Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: r8fkIRca95tbCODl6an9hq1S6myM2QM0JNaiijfEaEI=
Subject key identifier: 3A:11:16:C6:28:DA:B0:EC:D5:4F:BB:B6:3F:6A:08:2E:0D:EB:86:DD
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 019D27A8E990BF9B67135DCDEFBD5A6EB01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 0D6D
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: b4AFCTNKeJ0xNYdoOFidnd_6XrQ.roa (hash: +W/PCB4vB7d4sz4grk0af5C3/JM5opRiYyqa2mG79zM=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: R1M021XhYSOb4lQEoGWqB+r0QjbZnZhXTUjxd8jN0Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e9:90:bf:9b:67:13:5d:cd:ef:bd:5a:6e:b0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=3a1116c628dab0ecd54fbbb63f6a082e0deb86dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:e0:bb:e3:65:6e:4b:d1:04:c4:73:3f:63:
ba:6e:62:40:ff:00:61:62:2b:e0:97:97:26:ef:4b:
93:3e:6b:d0:2d:4d:c5:96:60:1a:6e:1a:56:36:c0:
0b:8d:d3:dc:e0:12:9a:14:14:8f:ca:80:31:80:bb:
e3:e9:92:09:e6:3f:a6:ab:66:7f:19:61:2f:46:c1:
a3:11:b8:11:77:59:76:1b:be:92:c2:de:4f:ef:6a:
61:5c:3d:48:c4:1b:ff:3a:c1:b4:11:f5:4f:26:85:
94:26:23:1a:e4:cc:cf:8a:6b:81:e0:cf:26:48:5b:
03:5c:47:62:d1:a8:f2:4e:bd:cd:77:28:2d:39:60:
7d:dd:43:78:4c:69:e0:00:aa:ef:7f:51:ad:89:cb:
b7:d1:6e:b7:79:fa:46:a8:0a:8c:b8:45:ad:10:1e:
4f:c0:36:03:c2:99:f1:e5:e7:1a:10:b2:d2:94:1d:
4e:ac:26:70:08:44:7d:ca:f5:f6:55:60:03:20:88:
94:86:ba:34:99:06:26:6e:8f:49:94:e0:26:e5:f4:
b0:2e:6a:b6:9d:55:54:74:bf:c9:bb:ef:ad:04:73:
fa:f9:10:c9:e0:90:c5:d0:34:a7:1b:60:89:b0:07:
87:02:c9:27:07:87:e3:cc:8e:a1:73:5f:3c:1a:cf:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:16:C6:28:DA:B0:EC:D5:4F:BB:B6:3F:6A:08:2E:0D:EB:86:DD
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:8f:b6:d5:f9:5d:45:b0:eb:50:89:9e:97:4a:25:b7:9b:
1f:2a:f5:92:ac:01:86:18:14:10:63:94:a6:01:cc:e9:3f:91:
c0:50:6a:30:d5:50:86:1f:d0:cd:d4:08:56:56:03:f4:2f:6c:
3b:8c:30:c5:eb:9d:95:3a:8e:15:f5:33:89:32:a7:49:2e:be:
74:01:61:fe:63:83:58:e6:19:8c:5e:20:3c:45:2c:18:1c:39:
70:bf:57:d7:07:ab:84:95:f1:37:25:44:6d:f8:cf:25:70:01:
56:4f:02:ea:ae:b6:83:fc:b9:16:be:81:37:40:2c:3d:67:ce:
c0:c5:5c:11:2a:15:35:f0:9c:3c:99:dc:fd:3a:6a:6e:d4:67:
5c:5b:d8:ce:a0:c2:61:af:cd:d4:9f:dc:69:28:4c:df:e2:58:
d6:6f:2b:bc:45:21:05:4e:5b:a4:0f:22:43:b8:27:4b:bd:8a:
5e:07:31:0e:fe:24:9d:ad:94:8a:4d:24:ba:e8:40:f7:7b:3f:
32:03:ad:a7:07:de:d9:26:7f:b4:82:bd:54:1f:19:61:5c:ae:
3d:d0:65:69:bf:99:74:30:f0:01:c8:aa:44:d6:97:54:a9:94:
e7:7f:ad:b7:84:27:29:4f:72:29:bc:ac:b9:36:fc:2c:73:1f:
e1:c4:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:49 2026 by rpki-client