Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier: y3u5Y5D/TFpdZvtfq3fNMtAtoZoOimffB8NcnrAafOo=
Subject key identifier: 67:47:D8:22:5B:0F:0E:67:71:A4:9F:6E:2C:5B:BE:4C:40:8B:58:4E
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial: 019D27A915271DE75F0E44C27FE117B6BF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number: 15EB
Signing time: Thu 26 Mar 2026 01:01:25 +0000
Manifest this update: Thu 26 Mar 2026 01:01:25 +0000
Manifest next update: Fri 27 Mar 2026 01:01:25 +0000
Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: n9YHn+TXeWa+U2ebp7VYswbq/BeaPI6IEOd4AU9UWIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:15:27:1d:e7:5f:0e:44:c2:7f:e1:17:b6:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
Validity
Not Before: Mar 26 01:01:25 2026 GMT
Not After : Mar 27 01:01:25 2026 GMT
Subject: CN=6747d8225b0f0e6771a49f6e2c5bbe4c408b584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:2b:a2:c0:9c:14:c8:a8:c9:9a:17:46:bc:
b3:b4:7b:3d:d3:2f:58:90:54:a1:c3:4c:d8:8c:e2:
c0:f0:d3:0d:6a:cb:36:d6:24:fb:0b:ff:51:9d:c4:
53:4d:05:53:80:55:fe:82:d8:41:96:b9:ac:9f:ff:
01:0f:24:e4:14:97:d2:03:fc:5c:a6:7c:e9:1a:c3:
df:9c:4d:57:d3:9a:2c:6c:c5:38:2b:ff:f6:5a:b3:
6b:ce:69:9a:cc:ae:e0:ce:ba:79:15:6c:58:c2:db:
ff:2c:84:bc:63:92:6a:4d:10:c2:2f:42:7c:2d:9c:
3b:3f:56:5b:46:26:e7:8c:4a:07:cc:09:63:9b:f6:
5f:d5:fe:a3:33:24:81:7c:d4:60:eb:f4:8f:b0:b1:
b5:57:2f:51:e1:46:29:d6:c4:f7:c4:70:c9:2e:6a:
ea:61:e8:b3:d9:63:ef:67:cb:89:41:24:18:41:1f:
44:01:6d:72:af:ff:81:a9:44:47:fa:e3:14:e6:d3:
f3:e8:aa:fa:50:31:34:c3:dc:b3:a0:04:ff:f5:a7:
96:0c:cf:d2:ef:bb:ef:24:0b:01:a2:a3:52:48:b1:
6f:d9:14:5f:ba:17:2c:37:fa:6a:3a:23:3c:42:19:
38:a2:15:66:ba:d5:d1:db:24:28:71:46:7c:28:41:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:D8:22:5B:0F:0E:67:71:A4:9F:6E:2C:5B:BE:4C:40:8B:58:4E
X509v3 Authority Key Identifier:
keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:e7:ef:d6:5f:71:83:c2:0b:28:32:f0:ff:cf:ec:76:b0:
dd:80:d1:64:37:fc:9d:ff:ca:e4:1d:30:23:46:03:55:95:30:
36:ff:92:53:87:13:71:86:61:d1:0c:67:30:dd:d7:8a:9e:29:
6f:6d:ee:37:40:16:20:8f:d8:73:f8:59:d6:4b:8e:da:97:14:
f8:c4:b0:1f:e5:49:de:e4:40:ba:fc:2a:af:89:72:fc:95:01:
80:1a:b8:ee:79:41:db:e7:63:c3:7d:0e:e1:d2:f5:d6:20:a3:
ab:90:a7:e8:61:27:d5:fa:55:0f:00:c9:f6:57:32:b1:3e:e1:
5b:92:8a:8d:20:ca:59:1e:e3:a1:43:65:83:51:b0:e8:17:c1:
c4:9b:d4:5d:82:0f:62:8f:b1:50:a7:d5:a3:a4:10:a4:36:5b:
80:6c:db:2e:54:b3:03:0f:c9:7d:3c:26:0e:88:17:0d:22:90:
ac:26:9e:93:78:f4:ca:40:23:64:8a:a6:b3:05:93:66:89:c3:
53:b4:bf:36:2f:22:79:6b:b4:cf:57:35:7a:3b:84:9d:d9:9d:
b9:7f:de:32:d4:34:7e:04:5a:78:5d:5a:2c:d6:d9:df:fd:e3:
81:73:aa:58:61:a7:42:ab:86:79:37:39:05:fe:f1:98:fd:7e:
dc:18:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:39 2026 by rpki-client