYYTj+awgR29t69Bkj20lcywA
NRxoqu/a/J/Tso1DXTzyE2pCg5YpLkh5ZRmZv2lyRpQZ0js/d0H0P1D7MQ/fx0fI
O+rjIJ/UhE0Ry6ep2ZIsB5vrG80Hx+02E/KOXmcQE8AUGRlkdFnmxQpG0to/ppfb
el2zq6R6LSaYnw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:50 2026 by rpki-client