Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier: zBSaTqmbxoX04EkPmgsGqOvZJTonkFjrkqqxLT/NMS0=
Subject key identifier: 32:02:C0:89:B7:92:5D:97:AA:DE:7D:BE:22:D3:08:8D:0B:54:14:C3
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial: 019D2704BC0D0E24C6538A5CB4054ABEDB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number: 07E6
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: zDB9DQySgCfylrI6K1UXsd025EUAleUsj/zSwtJYBAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bc:0d:0e:24:c6:53:8a:5c:b4:05:4a:be:db:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=3202c089b7925d97aade7dbe22d3088d0b5414c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:e5:ce:43:d8:b6:71:71:e5:a0:ff:d4:95:
f0:d2:a1:6a:38:74:b2:3d:0a:b6:5b:78:38:86:1d:
2e:5c:f5:69:e0:47:93:fe:7f:a5:f9:da:9e:85:0d:
e1:c7:4a:da:0f:b3:82:10:99:d0:3a:e9:5f:3e:c8:
aa:a4:68:79:10:bc:ee:e1:6c:9d:85:2e:45:fc:ab:
04:4d:07:9c:2d:60:3d:26:f1:f2:6c:1d:df:01:1f:
13:73:5a:a5:47:a1:0c:e3:dc:a2:31:f7:86:ad:c2:
ea:cb:f0:2d:55:4a:ee:e4:65:63:4c:3c:75:25:fe:
26:b1:57:48:96:0a:aa:79:b1:77:16:f1:e4:34:7d:
c6:d7:8d:7b:9a:7a:07:08:54:8a:56:3d:1c:cb:2f:
66:a3:b5:39:9a:03:66:db:d3:e8:fe:20:8c:e9:53:
c3:38:20:ee:ca:a8:5a:7f:76:1f:7f:24:92:68:fe:
7c:6b:9f:a7:67:43:d0:90:d1:c2:11:44:1e:77:8f:
cb:03:de:3b:0a:f1:54:47:2b:56:bd:ca:dc:c0:e9:
fb:0e:6b:ab:9d:af:a2:22:ec:0f:21:18:b8:45:f6:
bf:1f:96:ac:32:da:53:e4:3c:33:a5:c7:97:ac:5c:
a7:67:26:39:df:8c:7d:73:27:5e:78:c0:af:75:49:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:C0:89:B7:92:5D:97:AA:DE:7D:BE:22:D3:08:8D:0B:54:14:C3
X509v3 Authority Key Identifier:
keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b4:fc:5f:90:63:42:24:d6:1d:7e:ab:73:0d:cc:01:d5:ac:
3b:28:67:32:49:7a:f8:f8:b6:4d:07:7e:eb:25:b1:e8:0b:9e:
e1:7f:55:74:6c:4b:f7:7c:db:b8:18:54:50:5c:44:6b:2e:ef:
04:d7:b6:ab:38:04:4f:5e:5e:72:dc:03:32:2a:8f:b1:ff:4e:
16:7c:72:b7:b9:3b:f0:06:26:f0:62:c6:b3:01:e1:fa:9f:df:
05:cf:bf:84:22:8c:6e:ac:0d:90:98:e5:6c:b3:c2:ad:b0:01:
4e:26:45:39:7e:aa:52:b1:8e:c2:4c:67:e5:bc:11:75:cf:92:
39:75:28:8f:e0:1e:81:3b:1d:85:22:8b:26:a7:76:d6:ee:57:
eb:82:01:55:21:f4:f6:ed:39:91:d2:aa:d9:d6:e3:bb:1f:dd:
7c:8a:7e:d8:e3:3c:f8:08:89:9c:01:14:97:67:db:f3:cf:26:
e9:c0:cd:48:3d:a9:4f:de:db:bb:ae:e2:09:f1:93:6a:ef:a6:
af:cc:cb:04:c9:47:16:d3:98:ba:d1:30:8b:3a:e2:bc:fd:ca:
f3:50:40:12:0e:89:19:72:2c:8a:8a:e1:65:22:43:ee:43:8f:
95:0b:4e:7a:d5:2e:d5:06:21:1f:be:7e:53:a4:0f:4a:2a:a7:
8e:1f:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:53 2026 by rpki-client