Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
File: vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft (raw, json)
Hash identifier: Y9tv1QDmBFS4rPf9aOMEJh2g9XQbd/7prfy4lVWQR/Q=
Subject key identifier: F7:48:69:00:30:10:E0:5F:C5:AB:53:04:36:67:19:4C:5B:0A:E3:30
Authority key identifier: BD:A8:89:23:F7:34:1B:E9:68:65:16:EB:72:E3:8E:EC:2B:FC:AE:3B
Certificate issuer: /CN=bda88923f7341be9686516eb72e38eec2bfcae3b
Certificate serial: 019D326332A0A21E91B0E3E844558D8FD30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaiJI_c0G-loZRbrcuOO7Cv8rjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
Manifest number: 60
Signing time: Sat 28 Mar 2026 03:00:54 +0000
Manifest this update: Sat 28 Mar 2026 03:00:54 +0000
Manifest next update: Sun 29 Mar 2026 03:00:54 +0000
Files and hashes: 1: vaiJI_c0G-loZRbrcuOO7Cv8rjs.crl (hash: aenY37imEkTbYO5iLqXCp4Nu+JYBIaJWpC1YNT/kvZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaiJI_c0G-loZRbrcuOO7Cv8rjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:32:a0:a2:1e:91:b0:e3:e8:44:55:8d:8f:d3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda88923f7341be9686516eb72e38eec2bfcae3b
Validity
Not Before: Mar 28 03:00:54 2026 GMT
Not After : Mar 29 03:00:54 2026 GMT
Subject: CN=f74869003010e05fc5ab53043667194c5b0ae330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:75:3b:17:e6:3e:4f:1d:90:0e:76:4c:23:
c6:b3:14:46:5f:3b:31:12:69:d6:46:fb:7d:7a:0f:
be:f5:94:23:dd:99:42:2b:28:56:ec:38:6e:4e:2a:
1d:83:99:2a:c7:b3:a1:13:ca:b5:01:72:fc:2f:53:
e8:5b:17:68:c2:54:ef:23:39:8b:b0:52:5b:7a:5d:
9f:26:01:9b:c4:3f:4b:05:85:d5:59:64:5c:24:72:
e3:9d:d4:5b:1e:0a:04:ec:74:56:d5:3a:35:d9:ef:
6e:80:30:28:3b:ad:b6:19:9b:22:24:95:5f:36:69:
e5:fc:5d:35:08:0c:0c:a6:b0:d9:2a:7c:97:ab:4f:
0a:d2:b5:62:4a:63:0f:0d:08:ec:13:27:51:ec:e4:
8f:e9:d8:0e:ee:f7:5c:b8:0f:7e:01:b6:82:40:ba:
10:4d:f0:c0:63:4b:ec:56:fd:9e:74:16:b8:47:a9:
e3:a1:60:94:6a:59:74:01:8b:15:da:f3:03:40:97:
f9:bf:01:5e:18:07:75:a3:29:e3:b0:bb:f2:92:54:
52:71:ae:d1:b7:f7:70:b2:30:63:9f:81:f9:02:d8:
d0:58:a8:8e:87:46:8e:ad:d0:67:6b:cf:e5:75:3b:
b1:cb:3c:b9:01:66:27:d4:68:cd:42:4e:4c:77:b1:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:69:00:30:10:E0:5F:C5:AB:53:04:36:67:19:4C:5B:0A:E3:30
X509v3 Authority Key Identifier:
keyid:BD:A8:89:23:F7:34:1B:E9:68:65:16:EB:72:E3:8E:EC:2B:FC:AE:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaiJI_c0G-loZRbrcuOO7Cv8rjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f9:2b:db:58:fc:4b:f6:ca:cb:3a:ca:78:8b:a4:22:af:1a:
01:00:55:26:6b:f0:38:4d:60:fa:fa:fc:25:74:54:35:0a:54:
c4:a5:31:ce:b5:05:a6:4e:a7:3c:2a:52:4d:ab:1d:87:d6:13:
43:88:fb:be:af:0c:10:e9:08:1c:8a:cb:d5:1f:da:a4:fb:73:
32:5b:c9:f7:f5:41:cd:51:bb:d2:96:93:44:76:d3:a0:38:32:
b3:13:83:07:4b:46:10:c1:e2:49:d8:3d:4d:90:3d:13:f7:7f:
e7:48:84:9a:5e:bb:4e:6b:b1:e1:47:0e:c3:e3:c1:20:b8:b9:
05:8d:67:57:bd:05:15:08:c3:a1:c6:89:c6:65:f2:f0:d9:e6:
05:d0:d3:a4:b9:ee:63:9a:e1:15:f8:89:b3:ff:f1:9a:94:a6:
a6:f7:68:3c:6f:e4:10:21:cd:a1:f5:5f:6f:ef:28:31:12:3b:
93:20:da:89:e9:0e:db:44:4c:46:ae:98:79:49:a5:0a:68:65:
bb:de:bf:9b:88:9e:36:1e:bc:3c:2b:28:90:a2:ad:ec:4f:d8:
84:ae:d9:d4:9b:4b:6a:a3:60:05:8b:66:67:66:3b:cc:f9:7b:
b5:26:61:d1:21:cc:76:48:97:8e:73:26:1a:0f:24:88:87:b6:
5e:04:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:03 2026 by rpki-client