Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: 6r/8+Ln83295dqru9N3OAoQKQBDDECBs5AQOfRjoPe8=
Subject key identifier: 64:CC:B0:7C:3F:D0:81:F3:74:45:7A:C8:48:24:87:89:C3:04:44:14
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 019D2703E5BB5F4BC374564938D392FF0F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: KQWfTztVdc4GcmszZXSEiyfDEPJHnMNpQtMlgrYSvFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e5:bb:5f:4b:c3:74:56:49:38:d3:92:ff:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=64ccb07c3fd081f374457ac848248789c3044414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:90:36:ea:a9:42:80:c1:64:e7:2b:c1:46:
1d:7e:49:72:8f:17:35:ef:e1:43:0d:f7:82:3e:cb:
47:fb:70:29:eb:1e:58:9b:71:9e:7a:18:bd:ad:c0:
ae:74:be:77:58:01:da:0f:3e:b0:ca:ab:5d:cd:18:
42:b2:82:e7:20:df:6e:b8:35:7d:89:cc:ac:d6:b2:
33:ac:4b:7f:78:d6:ee:c7:26:0e:6c:cd:43:da:07:
1c:48:48:24:2a:66:a7:51:cc:cb:85:3a:e9:d0:2c:
ce:d3:7d:f6:e8:9c:75:5a:eb:4d:22:bf:be:ca:42:
bb:c9:b7:c0:92:a2:fa:3b:be:16:4b:40:fd:02:73:
72:c7:38:9f:59:33:5d:40:91:b7:b2:cf:f7:6e:7d:
89:66:5c:f7:67:82:a0:10:15:56:40:76:20:8b:22:
00:cd:db:8e:2c:47:ca:90:c3:24:45:29:6f:05:a9:
89:69:5a:77:00:d1:a4:ec:9f:27:6d:36:1c:83:ab:
38:51:72:31:e0:af:0c:99:64:38:6f:a4:0d:ca:b3:
af:fa:ce:ed:32:b4:9a:bc:6d:38:d0:53:ce:10:6c:
d6:7e:86:a3:3f:48:dd:f0:0d:78:41:1d:e7:a1:92:
49:e2:9b:a4:ea:d3:43:f9:cc:7c:d3:c1:26:10:98:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:B0:7C:3F:D0:81:F3:74:45:7A:C8:48:24:87:89:C3:04:44:14
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:44:a4:a9:1b:bc:a1:db:1f:b8:f9:84:2c:08:1f:b6:5a:c3:
6c:78:8f:f1:ec:7b:1f:af:e3:9b:69:c6:47:33:49:25:88:95:
2a:e9:76:ef:f0:ce:8b:83:bd:17:39:55:6e:07:53:c3:59:5c:
7e:fb:96:dd:24:fe:cf:bf:a3:0b:17:31:ff:7d:2b:f5:4e:a9:
e4:28:ae:e9:75:bd:89:73:c4:3d:e4:d0:94:49:71:df:4f:64:
c9:dd:4e:49:6d:48:a1:aa:67:d7:9c:8f:96:9f:37:59:2b:bf:
89:19:27:c2:48:41:d5:7f:eb:50:df:4b:21:fb:fa:cf:d2:6f:
42:41:a6:a8:f4:31:37:b8:fe:b2:e4:2a:6e:07:4e:95:e3:b8:
c9:cf:f1:b7:3c:85:12:6b:e7:78:84:7e:06:f7:88:09:8c:54:
b3:77:fd:13:68:68:6d:31:f6:e3:7a:9d:c2:64:f0:3e:99:65:
d5:07:2c:94:f0:17:c2:54:f3:57:a1:93:12:3e:0e:de:7f:4b:
53:6d:8e:3d:20:dd:cc:2f:4e:85:c9:d3:f4:44:85:2c:7b:95:
cb:cd:df:2d:44:8d:39:0d:20:75:3b:b8:9c:8e:42:d6:67:96:
f2:ac:78:d1:c4:a6:ed:77:98:40:84:77:ef:0e:77:a7:43:d7:
f6:d3:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:22 2026 by rpki-client