Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File: _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier: 3l1vCVuGDkIUv37qa7KbxFvBko4iNEjU3NyweNX5aI4=
Subject key identifier: F6:98:2E:04:1E:7E:BD:C4:07:24:10:C0:F8:5E:D9:25:B1:FB:99:C8
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer: /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial: 019D299716F083DA2566E772260203478AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number: 0D6A
Signing time: Thu 26 Mar 2026 10:01:00 +0000
Manifest this update: Thu 26 Mar 2026 10:01:00 +0000
Manifest next update: Fri 27 Mar 2026 10:01:00 +0000
Files and hashes: 1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: 4tEKwoVMQwPp+0JMPEYYA7sxCW9dQlUGMnU/KGGd4TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:16:f0:83:da:25:66:e7:72:26:02:03:47:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Validity
Not Before: Mar 26 10:01:00 2026 GMT
Not After : Mar 27 10:01:00 2026 GMT
Subject: CN=f6982e041e7ebdc4072410c0f85ed925b1fb99c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:16:a6:34:90:06:eb:69:30:7e:54:59:8b:
0f:28:55:55:94:92:e1:0b:0e:c8:c2:b2:e2:b1:ac:
0c:56:da:38:9d:50:0e:35:40:77:b3:29:5c:74:17:
c2:9c:d2:95:68:3e:01:d0:ad:57:39:cb:c3:29:74:
d7:c9:79:be:61:d6:4c:22:9c:bd:72:33:ac:d5:35:
44:33:d7:5b:34:d2:6d:81:dd:3c:af:28:06:97:f6:
ef:ee:5f:ac:e7:2f:1f:14:f2:bc:7c:cc:05:e1:1a:
81:8c:36:f1:94:b9:4a:88:89:d6:b1:05:86:85:97:
d0:fe:64:28:ac:f6:50:a7:15:4a:fd:a1:79:48:e6:
b3:0f:95:3e:c9:3e:eb:73:3e:d9:bf:e7:e1:dc:0c:
c8:dd:c4:35:1c:37:bd:33:36:62:08:15:69:f3:6c:
cf:c1:21:01:d7:89:90:14:fa:c6:b8:b3:66:e4:8b:
1d:45:8c:aa:6a:2d:2c:86:db:96:19:16:88:f1:ac:
fe:29:1f:93:90:16:85:48:7b:10:89:4e:a1:ea:10:
2b:b2:ef:7f:2b:a5:e2:af:08:e5:c4:91:9d:d8:8f:
3c:5a:e8:98:33:e1:59:23:af:8e:76:b0:c5:95:9c:
09:16:c6:da:2d:d6:fa:39:a0:e5:78:10:46:d1:88:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:2E:04:1E:7E:BD:C4:07:24:10:C0:F8:5E:D9:25:B1:FB:99:C8
X509v3 Authority Key Identifier:
keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:12:02:7f:0e:97:1c:aa:7c:44:bd:48:ba:d9:1a:e2:88:9b:
c6:b7:4e:f8:8b:fe:e6:72:34:61:19:64:34:40:96:d8:21:16:
98:02:93:20:49:5d:dd:fa:d9:78:7b:fb:6e:32:18:65:c0:42:
20:b6:4d:ee:4d:2b:ac:bf:ff:e4:80:5a:4a:ba:ac:dd:c0:88:
a5:44:92:9a:c1:d4:75:78:ea:90:ca:54:40:60:c5:4a:0c:37:
ac:1c:dd:6d:48:16:95:19:b9:99:aa:95:51:41:fc:40:b1:30:
b6:04:e5:fa:98:65:cc:4e:73:dd:a6:51:ae:10:0b:93:f8:f9:
cb:40:e7:d6:70:53:06:c5:90:cb:1c:c0:d4:19:2e:dc:09:15:
d9:ed:fe:30:23:80:1c:80:b5:4c:1b:ed:9f:51:4f:b7:c5:c5:
b7:b9:19:d6:24:e0:70:d4:a6:18:fa:ed:de:11:d5:79:e0:fd:
0d:37:b7:4b:87:47:24:b5:1a:02:d7:8a:f8:52:92:34:64:fb:
47:c9:4c:79:61:d8:e9:63:c7:8f:66:5c:c7:d0:1f:89:a6:24:
75:8c:9d:23:04:6f:60:07:7d:8f:90:63:84:a1:89:56:c7:7f:
9d:44:5b:34:60:36:0c:f0:0b:94:83:71:3a:42:d5:82:91:9c:
5c:4c:5c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:02 2026 by rpki-client