Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier: z4qSgjwMQ/pYSih1uBBqRNSjRvUndp+clOp6BxVM2b8=
Subject key identifier: 78:25:E9:35:92:EC:16:7A:24:83:43:31:DD:24:63:8A:0D:01:91:86
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer: /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial: 019D2960CB7A86B47951103A8A9D35B5D561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number: 1502
Signing time: Thu 26 Mar 2026 09:01:42 +0000
Manifest this update: Thu 26 Mar 2026 09:01:42 +0000
Manifest next update: Fri 27 Mar 2026 09:01:42 +0000
Files and hashes: 1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: EfNxKMTHmv1PZWBCojsOLQX3hZUXvGEMBUF4Cju6xFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:cb:7a:86:b4:79:51:10:3a:8a:9d:35:b5:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
Validity
Not Before: Mar 26 09:01:42 2026 GMT
Not After : Mar 27 09:01:42 2026 GMT
Subject: CN=7825e93592ec167a24834331dd24638a0d019186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:85:1c:1d:3d:22:fe:c7:c7:d3:a4:78:d7:
cd:58:69:36:32:bb:8e:90:6d:f4:01:62:0d:9f:db:
c9:6e:8b:27:37:12:5d:87:24:74:d5:91:12:0e:48:
bd:59:47:8e:2b:53:96:ef:58:b3:ec:41:96:66:12:
98:68:60:92:30:39:9c:69:49:39:9b:e4:b6:fe:71:
0e:17:3c:a4:d5:80:be:f3:d4:8c:89:25:2c:dd:e4:
0d:83:2c:82:28:eb:df:b2:d3:37:45:ca:b2:72:c6:
c4:73:df:b4:0d:df:f7:fb:69:a2:ae:95:c5:57:eb:
c6:b4:d9:20:a6:b4:11:86:bb:12:3c:a6:f6:5a:f4:
75:0a:6f:e6:44:84:c3:2c:31:5e:f0:ea:10:a0:16:
23:ae:ae:38:03:6b:01:83:95:0e:7c:9d:d4:cc:74:
b1:fe:50:5b:f1:5e:df:12:f6:e5:2c:bf:d9:13:b3:
c5:86:a7:03:52:44:4d:4d:ae:6e:ee:69:db:3c:f0:
0f:f4:95:ad:c0:75:c6:d4:e5:fc:f6:3f:9c:11:7d:
cf:65:92:fc:c1:31:49:fc:4b:97:e3:ba:15:9e:11:
02:83:b7:bc:69:e7:2c:14:3f:9d:db:69:de:35:c9:
94:14:62:5f:9f:c8:a7:5d:af:e7:bb:d5:29:2f:10:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:E9:35:92:EC:16:7A:24:83:43:31:DD:24:63:8A:0D:01:91:86
X509v3 Authority Key Identifier:
keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8e:bf:de:eb:1a:20:c6:24:06:28:07:65:c5:9e:7d:c4:b1:
4b:d8:55:db:a6:b1:e9:07:f7:28:5a:a8:ed:08:92:dc:39:ec:
2f:fa:b6:12:ff:45:e6:38:9b:b4:68:12:da:37:53:0a:54:ad:
40:4f:dc:4a:23:bf:af:2a:d1:20:b9:04:2a:a7:47:ff:77:83:
63:b2:61:46:c4:6c:8c:1f:11:6c:e8:2a:fb:97:c0:bb:83:d2:
cf:03:7e:3a:b6:18:e4:9c:97:84:86:36:0a:94:7c:e4:eb:15:
15:83:7c:93:61:c5:6c:b8:29:72:16:81:62:5f:5a:c3:14:64:
22:ce:0b:24:26:15:04:3f:a5:50:b7:2f:47:ca:fe:f9:f3:ce:
9f:9a:00:03:a0:3c:14:94:94:9e:f2:c3:39:ee:00:b9:78:87:
69:5c:f6:ce:3d:6b:e7:1a:38:09:91:28:cc:08:ca:9f:19:88:
18:c3:05:2c:0b:77:7d:58:20:a6:04:54:8f:9f:d6:c2:02:9e:
5b:05:8f:60:a7:9a:dd:ee:71:ff:46:53:37:89:93:66:4c:c2:
ee:f8:df:de:71:93:54:bc:61:d1:ac:5e:a4:9f:8e:07:5f:30:
3c:a6:f8:87:0e:0c:96:30:53:85:af:93:8a:25:a9:15:04:93:
70:ad:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:05 2026 by rpki-client