Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: H5yCNKMq6Iu9CYGriVmOEyCr/IOY+re08w3UD60nUYk=
Subject key identifier: 6C:B2:92:B3:41:D9:1E:3E:FE:C2:34:A3:BB:5A:C6:CD:70:B6:F5:C1
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 019CAA582009D08CEE7993379811DAB70A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0927
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: 6LyUBsjTgDS84eOWYoBng2NkjMdVnkiTfTjjMqvxGXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:20:09:d0:8c:ee:79:93:37:98:11:da:b7:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=6cb292b341d91e3efec234a3bb5ac6cd70b6f5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:d5:28:f8:1b:0d:dc:36:d6:48:1a:c4:4b:
01:91:fd:d1:59:4e:35:6e:94:ee:4c:76:eb:67:8a:
aa:70:c6:58:38:53:0a:f0:81:dd:e0:b7:9d:c1:d5:
40:ee:0b:05:af:2e:1a:c4:a4:91:f3:e1:71:c3:e3:
07:58:de:af:10:c5:20:52:73:4e:69:0e:95:55:f5:
64:8f:0f:c2:d7:c8:a2:ef:8b:f0:a6:8b:1f:2e:93:
e4:81:b1:59:35:40:93:5e:e4:5a:6f:f7:60:5b:c5:
99:d1:32:a3:32:9f:5c:9d:d1:e5:c4:37:1e:8c:dd:
de:58:3b:fc:eb:73:65:45:1f:4b:0d:96:c7:56:96:
f7:54:c3:9f:01:97:d7:df:1a:67:b7:9e:41:f6:9c:
85:a5:59:05:d0:94:59:d5:03:d0:64:05:b8:ff:6e:
c5:97:4f:74:41:51:03:67:4e:fa:5e:11:ef:45:7c:
fc:79:44:12:69:2e:2d:48:aa:6b:83:db:d9:36:c8:
35:77:93:1d:e2:82:82:6b:b6:ea:74:63:8f:cd:f3:
b7:d1:61:eb:93:e2:33:65:64:c2:c7:0f:f6:4f:e9:
27:b6:2f:7c:22:1c:8c:f6:ef:64:a5:68:9d:3f:88:
4a:8d:ad:21:2d:b5:2c:26:31:93:51:5b:60:46:6a:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B2:92:B3:41:D9:1E:3E:FE:C2:34:A3:BB:5A:C6:CD:70:B6:F5:C1
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5f:80:ab:90:eb:a6:92:2c:2f:b6:c7:9e:ac:ac:4b:64:24:
e1:af:2b:b2:87:e1:76:03:d5:38:a1:8b:b5:d8:e0:76:fb:01:
0a:d6:ad:d2:fe:53:ef:f3:1f:aa:e1:d4:ff:ef:55:11:0b:2f:
05:07:c5:df:58:b9:d9:5f:0f:e7:ba:58:25:7b:28:f9:29:cd:
9a:83:cd:05:9d:b5:78:0d:79:ae:25:92:5e:92:71:da:fe:32:
91:28:7e:bf:c6:d5:ab:7a:d5:b3:43:e2:94:23:dd:dd:99:6e:
7d:77:29:28:56:b2:c7:f5:8a:3f:98:51:15:32:00:85:dc:60:
2d:60:ba:80:51:58:2d:0d:80:97:62:01:96:f0:3d:28:a0:05:
63:53:a7:a7:8d:0a:11:1c:d1:2b:a7:8f:1f:09:42:63:fa:d4:
7f:34:1a:1f:8c:a1:f3:72:98:43:b7:f8:39:9a:83:9b:e0:bb:
4a:80:3a:58:b0:d1:5b:5d:ff:58:40:c4:8c:1d:bc:83:2b:93:
66:52:cf:07:63:47:ef:eb:9a:2f:d4:52:c1:54:1f:bd:3a:06:
f1:2a:75:27:d3:17:ff:80:fd:81:4e:65:1b:81:38:43:0f:46:
2c:70:9a:c4:14:d5:23:d8:68:1b:30:43:57:fd:68:fc:e8:ea:
b5:a0:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:46 2026 by rpki-client