Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
File: VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft (raw, json)
Hash identifier: BAsCyFk9WZlYRMerA48Sp3vxiaxiarZHYx2b/vVCk0U=
Subject key identifier: 19:66:AF:E5:7A:89:00:35:94:0F:3D:C4:DC:79:F0:43:E0:70:79:1F
Authority key identifier: 54:3C:29:5B:26:40:E5:99:2F:E6:5B:5B:43:42:91:DF:A0:33:17:5F
Certificate issuer: /CN=543c295b2640e5992fe65b5b434291dfa033175f
Certificate serial: 019D333F0B31B5FC790BA190F2FFCD51E0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
Manifest number: 0E
Signing time: Sat 28 Mar 2026 07:01:02 +0000
Manifest this update: Sat 28 Mar 2026 07:01:02 +0000
Manifest next update: Sun 29 Mar 2026 07:01:02 +0000
Files and hashes: 1: VDwpWyZA5Zkv5ltbQ0KR36AzF18.crl (hash: uljpBITPnLqTP0wzJVqw66JCHmOHQDa+MUgUE4dbFsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:0b:31:b5:fc:79:0b:a1:90:f2:ff:cd:51:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c295b2640e5992fe65b5b434291dfa033175f
Validity
Not Before: Mar 28 07:01:02 2026 GMT
Not After : Mar 29 07:01:02 2026 GMT
Subject: CN=1966afe57a890035940f3dc4dc79f043e070791f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:19:29:74:c8:e9:d4:77:36:65:b2:c8:be:
1b:d8:72:91:d2:62:61:48:bc:5f:84:fe:73:ca:5a:
37:80:51:03:19:0c:25:a6:4b:63:85:7c:f2:38:f2:
6f:07:ee:81:7c:9c:6a:4b:dd:ac:06:80:5a:0a:68:
d1:86:20:38:b8:12:fb:ee:99:ce:6b:27:34:d2:1f:
8a:9a:c7:e9:fd:ce:26:af:23:33:2a:ef:68:75:6e:
b1:4f:e0:09:b4:8a:c0:1e:a6:a9:2c:e4:24:ff:93:
f6:31:14:7d:04:74:db:ff:39:cc:b4:6a:05:de:19:
39:b2:fb:3b:63:d5:ab:0d:93:99:4f:c7:b9:01:2d:
84:c6:52:97:35:c4:ee:92:fa:37:b8:1c:92:02:76:
83:95:c6:2c:52:f2:3f:71:f9:00:29:57:37:16:cc:
34:0d:12:3b:42:6b:e0:39:a9:8b:19:54:f0:71:3b:
21:c0:ef:c3:5f:94:d9:fb:74:dc:24:90:c5:62:2e:
c7:de:6b:28:b6:55:8e:58:83:d0:58:3a:79:a1:64:
69:ee:71:9a:d7:f1:0b:d8:db:49:d8:3b:23:fe:b3:
31:59:1a:7b:1f:2d:eb:11:c4:ee:88:3f:f6:3a:67:
1a:65:31:d4:a0:74:8f:c3:21:84:1a:8c:6b:52:40:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:AF:E5:7A:89:00:35:94:0F:3D:C4:DC:79:F0:43:E0:70:79:1F
X509v3 Authority Key Identifier:
keyid:54:3C:29:5B:26:40:E5:99:2F:E6:5B:5B:43:42:91:DF:A0:33:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:11:4b:ae:5d:64:3c:15:15:19:42:4d:74:11:3e:43:71:
9f:85:3b:72:07:ea:e9:bb:16:be:8a:c0:4b:45:5e:1d:dd:98:
36:f5:44:81:ef:9a:18:5b:90:fb:a0:1f:4f:26:2e:98:d8:99:
cc:d4:eb:2e:2c:37:47:5c:d6:ed:b5:2b:16:32:35:a7:70:fd:
e3:0e:ae:8e:cc:ba:1f:79:e8:98:47:8c:06:70:4b:b7:b3:0b:
81:e9:8b:a7:af:d1:e1:93:59:b0:b2:94:b6:d8:4b:e4:ab:40:
b2:68:b9:5a:78:74:27:80:ba:58:4f:e5:8a:1e:75:e7:4f:90:
e1:ab:48:5c:11:2c:6f:1e:ae:1b:82:65:67:bd:96:88:64:14:
ee:f4:a3:bb:06:18:4b:1b:44:32:66:91:ad:2a:1a:a8:98:d5:
3d:09:89:d6:35:79:a3:7b:0b:0d:0b:76:7f:40:20:5e:2e:1a:
6d:87:3f:91:03:b5:d2:e6:30:1b:78:34:6a:97:5c:33:b6:7f:
c2:c4:2e:f0:5a:f0:4d:01:fa:32:7c:35:31:7f:49:d0:33:96:
06:9d:82:32:6c:cc:48:ea:36:dc:cf:8d:1b:3d:c1:6c:0f:44:
f4:73:ec:ac:44:ac:93:e1:89:b0:65:97:0d:7a:12:d4:03:32:
31:2c:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:48:54 2026 by rpki-client