Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: izMtBRiXu/P9eP65g8Afqdlvc/OC0KJVKMQMobdXRRU=
Subject key identifier: 2C:17:39:2B:52:90:6C:BB:69:2C:8E:F4:FD:06:75:A2:B8:AE:D2:D5
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 019D26CD6D962C69A2681E85CE2F65335526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 1556
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: jwCVYPmcTQIY/VtKc1bHhKKzhnEaqu1ddG5jjaqZMSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6d:96:2c:69:a2:68:1e:85:ce:2f:65:33:55:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=2c17392b52906cbb692c8ef4fd0675a2b8aed2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:31:18:ac:89:8a:1b:99:32:76:1f:85:7b:
59:36:7e:62:35:37:b4:f8:e8:2f:5a:e7:46:e8:c4:
60:56:76:2f:2c:a7:34:73:25:3f:84:de:ab:4d:47:
10:3d:72:9a:14:b8:33:c3:cb:eb:1a:0d:1c:cc:3f:
92:70:48:ae:cf:fd:b2:bb:10:c9:9b:45:03:e0:d7:
85:cc:e4:74:9c:9b:50:c7:e4:a0:9e:84:58:d7:9d:
7e:f6:0e:d6:c4:78:bc:c2:11:04:38:4e:9b:1d:50:
2b:55:89:04:b5:0e:c9:28:84:56:aa:fa:94:db:4c:
8c:a2:64:18:5b:6a:ae:e4:30:47:9f:71:c3:cb:23:
a3:ee:be:7a:d9:2b:41:fd:47:55:21:27:23:77:18:
ce:dd:2b:07:28:c2:96:5a:1f:44:e8:76:41:0c:ab:
87:f4:86:64:ac:13:d8:bb:ed:40:19:8e:78:bd:53:
2a:ac:68:1a:ca:92:12:9e:a5:af:1f:9e:1f:6c:3f:
e3:40:e1:57:7b:9a:37:4a:11:00:de:76:57:be:9f:
d5:bc:8e:c8:a8:2e:a1:6c:83:24:9a:32:2f:d8:a7:
d2:ba:57:ef:f6:4c:cd:c5:bb:4b:cd:9b:52:cb:07:
eb:88:e6:d9:0a:89:90:67:89:eb:68:43:7b:a2:bc:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:39:2B:52:90:6C:BB:69:2C:8E:F4:FD:06:75:A2:B8:AE:D2:D5
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:5e:7c:39:d9:f8:37:63:20:b3:fa:62:7a:f0:e9:69:32:
b8:6d:35:91:7c:cd:1f:a6:61:e4:a9:80:93:be:0e:a0:ce:96:
35:8f:34:ed:ab:cc:d3:3c:88:4c:4f:e0:d9:f7:c2:37:71:fc:
47:67:81:d4:31:5c:5e:fd:22:76:0d:19:4e:54:c6:7e:27:1a:
f6:7b:5c:5f:00:0c:27:78:f7:92:40:e3:2a:f0:31:04:6f:67:
55:69:e4:5b:4a:c1:d1:45:f2:b9:a9:61:78:c5:6e:0d:ae:18:
fc:d7:32:df:c3:b4:a5:b2:95:6f:1d:53:01:a2:3a:cb:4f:35:
f2:c2:b8:3d:cc:85:51:d3:d4:c7:1f:bf:94:1b:8d:02:89:d2:
7e:e2:85:78:45:3d:10:1a:70:1a:08:f2:a2:23:a4:00:c7:35:
08:bb:7f:42:8b:cf:a8:af:f8:21:2d:a5:62:8f:2b:bb:4b:1c:
02:68:36:da:12:68:6a:86:7b:e1:43:6a:f9:6a:7c:c7:fc:34:
2d:c4:2b:cb:5e:d2:23:47:35:02:a0:5c:88:f5:90:da:dd:56:
c3:c6:cf:5d:ee:44:ef:50:95:2a:42:26:88:61:27:91:97:dd:
c8:5f:18:04:6a:c9:e4:ef:dd:ae:fd:fe:df:76:83:0c:fd:af:
bd:de:6e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzW2WLGmiaB6Fzi9lM1UmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjNlNDQwOTVmMzhjYTM4ODgzNmJmNjY1YjZmOWYwOThk
YzU3OTQwHhcNMjYwMzI1MjEwMTMwWhcNMjYwMzI2MjEwMTMwWjAzMTEwLwYDVQQD
EygyYzE3MzkyYjUyOTA2Y2JiNjkyYzhlZjRmZDA2NzVhMmI4YWVkMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIAxGKyJihuZMnYfhXtZNn5iNTe0
+OgvWudG6MRgVnYvLKc0cyU/hN6rTUcQPXKaFLgzw8vrGg0czD+ScEiuz/2yuxDJ
m0UD4NeFzOR0nJtQx+SgnoRY151+9g7WxHi8whEEOE6bHVArVYkEtQ7JKIRWqvqU
20yMomQYW2qu5DBHn3HDyyOj7r562StB/UdVIScjdxjO3SsHKMKWWh9E6HZBDKuH
9IZkrBPYu+1AGY54vVMqrGgaypISnqWvH54fbD/jQOFXe5o3ShEA3nZXvp/VvI7I
qC6hbIMkmjIv2KfSulfv9kzNxbtLzZtSywfriObZComQZ4nraEN7orxnDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwXOStSkGy7aSyO9P0GdaK4rtLVMB8GA1UdIwQY
MBaAFL6z5ECV84yjiINr9mW2+fCY3FeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NWE1MjUtYTI1OS00MDIzLTlmOTUt
YTZhNDk0NTYyZTFkLzEvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82NWE1MjUtYTI1OS00MDIzLTlmOTUtYTZhNDk0NTYyZTFk
LzEvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoJefDnZ
+DdjILP6Ynrw6WkyuG01kXzNH6Zh5KmAk74OoM6WNY807avM0zyITE/g2ffCN3H8
R2eB1DFcXv0idg0ZTlTGfica9ntcXwAMJ3j3kkDjKvAxBG9nVWnkW0rB0UXyualh
eMVuDa4Y/Ncy38O0pbKVbx1TAaI6y0818sK4PcyFUdPUxx+/lBuNAonSfuKFeEU9
EBpwGgjyoiOkAMc1CLt/QovPqK/4IS2lYo8ru0scAmg22hJoaoZ74UNq+Wp8x/w0
LcQry17SI0c1AqBciPWQ2t1Ww8bPXe5E71CVKkImiGEnkZfdyF8YBGrJ5O/drv3+
33aDDP2vvd5ubA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:33 2026 by rpki-client