Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: fx7yfLzH0ihpv3mPmK4M0HMYwN2wFY2qv0lJAVhomXA=
Subject key identifier: C9:32:46:8F:C6:F8:5D:F2:26:99:4B:C9:E4:C4:D3:87:1F:C2:02:29
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 019D25F199D153810295EEA7AB985EB601D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 1686
Signing time: Wed 25 Mar 2026 17:01:23 +0000
Manifest this update: Wed 25 Mar 2026 17:01:23 +0000
Manifest next update: Thu 26 Mar 2026 17:01:23 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: Qi7MhBLuLtQIalLFR8joOxg4YJxuqiNWVOnHnW2kpfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:99:d1:53:81:02:95:ee:a7:ab:98:5e:b6:01:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Mar 25 17:01:23 2026 GMT
Not After : Mar 26 17:01:23 2026 GMT
Subject: CN=c932468fc6f85df226994bc9e4c4d3871fc20229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:17:cf:86:b0:3a:00:04:90:98:60:60:a0:
93:2c:d9:89:ab:0e:a6:ba:58:7a:6b:1b:ea:6f:f4:
1e:36:ae:a9:3c:d3:b8:ad:f2:15:c2:bc:b0:bf:40:
a6:ba:e0:3d:c2:47:9b:b2:0b:fe:41:6c:9a:66:99:
fb:cd:a8:e7:db:5b:1a:88:2d:98:67:dd:a8:59:fc:
65:b6:89:a0:c3:94:7e:b1:b3:44:56:f5:d8:3d:68:
a2:4a:be:04:e1:29:f7:21:5b:ed:0b:19:10:25:5d:
ab:07:69:38:92:37:4d:4d:a3:68:5d:30:ed:bf:2d:
f0:c9:fd:86:94:00:40:5a:e8:74:00:f3:90:e7:3f:
e5:94:97:b5:aa:dc:20:b7:12:f5:89:a6:0e:9f:21:
39:7a:35:d0:51:e5:e3:ed:a2:9e:93:06:fa:10:80:
06:40:7e:24:9f:ec:3f:7a:a1:45:ca:9d:94:93:96:
8e:b2:52:a0:15:81:b1:ff:3c:a6:30:e4:08:aa:ac:
90:c4:c2:d3:ab:77:31:a6:23:2b:be:57:ac:a2:66:
6e:ba:d0:01:ea:8a:c3:25:36:6a:8f:87:0d:52:01:
13:89:6d:84:23:f7:59:e0:20:24:ca:f4:4f:65:fd:
1c:ee:14:bb:c0:00:64:ac:49:83:f5:c8:af:28:9b:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:46:8F:C6:F8:5D:F2:26:99:4B:C9:E4:C4:D3:87:1F:C2:02:29
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:90:19:af:09:e6:12:b0:2c:b6:11:a5:5d:b5:e2:a9:52:cc:
ec:b1:01:c2:92:ff:14:ea:aa:bd:79:93:8f:43:7f:73:db:e1:
30:21:ca:aa:06:c7:f3:2e:37:6e:da:25:81:55:06:bf:4b:aa:
10:f5:3c:e9:5f:d6:be:58:a3:27:9a:05:79:59:1b:e9:73:6b:
d6:3a:6c:24:11:54:27:60:55:24:10:90:f7:7b:f0:81:4e:2b:
2f:40:08:3e:31:54:e9:88:6b:94:d2:b1:7c:ae:68:37:10:ba:
af:79:3a:7e:ae:99:fe:d0:4f:67:b9:c4:d0:3e:89:5f:09:b1:
3e:d6:77:a2:08:11:d6:2f:23:92:7b:31:75:33:56:5d:0a:2d:
a3:58:4c:a2:a1:aa:10:02:e4:35:96:8a:ef:d0:90:b1:2f:49:
51:d2:a2:99:d4:2b:03:dd:c7:2e:ad:5d:2f:b9:ab:1d:17:65:
a4:7d:3a:f7:17:ef:ab:74:83:f0:8e:25:ca:aa:b4:70:6a:cc:
c3:45:a7:b9:46:31:f1:4b:8e:cd:88:45:7c:9b:5d:2d:6a:bf:
96:91:5f:31:32:df:48:48:d5:98:6a:e1:ee:f7:68:54:62:7b:
d0:16:8b:3b:e4:a0:08:4e:65:2e:97:1b:65:4b:1a:b8:ca:0d:
d9:b7:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:50 2026 by rpki-client