Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: vgEPbURYwomLdEg4lpnnXbgo7s7EykgGEYZ6BAEPzHk=
Subject key identifier: E2:1A:45:EE:8E:17:C0:24:C6:DE:FC:B2:80:A5:33:92:5E:78:32:71
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019FA9AC0DD1E2DFD65E54A6FE90065308A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 12AA
Signing time: Tue 28 Jul 2026 17:00:52 +0000
Manifest this update: Tue 28 Jul 2026 17:00:52 +0000
Manifest next update: Wed 29 Jul 2026 17:00:52 +0000
Files and hashes: 1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: E+2YRJavHBauLRsdL5PgN60NiUIGPHAiyZ3NgiR/hvM=)
2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:0d:d1:e2:df:d6:5e:54:a6:fe:90:06:53:08:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Jul 28 17:00:52 2026 GMT
Not After : Jul 29 17:00:52 2026 GMT
Subject: CN=e21a45ee8e17c024c6defcb280a533925e783271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:ec:23:1e:83:b9:8a:63:ca:12:68:bd:6d:
f7:83:a6:57:2a:a5:57:f3:df:f4:14:6c:d7:ae:f6:
af:74:50:2e:91:b1:2c:e6:e1:a7:c8:ab:26:13:e2:
d7:44:69:b6:70:04:ed:d3:58:bc:5e:df:55:f4:d5:
1b:c9:22:9c:24:9e:cb:b1:f0:c1:50:d9:43:a9:81:
12:02:30:ad:db:8c:94:82:b0:ed:01:22:a7:9d:de:
34:ce:1d:40:79:35:33:fd:3f:cc:8e:7f:21:3c:ab:
43:4c:08:73:ec:8f:a5:88:bb:5a:79:cf:0d:6f:70:
4e:44:58:72:6b:cb:0f:2c:e2:4d:0d:c7:71:a4:13:
2a:f5:52:0a:1b:84:d4:f3:8c:55:9c:c5:06:34:27:
85:b1:7c:5c:92:93:e9:d6:47:4a:2d:b0:9c:4d:8e:
78:12:9c:7b:1b:72:86:e4:1a:0f:86:a7:a9:53:f9:
f8:ce:d9:43:db:87:35:a4:be:f2:77:44:b9:98:de:
e3:86:08:1d:85:24:b3:8e:56:f6:30:d6:36:b0:a0:
37:a8:d6:de:04:8d:9a:d4:bc:3a:92:d1:df:a5:87:
15:b8:af:ed:12:64:db:f8:47:04:42:be:a2:31:f7:
bf:34:cf:8b:b1:5f:b6:a0:1d:0d:cc:36:b9:af:80:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:45:EE:8E:17:C0:24:C6:DE:FC:B2:80:A5:33:92:5E:78:32:71
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:03:49:e1:39:d3:c3:1c:cd:09:44:9e:93:da:75:31:b0:8f:
86:cd:54:90:36:f6:55:80:ee:da:99:01:87:fd:5f:94:34:fd:
cc:52:1b:c6:10:17:fb:bd:a6:9d:f0:67:ee:24:3c:d4:d7:78:
88:02:03:a3:1d:07:a5:71:a7:91:c3:fb:fe:fb:d7:e3:a0:ec:
9b:9a:08:cd:47:90:20:ca:bd:4c:e2:8c:45:c0:d8:d0:75:05:
d7:b2:ec:e6:44:d5:b2:67:24:35:39:37:23:1f:02:c9:02:ec:
73:fb:71:a1:3a:26:3c:ac:f0:f4:53:5e:5e:fd:65:15:2e:72:
dd:82:21:9c:e5:95:b4:ce:d8:79:09:62:a3:02:72:2d:e1:3b:
3f:74:5f:d1:32:bf:69:bf:57:af:9f:f3:e7:e0:58:c4:15:75:
85:c1:92:65:fb:a8:39:ae:aa:9b:bc:b8:7b:29:20:cc:00:e7:
e6:aa:24:f4:18:de:76:ea:30:ca:82:8d:7d:0b:0a:f8:af:77:
7e:e1:ee:8d:5e:00:53:d3:28:12:b4:95:7c:84:49:9a:c4:a8:
4c:bd:28:dc:d5:de:a9:5a:1d:9f:76:f2:77:bd:ef:d6:28:bf:
da:af:fb:5e:fa:2c:4c:ec:07:33:e0:c9:5c:19:b6:0c:40:ec:
fd:55:b2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:58 2026 by rpki-client