Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft
File: vkFhezq6Mltoxn6z0ghK3RnmTt8.mft (raw, json)
Hash identifier: fvJFFTQJMY4x6H5fq4sIfQCXM9f8NA8cWkNjhCZt2yc=
Subject key identifier: 63:39:73:C8:55:10:D1:11:A1:B9:B4:C1:6D:D1:DB:DB:5C:45:32:E4
Authority key identifier: BE:41:61:7B:3A:BA:32:5B:68:C6:7E:B3:D2:08:4A:DD:19:E6:4E:DF
Certificate issuer: /CN=be41617b3aba325b68c67eb3d2084add19e64edf
Certificate serial: 019D25BAAB4D7D39CA2C15D2C8BCA44A41D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkFhezq6Mltoxn6z0ghK3RnmTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft
Manifest number: 016C
Signing time: Wed 25 Mar 2026 16:01:23 +0000
Manifest this update: Wed 25 Mar 2026 16:01:23 +0000
Manifest next update: Thu 26 Mar 2026 16:01:23 +0000
Files and hashes: 1: vkFhezq6Mltoxn6z0ghK3RnmTt8.crl (hash: 8UHntmnSYlsRvzcurFnQniVfHjsMk5zB+rluCUFS/XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkFhezq6Mltoxn6z0ghK3RnmTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ab:4d:7d:39:ca:2c:15:d2:c8:bc:a4:4a:41:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be41617b3aba325b68c67eb3d2084add19e64edf
Validity
Not Before: Mar 25 16:01:23 2026 GMT
Not After : Mar 26 16:01:23 2026 GMT
Subject: CN=633973c85510d111a1b9b4c16dd1dbdb5c4532e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:ad:2f:c6:36:08:a7:38:fe:c8:f5:0f:84:
69:fa:aa:4d:5f:9b:e9:05:33:7c:ea:38:b6:f9:fe:
82:f0:0c:9c:c4:79:17:b4:f2:00:85:d4:59:db:ac:
b8:52:fb:e0:59:40:35:03:fe:74:f3:5e:40:02:81:
31:a5:43:de:3a:56:e7:30:6f:f2:75:67:97:67:ce:
6f:ec:d0:51:35:dd:30:67:90:bc:7b:b5:bd:2a:ca:
50:5f:ec:61:ec:6e:9f:84:95:40:5f:91:ab:8a:90:
55:ab:49:9a:a2:cb:3c:f6:f1:91:61:43:a2:b8:81:
79:3a:7e:1f:b8:0b:f2:d0:29:a2:d9:14:5b:a0:d0:
f8:2e:38:6a:bb:1e:2b:df:bd:7b:0d:99:c4:fc:27:
50:94:9f:c4:de:21:20:cd:2e:ea:31:0d:6f:87:d0:
4d:d6:1b:2e:9f:26:28:1b:61:2e:fa:cf:57:0b:33:
d9:44:54:08:5a:df:cb:8c:ae:e2:8d:6e:8d:86:57:
96:05:53:6a:23:69:4c:2a:7b:5c:d4:19:8b:75:19:
46:2c:4a:a7:e7:57:86:67:6b:af:f9:6d:4a:ac:02:
f1:d7:c4:52:af:7d:52:13:c7:57:50:cf:01:8a:70:
a0:14:77:23:46:fb:2d:fa:04:24:c3:38:08:41:4e:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:73:C8:55:10:D1:11:A1:B9:B4:C1:6D:D1:DB:DB:5C:45:32:E4
X509v3 Authority Key Identifier:
keyid:BE:41:61:7B:3A:BA:32:5B:68:C6:7E:B3:D2:08:4A:DD:19:E6:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkFhezq6Mltoxn6z0ghK3RnmTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:34:51:98:b9:bc:e0:72:2b:23:88:a8:88:69:8a:18:5f:02:
ab:44:0b:f1:c7:e0:23:b8:7a:10:1f:5c:2e:21:08:08:bd:72:
62:19:29:68:c7:59:2b:0a:a1:c3:3f:07:a9:71:bf:b6:a4:23:
be:f2:4a:08:8d:ab:e2:80:68:27:26:49:16:77:84:89:db:3b:
67:13:ca:17:fd:cb:31:1d:f4:b6:d1:27:cc:88:41:82:3b:e2:
23:40:64:7c:e6:e7:28:29:49:3d:b3:9c:3d:e7:2b:b3:a0:8f:
2e:8a:55:67:b5:f4:49:00:5f:81:9f:6f:f6:59:0b:e2:a9:70:
e4:39:01:0a:2e:44:93:72:7a:a1:c9:a1:78:93:f8:89:9e:95:
96:3e:72:51:9f:d3:ef:e4:26:e6:c6:b3:c0:4a:36:81:2c:68:
93:64:0c:ae:cb:1b:f2:6e:8f:8f:13:38:c2:f1:4b:dc:65:a6:
00:d9:91:ec:46:4b:b1:1c:7d:fd:58:19:90:7e:8a:b6:6d:55:
9f:08:6b:01:0c:da:be:34:bd:10:7c:27:2c:15:00:e1:66:a1:
7c:27:72:15:dc:2a:aa:6f:ca:44:16:0c:07:f8:93:30:d9:45:
ae:27:4f:73:c4:f8:fe:11:8c:03:f8:d2:c2:51:7d:07:60:92:
1b:5d:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client