Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: S/Nred/8dCbkMtvQgFbxgGvWI9p0tHV23M+BVwpF0Tw=
Subject key identifier: 22:43:1A:09:72:BE:2F:89:97:D4:25:90:9A:3A:17:1A:17:DB:64:2F
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019CAD903071D945AF135AD9D4550E488271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 08:00:33 +0000
Manifest this update: Mon 02 Mar 2026 08:00:33 +0000
Manifest next update: Tue 03 Mar 2026 08:00:33 +0000
Files and hashes: 1: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (hash: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k=)
2: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (hash: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI=)
3: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: jG17rOZL5jP+GYryZ2LwIR3kCrqcHb9hksMxrAodxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:30:71:d9:45:af:13:5a:d9:d4:55:0e:48:82:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Mar 2 08:00:33 2026 GMT
Not After : Mar 3 08:00:33 2026 GMT
Subject: CN=22431a0972be2f8997d425909a3a171a17db642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:39:ac:70:a3:ab:fa:09:94:d6:d6:19:bf:
0a:e4:32:b4:ac:e1:62:06:3e:b7:79:f0:96:67:ca:
02:12:9e:0e:bb:25:36:1a:c1:7f:d1:2e:b2:ec:70:
e5:43:82:b6:01:57:3a:c4:07:fc:a1:15:6e:a9:90:
1f:45:fa:66:e2:39:36:c5:f2:e7:a0:9c:87:dd:41:
7d:1c:a1:8e:b9:e6:6e:97:c1:fd:83:60:29:24:54:
1f:83:e5:e7:97:9b:44:54:4b:32:02:8c:3b:bf:99:
f0:d3:5f:bd:77:41:78:c3:72:d1:c8:76:04:14:0d:
f2:d1:8b:07:1a:66:62:50:49:51:36:d0:56:c4:84:
02:31:1b:1a:00:e7:46:21:22:a7:15:21:df:ba:7f:
d4:3a:eb:dc:eb:f2:2a:4b:18:4f:96:c8:02:0c:5a:
9c:2e:68:4b:3a:fd:b2:bb:c8:92:d6:c9:bf:a9:c1:
48:47:df:f6:17:23:9e:ad:72:ff:5d:03:3a:d0:bc:
60:9d:4d:4c:a8:d0:ae:4e:74:61:cb:db:36:a3:bf:
21:8d:6e:77:ed:59:70:de:71:fa:21:5b:e5:e9:2b:
a6:c1:36:d7:d7:78:be:5e:6d:b5:27:f5:e4:0a:7f:
75:46:e7:5f:19:0d:72:2c:63:39:77:2f:66:5b:78:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:1A:09:72:BE:2F:89:97:D4:25:90:9A:3A:17:1A:17:DB:64:2F
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:17:7e:83:3a:23:ef:e3:c6:3a:79:18:61:39:bb:49:74:b4:
d1:18:1d:46:1b:6f:8b:24:c5:3c:7e:1f:14:6f:fc:d4:8d:9c:
1b:0c:b9:ef:0a:5d:b3:26:fb:24:73:ed:ae:a5:2d:99:79:76:
a9:f4:7c:f6:c9:1d:e9:18:5f:d0:4a:8f:b8:fa:4b:f0:79:7d:
5a:85:2e:40:0b:dd:96:16:b8:49:dc:95:8f:d2:25:ed:e4:d1:
e2:fb:0c:db:c1:6a:87:0a:ca:5b:db:48:35:11:a7:1c:7a:36:
4d:34:f6:46:92:d8:6d:92:58:76:cd:2c:64:1b:04:cf:2b:f2:
30:8a:33:56:0e:df:20:7a:f9:27:c2:6e:30:88:a8:85:86:39:
a9:3c:fc:98:02:4b:48:d8:f1:e7:6e:91:d7:1d:0b:e5:11:6d:
04:d1:f7:a9:d2:cb:bd:1f:90:a0:c9:73:75:59:a7:24:ee:57:
a1:55:11:2b:90:29:b2:47:2b:11:a1:17:f8:90:c0:85:94:e2:
90:b7:6c:76:d5:25:f7:4a:ef:b0:1d:5a:ec:5c:8c:87:26:36:
c4:b5:61:21:e2:f7:c9:fa:d2:35:61:9b:24:01:f6:da:62:ec:
d7:a1:82:ae:3c:6c:38:c5:8e:d3:f4:cd:0f:d8:f3:8a:28:6e:
39:03:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:33 2026 by rpki-client