Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
File: VTmIsu6cEEIX3eFjmCF497TpdGc.mft (raw, json)
Hash identifier: 1tEtjgBfSWXiH6v+w+5946ZlPtNDTEOCQyTCixd1PCM=
Subject key identifier: 75:92:54:92:BF:41:8D:EB:85:74:56:E8:E6:75:09:AF:88:4F:7F:FC
Authority key identifier: 55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67
Certificate issuer: /CN=553988b2ee9c104217dde163982178f7b4e97467
Certificate serial: 019D27A8CE8EF6F870AD83070F6711C007C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
Manifest number: 01D3
Signing time: Thu 26 Mar 2026 01:01:07 +0000
Manifest this update: Thu 26 Mar 2026 01:01:07 +0000
Manifest next update: Fri 27 Mar 2026 01:01:07 +0000
Files and hashes: 1: VTmIsu6cEEIX3eFjmCF497TpdGc.crl (hash: c++nawj1NbelR6GhCzxV4HjhMMvWI7T+9Qx0+ZOaLIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ce:8e:f6:f8:70:ad:83:07:0f:67:11:c0:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553988b2ee9c104217dde163982178f7b4e97467
Validity
Not Before: Mar 26 01:01:07 2026 GMT
Not After : Mar 27 01:01:07 2026 GMT
Subject: CN=75925492bf418deb857456e8e67509af884f7ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:cc:91:a2:e1:47:de:d3:af:8f:90:be:c7:
53:fa:34:52:e2:b7:7b:3f:2d:f3:5d:00:f9:06:20:
94:5c:99:8a:26:e6:19:3d:8f:36:f4:5e:01:41:bf:
7f:74:92:5d:0b:e1:9b:60:0f:7b:63:65:b2:d5:65:
4d:01:8c:7a:a0:10:65:46:77:f9:14:41:12:a1:53:
cc:6c:1b:6b:c7:1d:0f:3c:3c:26:5f:cf:7b:f3:9e:
e2:8a:09:0e:5b:4d:11:e1:84:9c:25:4a:2e:83:1a:
3f:d2:c6:e3:88:40:71:2f:5a:9d:aa:10:93:b5:c8:
32:c1:35:56:4b:0b:72:e7:bb:7e:76:6c:08:3e:22:
84:85:21:5d:81:99:b1:52:2e:b4:35:1b:fa:e7:5f:
d0:08:20:12:71:18:a3:76:9c:c3:b6:58:95:ba:a0:
67:eb:62:76:fd:de:9e:71:3c:a0:0c:86:3d:7d:a8:
93:97:6d:18:42:9f:fe:bc:c3:fc:e6:8d:7b:4c:f6:
bc:e9:31:78:f0:11:1f:60:b0:26:83:7b:de:66:d5:
13:37:ca:e3:08:e5:c4:94:e7:05:4a:d1:09:1d:fb:
f6:a4:6a:71:9e:4d:ae:8c:92:62:28:9a:a1:f9:19:
d3:57:08:b9:b0:b7:3a:fb:3a:e9:ba:70:e4:64:65:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:92:54:92:BF:41:8D:EB:85:74:56:E8:E6:75:09:AF:88:4F:7F:FC
X509v3 Authority Key Identifier:
keyid:55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:23:e6:e2:a5:99:b1:d7:13:35:15:09:61:3e:79:12:a5:d1:
ba:67:3e:93:e7:67:3f:2f:a0:a1:e2:ee:07:ca:af:ad:ed:7c:
b7:76:9d:e4:6a:1f:6b:a0:b6:a2:9d:d0:7f:47:a9:38:7a:e9:
0b:f2:55:93:36:af:ed:e5:0c:a7:00:18:e4:39:8e:44:19:3a:
82:81:25:17:b8:b2:0e:af:86:3a:bf:18:6c:a6:d9:59:a5:d9:
4c:4c:24:b5:48:14:19:02:60:42:f4:22:79:41:fa:f8:00:5e:
7d:36:4f:2f:61:ef:44:b2:f6:e7:37:27:76:37:ec:2b:6e:b2:
65:13:d0:e4:34:ec:7d:69:16:8a:8f:4a:15:8d:0b:d0:a6:97:
6a:9a:65:87:d7:8c:52:c5:5f:5b:95:57:c9:ff:d8:08:74:a8:
83:69:3a:89:1c:d2:7d:53:cf:88:84:ce:a1:4c:98:4f:03:9d:
c0:31:12:8b:c5:4c:6e:b6:00:2a:c6:ba:86:19:28:ad:83:35:
ee:96:cc:73:b9:e9:b1:da:46:76:bb:09:24:08:01:1f:d3:8b:
6f:5d:2b:f4:e5:71:ff:d9:2e:c4:d5:80:4b:11:b9:0f:5e:8d:
2b:55:75:b4:0d:a3:af:1d:22:aa:33:7d:9d:98:7e:bd:30:4a:
21:94:40:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:52 2026 by rpki-client