Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
File: Vl_xMRJL3SahzQpsx_loVNgwNg4.mft (raw, json)
Hash identifier: /9fUcYuDOcbYQKAv3g+enPAv3m0STZ72Tjl7PDbyGQk=
Subject key identifier: 18:F5:04:85:79:0B:72:79:FB:DA:D5:E8:16:57:A8:DC:6A:80:7C:34
Authority key identifier: 56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
Certificate issuer: /CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Certificate serial: 019D2704E36F11335FB8CA58A67983497923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
Manifest number: 0952
Signing time: Wed 25 Mar 2026 22:02:04 +0000
Manifest this update: Wed 25 Mar 2026 22:02:04 +0000
Manifest next update: Thu 26 Mar 2026 22:02:04 +0000
Files and hashes: 1: Vl_xMRJL3SahzQpsx_loVNgwNg4.crl (hash: sEOhWKBro9IUjB1ZODu3pKFtm1vaHt3vF12g2anK2MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:e3:6f:11:33:5f:b8:ca:58:a6:79:83:49:79:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=565ff131124bdd26a1cd0a6cc7f96854d830360e
Validity
Not Before: Mar 25 22:02:04 2026 GMT
Not After : Mar 26 22:02:04 2026 GMT
Subject: CN=18f50485790b7279fbdad5e81657a8dc6a807c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:fe:70:fc:a9:1a:04:9c:14:93:b9:ac:41:
fe:2f:c1:44:fc:4c:32:56:34:ca:97:72:67:fc:a5:
93:04:05:79:1b:99:f5:45:e9:f5:ce:df:a3:98:27:
d8:b8:e2:f9:48:c8:c6:f6:37:28:f4:76:bc:db:07:
ee:c3:64:5d:01:5d:d6:b7:f1:04:e0:c7:57:d1:15:
ef:e9:55:e4:c3:59:61:17:6f:fc:ea:66:18:88:b8:
da:c0:fb:9e:b1:50:4a:63:d9:90:86:71:ad:78:7d:
2f:be:ed:fa:55:42:00:26:a8:66:c4:c6:9a:a5:99:
be:55:0f:9b:cf:38:18:9b:06:54:b4:63:5f:09:cc:
c4:f6:13:4c:13:f7:bf:cf:04:91:55:88:4d:5d:5c:
f2:e0:14:4c:20:19:67:bd:15:b5:c1:7f:ef:bc:03:
65:c8:15:96:63:b9:7d:a0:2e:2d:16:c8:f0:1b:d9:
95:9e:b3:92:7e:d8:ba:a3:92:0e:5d:d6:a2:cb:db:
83:51:3e:33:67:de:8e:3b:6e:9a:e1:a8:f4:75:34:
63:64:90:65:83:a5:41:ef:77:21:af:20:b3:2b:7a:
7f:fb:34:05:88:f5:11:6b:e9:79:82:50:ac:c1:10:
80:08:5d:65:10:34:38:74:14:58:22:51:cb:a2:52:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:04:85:79:0B:72:79:FB:DA:D5:E8:16:57:A8:DC:6A:80:7C:34
X509v3 Authority Key Identifier:
keyid:56:5F:F1:31:12:4B:DD:26:A1:CD:0A:6C:C7:F9:68:54:D8:30:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vl_xMRJL3SahzQpsx_loVNgwNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cfea08-039a-46d6-acc0-59e881281d15/1/Vl_xMRJL3SahzQpsx_loVNgwNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:8a:79:27:e7:b9:7d:05:49:db:b0:7d:71:5b:0c:6a:86:
73:be:69:6e:5f:a4:0b:76:18:59:c7:22:bf:b7:11:c4:17:bc:
11:6c:9c:2c:78:af:60:f7:21:9e:22:bd:57:ca:d5:3c:3a:d7:
dc:b1:1d:d7:d1:35:ea:ea:cb:c1:a3:a6:06:db:54:1d:cd:db:
82:9f:3d:7b:77:01:4c:38:66:8b:74:7e:e5:f3:2b:24:ac:2f:
01:f2:cf:fc:62:e2:2b:ec:c9:c1:80:47:82:47:0c:0a:63:d1:
9c:bc:00:84:24:e2:82:66:1d:23:61:de:1c:3f:90:95:21:53:
99:e0:cd:f6:c1:dc:bd:7b:ad:a6:01:7a:f8:60:d6:df:31:7a:
a6:fa:32:7c:b9:c8:3d:d8:0c:b4:0d:4c:0b:ed:7c:08:66:51:
d9:54:aa:cd:33:95:c6:a0:e4:20:b4:9d:0c:23:67:ae:9a:3b:
76:c1:9f:9c:2b:71:7c:08:57:a5:a5:37:a5:02:45:15:e5:dd:
47:f5:99:37:80:d9:33:d7:a0:6f:ba:ef:bf:0b:e6:d2:01:ae:
15:f6:11:4c:e3:de:21:3b:7d:f3:dd:67:f9:d1:97:f7:f1:23:
bd:ce:99:ff:b3:b4:64:f3:a3:37:f1:b8:d9:fb:a9:9c:d5:f5:
6c:f0:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:16 2026 by rpki-client