Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft
File: vwsqDaqOVGfNM-lIJaeGMyLThT4.mft (raw, json)
Hash identifier: e1c7tadUdiK8FJskx1+eFhNGsXjMeXrKQBzBo3O4s0E=
Subject key identifier: E2:CF:98:5F:6B:97:34:18:FA:9B:17:1E:75:E3:83:59:CF:12:9E:D8
Authority key identifier: BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E
Certificate issuer: /CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e
Certificate serial: 019D28BBF3CCBE98F5498AC7817095F2259E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft
Manifest number: 0154
Signing time: Thu 26 Mar 2026 06:01:39 +0000
Manifest this update: Thu 26 Mar 2026 06:01:39 +0000
Manifest next update: Fri 27 Mar 2026 06:01:39 +0000
Files and hashes: 1: vwsqDaqOVGfNM-lIJaeGMyLThT4.crl (hash: fClB55/JrvCPls7hOwsX30ywDUpZKin7R7fAd/c4ur0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f3:cc:be:98:f5:49:8a:c7:81:70:95:f2:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e
Validity
Not Before: Mar 26 06:01:39 2026 GMT
Not After : Mar 27 06:01:39 2026 GMT
Subject: CN=e2cf985f6b973418fa9b171e75e38359cf129ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:6f:ce:ba:13:bf:88:85:56:1f:f0:6f:26:
a8:23:5a:ca:79:14:5a:bc:83:62:c0:55:b8:7a:85:
4f:4f:37:a6:99:cb:53:89:da:07:fc:ef:42:c0:ce:
27:2d:01:2e:d1:f2:d5:f9:cb:28:12:3e:64:14:88:
2a:1d:5d:9d:99:61:44:c6:dc:fd:54:43:dd:c9:48:
ba:5f:bf:07:c0:10:73:d7:a8:7b:d3:90:85:0c:62:
d0:8f:f0:90:23:fd:98:7d:7b:f0:d2:9f:8c:41:ce:
f6:c0:c6:7e:71:6f:ab:7e:0b:0b:d0:fc:b6:cf:87:
55:ce:9e:4c:90:74:37:18:3a:c3:95:45:1c:9c:1d:
9c:e7:a4:a1:c1:f4:b4:f0:45:3c:d7:b6:12:82:96:
b1:9f:b9:c8:f4:dd:f2:8b:ca:37:fc:2a:73:b0:c2:
97:3e:7f:bd:cd:c2:a4:cc:ba:de:11:fe:5d:0b:42:
c0:48:8a:9e:df:a6:09:b6:6f:fc:ff:e4:cb:a0:45:
a1:c2:dd:17:7a:d3:33:c6:dc:60:37:2f:2f:9d:78:
e6:f6:7f:39:f8:de:e8:d4:91:d2:78:1e:7d:86:d0:
9c:24:07:39:0d:9c:1e:85:7f:31:d0:5a:90:ce:62:
49:9e:39:77:40:c9:32:77:52:b1:d8:5b:23:cc:f3:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CF:98:5F:6B:97:34:18:FA:9B:17:1E:75:E3:83:59:CF:12:9E:D8
X509v3 Authority Key Identifier:
keyid:BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8c:80:87:81:20:1b:0a:29:62:1d:a8:8b:44:15:7f:e1:67:
dc:65:35:d1:ce:23:7a:4f:89:ba:08:9a:f0:3e:36:67:2d:39:
79:a0:40:a9:89:49:49:a5:c5:5c:bb:96:4f:13:44:b1:20:81:
a7:69:ca:be:00:02:4e:6e:a3:10:73:c1:26:6c:1f:07:46:3d:
f9:12:59:f1:67:5c:bf:ec:be:23:d1:32:2e:1a:c6:5b:9c:60:
86:a7:02:fe:16:99:bf:59:e1:21:9e:65:b8:52:7c:ed:fc:df:
de:16:33:35:c0:dc:15:f7:c4:a9:6e:ae:b5:1b:9a:c3:07:e9:
6b:3c:79:d6:2b:1e:50:74:93:ee:7b:67:8e:70:9b:59:ab:2e:
f4:22:78:b9:c2:7b:9e:f7:38:b0:2b:53:da:77:0e:cc:e4:aa:
fc:9f:d7:c2:8a:29:78:25:b7:00:90:a1:5b:fc:cd:9e:1f:90:
22:f2:fd:a4:42:fe:1b:69:cf:3a:3c:c0:87:8d:a0:14:3c:5a:
d4:1e:e8:66:7a:8c:a0:fc:23:4e:90:82:8f:d9:91:f1:7d:63:
31:eb:91:56:dd:c6:d6:5a:d4:01:6d:30:27:74:a6:cd:a5:48:
ac:7b:03:04:67:93:9f:1e:24:56:c1:b8:ee:37:f6:5c:56:45:
2e:b1:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:00 2026 by rpki-client