Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: /LayW+3IjAFYspUvNTU0duh+2UiOMZjc2Qwf5Rk+chk=
Subject key identifier: A4:D2:65:2F:85:AF:E0:D8:52:46:DD:DB:4E:76:98:42:16:28:3F:42
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 019D2AE0569286A96DA2A0011687B008DBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 1235
Signing time: Thu 26 Mar 2026 16:00:38 +0000
Manifest this update: Thu 26 Mar 2026 16:00:38 +0000
Manifest next update: Fri 27 Mar 2026 16:00:38 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: MIQNFmwR1td0Fp9NQO1sr2EP4F2210msXPztxSlOC20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:56:92:86:a9:6d:a2:a0:01:16:87:b0:08:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Mar 26 16:00:38 2026 GMT
Not After : Mar 27 16:00:38 2026 GMT
Subject: CN=a4d2652f85afe0d85246dddb4e76984216283f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:8c:c0:f2:bc:9e:a3:91:d1:15:75:df:0e:
7c:34:5b:51:14:d4:1e:7b:73:be:64:cf:2a:5e:df:
e4:85:64:19:16:b3:b3:b9:03:25:cd:f5:14:08:80:
d0:85:51:0a:e3:91:27:6c:42:dd:b9:22:92:b3:e1:
5f:f4:5c:32:5b:05:81:f6:f9:07:56:29:38:16:f5:
ce:ef:1a:cb:da:77:29:23:e5:92:2e:23:67:fe:a8:
4c:6b:6c:d9:1f:2f:d2:3a:6a:de:f4:f5:46:e8:e1:
1a:78:fb:26:fd:f8:db:26:9e:96:ef:fa:48:e0:5c:
64:4c:54:cc:9e:5b:17:3c:6e:66:1d:95:29:68:25:
79:d6:cb:d9:09:5c:bf:e0:fd:ad:34:44:46:64:ea:
df:c6:2b:3d:52:50:32:48:84:26:3c:e1:75:28:d6:
77:35:73:81:1e:1d:c1:36:62:07:95:2a:45:09:3a:
fa:1d:36:ce:b6:34:ca:d4:1b:7b:96:83:32:0d:89:
43:04:69:8f:62:a7:47:38:dd:cf:90:f6:00:84:44:
dc:f9:36:c3:00:86:a3:b0:8c:20:74:00:55:09:25:
70:1f:a0:e3:16:8d:e6:02:d4:ba:bf:43:ba:fb:57:
ba:35:9d:d2:a5:81:8c:d1:3a:b5:80:cf:8c:a5:e6:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:65:2F:85:AF:E0:D8:52:46:DD:DB:4E:76:98:42:16:28:3F:42
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:49:dc:16:c5:1b:51:0f:d6:6a:ec:db:3c:0a:2e:f0:ad:25:
cc:4c:d5:af:8c:f7:da:2f:ec:6b:70:ed:1f:af:79:6a:2b:87:
8b:ba:a7:8b:f9:18:2c:16:4f:58:3d:d8:9b:90:d7:8c:5d:f1:
b3:01:c5:a8:24:49:1e:59:c8:69:f0:5b:8a:53:20:33:a5:00:
d1:a3:53:9d:20:05:2b:ba:ca:b0:05:e1:b4:54:4f:3e:ab:00:
fe:ff:56:c8:80:fc:d2:71:8c:93:e6:5a:35:7c:0f:8b:87:a1:
43:29:a6:27:60:e3:68:a7:5d:21:8c:6d:1e:9f:7a:68:20:18:
1f:72:80:e0:d4:c7:f2:29:07:92:2f:8b:12:47:0e:f9:8a:85:
c8:f2:60:ea:be:dc:94:6b:db:cb:04:41:a8:d3:02:76:10:b2:
13:ca:48:75:0c:72:c1:19:2b:86:ee:50:0e:1e:0b:b9:b7:a5:
f0:5d:54:76:e7:59:c2:08:3c:9f:37:12:a1:f8:03:b3:5b:7a:
d1:8d:74:3a:dc:a4:25:af:35:f1:ab:d7:5c:4a:eb:36:90:4a:
50:d6:3e:51:a7:fc:a4:e0:2b:15:b9:b2:1a:23:27:fa:ab:84:
d8:fe:27:76:52:7e:a8:3d:d3:57:e6:9c:94:94:ae:3b:06:2b:
dd:d6:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:56 2026 by rpki-client