Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: WtW0caJ6ABg2VrKIU49bd+B90OV8Rq83s3+Y6X50loQ=
Subject key identifier: 98:C2:66:97:C1:06:7A:C5:B9:6D:F7:A2:E6:68:97:CF:31:09:86:0A
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 019D270485A67BCDEBFEDD08A79698BD7456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 0C5B
Signing time: Wed 25 Mar 2026 22:01:40 +0000
Manifest this update: Wed 25 Mar 2026 22:01:40 +0000
Manifest next update: Thu 26 Mar 2026 22:01:40 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: VhJZbs8yCstIqmdh5qVDQZ5o5+8f84HsUKnE8pjCAq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:85:a6:7b:cd:eb:fe:dd:08:a7:96:98:bd:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Mar 25 22:01:40 2026 GMT
Not After : Mar 26 22:01:40 2026 GMT
Subject: CN=98c26697c1067ac5b96df7a2e66897cf3109860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:ed:fe:46:fb:0d:4b:d9:10:0d:b8:63:61:
ad:ac:f8:04:c9:af:24:1a:aa:ee:e4:55:62:6d:47:
28:ab:be:8c:02:7b:2a:ba:fc:b9:8a:1e:ea:22:af:
b8:13:b0:c4:31:97:ca:02:e3:48:c9:49:db:b3:8a:
da:8a:64:0e:56:f4:eb:97:f9:d1:d5:e4:69:b3:d0:
54:6d:43:0a:ac:9a:7f:7c:8b:62:51:bf:29:27:24:
3e:67:ed:ef:fe:4d:19:c9:35:d0:af:d2:b2:aa:3a:
fc:40:d1:1f:a5:4b:39:20:ae:87:5e:63:8c:17:10:
04:7b:66:0f:bb:ad:9c:43:71:d5:55:47:2f:0a:ec:
c9:25:45:73:8b:21:a9:e2:f7:d9:84:d4:08:fa:02:
2f:2b:04:75:8d:37:f8:99:e7:b4:fb:47:30:34:d7:
aa:8c:3d:56:f0:13:24:c3:a9:8b:32:4b:9d:31:32:
3a:78:50:d3:e5:e2:20:69:56:7a:fe:8c:d6:7e:32:
23:d0:bc:c1:d5:4f:1e:cf:1a:e8:dd:b9:d9:83:75:
b1:4e:fc:8a:6a:1e:71:ab:18:af:24:e3:06:6a:69:
56:db:ca:91:a3:c5:eb:27:1f:37:b4:68:61:0d:eb:
25:9a:c2:e7:18:af:6b:ba:a6:00:30:f1:6a:e3:92:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C2:66:97:C1:06:7A:C5:B9:6D:F7:A2:E6:68:97:CF:31:09:86:0A
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:48:20:45:d6:18:0c:07:f4:fb:a5:9a:3f:11:17:c0:03:be:
4d:df:c4:d1:3e:18:25:e8:06:1e:5a:5e:85:b3:2a:45:41:34:
4a:df:71:7e:9a:51:29:b6:e5:f2:ec:e4:90:ca:0f:71:80:79:
71:46:12:87:87:a5:bd:b2:a9:f4:f0:d3:70:07:e3:e5:85:b3:
49:1c:14:b7:5b:89:9f:81:ae:40:45:e9:e8:9a:9c:72:07:d0:
05:99:eb:0b:e1:31:fd:c4:34:2d:4f:31:ff:78:dd:b3:f1:dc:
14:cc:d8:15:a7:81:26:08:e6:12:2b:9b:b3:1f:c1:bc:a3:43:
ad:0c:23:ac:55:de:de:6c:42:7e:63:b9:aa:12:69:7c:4d:f6:
62:33:bc:f0:f0:13:cb:87:38:92:99:83:84:8b:7a:68:39:5e:
a9:8b:22:db:59:02:5d:57:63:42:b5:30:17:4d:a8:03:bb:9e:
fe:ea:3e:37:36:0b:a0:44:00:5b:0c:6c:c0:56:c5:1c:2c:87:
9e:87:c8:17:f1:81:07:52:ac:3f:d6:64:b0:46:9e:d0:d6:9f:
84:46:de:41:96:51:f7:c5:8c:bb:09:bd:67:64:17:d6:8b:1b:
1d:8d:48:c9:73:8b:1c:4d:b5:47:25:03:87:47:6a:cc:86:1f:
eb:af:aa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:45 2026 by rpki-client