Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
File: vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft (raw, json)
Hash identifier: WSIl1i1cK4SV7f6vMJOR9a5GBcESqEMVUw7zLCLtu/Q=
Subject key identifier: 8E:EF:48:E3:3B:DF:11:6E:E5:9A:F0:98:73:62:1B:58:5B:30:52:84
Authority key identifier: BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
Certificate issuer: /CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Certificate serial: 019D284D5568D942D9DD0B90B64C845E33A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
Manifest number: 0312
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl (hash: sgBKKJyiUHml1LWhJXPE8Lvvq2rRdBi4QcaXZ+/ANl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:55:68:d9:42:d9:dd:0b:90:b6:4c:84:5e:33:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=8eef48e33bdf116ee59af09873621b585b305284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:7b:b9:b7:60:ef:cf:fd:a8:d5:41:1c:03:
61:99:64:18:4d:61:c8:49:c5:4a:e6:0e:ec:97:0d:
7e:b1:cf:31:e9:1c:cf:85:81:c0:5f:46:a6:82:4e:
ed:1e:52:f4:3d:92:ea:d0:c1:f7:24:8d:55:7f:73:
6f:d0:49:85:4a:f2:e8:50:79:12:4e:28:87:b7:03:
23:d2:f5:f3:ff:ee:15:cc:2c:eb:46:10:0e:1a:30:
28:cf:29:a6:5c:61:01:4b:a2:11:e5:72:20:70:ee:
3a:3b:bf:cb:a7:bc:32:f3:31:5f:d7:67:b2:d8:b5:
f7:a4:46:02:cc:93:75:e2:b2:d4:b0:7e:16:3b:33:
39:80:12:8d:17:dd:03:3b:71:9b:e4:33:69:54:9c:
e0:8a:23:35:a7:af:09:77:49:7c:37:2f:ee:8b:2c:
5b:1e:80:66:5a:99:fd:bd:6a:e9:8b:2f:e0:db:e1:
7d:2c:eb:dd:ef:1f:e5:21:6b:a3:3a:6d:e0:e0:91:
74:5b:b3:89:e2:84:50:9e:06:19:ee:d1:6b:f4:ec:
3e:67:77:40:98:dc:72:70:47:8b:0b:a2:d8:8b:62:
16:49:ea:11:04:43:d6:81:1b:bf:6c:89:e9:27:e5:
09:56:cf:ff:c1:fa:c8:5f:4a:2e:bf:ba:90:f8:df:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:48:E3:3B:DF:11:6E:E5:9A:F0:98:73:62:1B:58:5B:30:52:84
X509v3 Authority Key Identifier:
keyid:BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b6:50:f9:1d:ad:40:33:e5:c2:c5:15:5c:75:e7:ef:1e:e6:
31:43:dc:ed:d3:e4:9b:d6:51:b6:25:08:cb:de:df:2d:63:11:
a3:b2:df:52:ac:d0:1e:f1:c5:f4:a1:21:97:a4:b3:c7:d7:ca:
b9:61:e6:64:09:34:ec:f3:d6:29:e4:78:96:9c:90:3d:af:68:
c4:5c:b6:2e:49:9f:09:3b:ad:85:21:4d:c7:ed:09:03:b6:40:
86:f5:db:ab:ec:c8:e9:02:02:3e:82:cf:1d:b7:b1:2c:32:78:
b4:94:91:e2:47:02:00:b2:76:29:79:95:71:81:cd:83:3d:0d:
6e:86:b7:84:50:19:b0:c3:e6:7b:ae:17:d4:d3:bf:72:7b:79:
46:c3:02:9e:1e:38:88:f8:19:81:4d:0f:5c:71:47:02:ee:87:
3f:6c:9b:99:c8:17:7b:ac:00:0d:9a:ff:c9:5a:30:a0:ac:76:
c2:5d:d0:be:f2:32:28:cf:0b:36:d7:b0:2a:32:aa:0c:2c:31:
37:99:ea:c8:15:65:73:27:de:42:61:87:6b:ef:60:80:79:6b:
81:de:74:b3:aa:03:6e:ad:62:ac:dc:f3:0f:8c:03:f7:a8:34:
de:f7:b1:c7:04:fe:4e:c2:74:f2:34:41:53:d6:14:26:62:ce:
a8:f0:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:57 2026 by rpki-client