Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: nxZQA5cpymdSyCbZFp4h85sost/A5eoJuSzt2E5SY3k=
Subject key identifier: 9C:E9:B5:AF:6A:72:43:DA:AB:A9:70:38:AA:F4:20:C1:25:82:F8:8A
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 019D992B863E16FA04736EC5B85920F2F522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:59 +0000
Manifest this update: Fri 17 Apr 2026 02:00:59 +0000
Manifest next update: Sat 18 Apr 2026 02:00:59 +0000
Files and hashes: 1: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (hash: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k=)
2: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (hash: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI=)
3: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: VjlPgYWFXIZqgmXB6PqltsMFLCHEKxDemlaJRqt9fB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:86:3e:16:fa:04:73:6e:c5:b8:59:20:f2:f5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Apr 17 02:00:59 2026 GMT
Not After : Apr 18 02:00:59 2026 GMT
Subject: CN=9ce9b5af6a7243daaba97038aaf420c12582f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:8f:2d:29:f9:ea:c7:41:30:8f:58:4c:69:
0e:24:95:b5:8c:3d:b6:e8:59:9d:50:d7:4d:73:3f:
ff:3f:b1:ef:cd:1a:03:32:78:9f:89:9d:fb:cf:34:
c2:5b:72:71:03:05:9a:83:45:e8:fc:d5:1e:9b:23:
ff:4f:e2:63:74:b0:d5:5b:df:c4:3d:75:35:4e:39:
22:8d:9a:3b:90:f1:3d:5c:07:fb:db:8e:40:67:e8:
3f:aa:13:ce:5f:3b:8c:74:25:f1:d9:19:c3:77:fd:
4e:d0:6f:20:24:a4:ab:c3:2f:e7:de:d5:f5:95:f7:
ac:e6:21:5b:2c:66:e2:2d:dc:26:4c:23:fc:c0:c3:
c5:2f:9e:ac:fd:a3:1a:61:d7:a0:a3:c5:35:f9:01:
f7:ce:d8:18:0c:48:9b:69:57:ea:e7:36:86:0b:a9:
61:65:93:cf:d6:93:1b:6f:59:fc:3b:44:a9:1a:e8:
26:de:9d:01:d2:53:1e:90:7b:27:bc:15:85:3e:8b:
72:79:ab:bf:ad:e0:0e:1a:c9:fd:e0:2f:6c:3e:b4:
2b:ab:1d:ef:9d:e1:4f:ae:73:d6:28:81:88:9f:d1:
5c:1c:98:dd:fa:7c:31:13:24:47:23:fc:45:e4:ef:
fc:5b:b2:0e:cf:66:9d:0c:27:51:84:9a:d3:85:56:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:B5:AF:6A:72:43:DA:AB:A9:70:38:AA:F4:20:C1:25:82:F8:8A
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e9:f5:f5:ef:65:18:cd:4c:7b:81:57:28:0c:d6:a0:bc:94:
d3:06:ed:f7:20:06:c3:f5:46:03:28:62:63:a1:8c:8c:9d:fe:
60:b6:bc:5f:af:75:36:90:ca:83:cc:06:b1:9c:96:60:7a:91:
63:ef:58:0d:11:43:38:82:b2:d4:0b:48:ab:e0:8d:40:44:72:
1a:0d:86:a0:c2:54:ee:6c:cd:f5:aa:32:12:95:97:85:6a:0d:
fc:cf:cf:5e:ea:72:c9:c7:db:5f:76:ef:40:78:03:9c:d0:c6:
21:ac:92:f8:f5:ca:58:90:db:41:d4:35:8d:32:45:cd:b7:e2:
2e:49:1e:ad:bc:60:0f:47:00:f5:b4:65:dc:1a:8d:dd:96:63:
de:33:e4:3a:a2:0e:50:70:4f:ec:4b:e4:18:0c:20:91:9a:ae:
d9:b4:a6:1d:fa:95:20:be:ec:31:82:f4:ac:eb:8b:c5:16:b5:
82:10:de:45:ce:0d:2f:4c:76:de:a8:96:6e:dc:9a:65:7f:a9:
64:c5:90:6d:87:25:63:ae:94:f3:70:5e:80:10:fd:e5:32:18:
d5:db:93:a9:25:3d:7d:5e:f1:71:ce:46:f5:05:81:4f:f0:b5:
de:8f:b5:ec:6d:44:9f:ea:ce:13:fb:fe:05:df:8a:9f:41:65:
28:50:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:44 2026 by rpki-client