Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: 4XxHJ8spfBxt/Yx0yTY28w1eOG8apjTjIsz1stJZiRM=
Subject key identifier: AF:34:34:4A:64:E7:E3:A1:7B:79:3E:39:0C:D2:23:98:10:5C:55:96
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 019EBFFF5CB219792DF40FA4CB6631B12C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 1231
Signing time: Sat 13 Jun 2026 08:00:44 +0000
Manifest this update: Sat 13 Jun 2026 08:00:44 +0000
Manifest next update: Sun 14 Jun 2026 08:00:44 +0000
Files and hashes: 1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: OIuQZaxBQrClqxQszEE7KZ7He90uhggKQOFI5hi6a/g=)
2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:5c:b2:19:79:2d:f4:0f:a4:cb:66:31:b1:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Jun 13 08:00:44 2026 GMT
Not After : Jun 14 08:00:44 2026 GMT
Subject: CN=af34344a64e7e3a17b793e390cd22398105c5596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:d4:c7:d9:65:fc:60:52:af:dc:95:cf:2f:
cf:54:89:47:d6:5a:f5:50:2f:53:58:6b:08:48:33:
5f:26:30:f1:2d:ec:4a:f5:0e:b7:b9:b2:a2:b0:68:
5e:0c:c3:d4:9d:00:4f:5c:bf:75:59:7f:fe:5a:7d:
ef:06:d6:7c:37:8f:34:77:aa:0f:fd:d9:fd:41:d2:
41:bf:86:11:74:2d:86:a9:e1:ca:6f:7b:f7:00:e3:
1c:7b:aa:55:fa:e1:f7:b7:5e:5b:b8:82:35:19:13:
67:7a:0a:cc:0d:d9:e0:34:63:c6:fa:a0:5e:75:c6:
31:ea:e9:7a:00:8f:d1:0e:d9:25:06:ba:5b:6c:94:
5f:4a:d2:d3:15:bd:9f:3e:4b:f0:9b:8a:42:62:ae:
8c:c5:8e:b4:60:1a:7f:f2:13:cd:24:fe:19:4f:14:
10:42:34:e5:63:03:f7:1a:64:05:76:dc:14:ea:b8:
91:36:5e:2b:7c:f1:1b:8e:ab:15:c1:49:3f:17:7e:
41:a2:d1:43:55:0c:a8:7b:32:c8:51:48:c0:b8:ee:
19:63:1f:fc:7c:5a:28:95:d5:94:d5:a2:7d:aa:eb:
69:c1:7f:dd:b9:d2:26:58:1b:2f:da:79:e2:ad:c6:
2f:24:a7:6f:4d:1e:d8:7e:b6:d0:43:20:06:f1:f0:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:34:4A:64:E7:E3:A1:7B:79:3E:39:0C:D2:23:98:10:5C:55:96
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:44:6a:d5:98:42:3a:35:93:59:8a:0e:a0:63:8d:73:9a:
b2:46:27:d8:d3:db:c5:6a:d9:86:72:b1:9c:1a:28:a7:2f:37:
89:74:8c:e6:90:35:c2:a9:4a:4a:2d:ad:09:2b:02:73:67:08:
76:b4:72:d0:43:60:bf:33:c9:f7:10:bb:79:09:44:83:48:6c:
d5:7f:c3:7f:68:85:f8:74:a9:aa:da:3e:f1:92:55:1b:90:0c:
77:c8:1f:c5:16:04:3b:90:3a:e1:35:ea:f6:e2:ba:88:57:0e:
26:5c:60:64:c5:cc:59:41:66:b0:ab:57:28:6b:68:73:9a:fb:
45:f8:0f:fd:18:f0:fd:39:d2:04:c9:de:20:65:4f:e7:5a:87:
78:88:17:c0:09:27:9d:26:ca:99:c9:cb:40:8e:a6:94:45:c3:
1a:1f:a5:e4:98:0e:e8:1a:91:de:83:53:2e:8b:83:06:80:a2:
81:fe:5b:df:58:36:9e:e8:07:be:9a:82:32:af:aa:b6:8b:61:
c6:e2:51:6a:76:45:82:3c:7d:25:9b:ce:83:45:a8:df:a5:77:
b6:98:c2:c9:c3:a0:a5:e0:d5:4f:07:b0:9c:56:df:99:eb:db:
26:34:41:42:60:28:b2:8b:38:a2:c0:9a:7b:2a:49:22:7d:c8:
3a:9b:ea:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:42:43 2026 by rpki-client