Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: XeVZ4aw0X+yS2SE6QZHJVD8izrkzKLuCZIkkfnHbvsM=
Subject key identifier: BC:D4:A6:F1:3A:31:D3:DC:B5:A0:0A:B0:26:08:1D:32:A4:E7:22:F9
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 019D28F2B4616BBBF2E260085F89F382ADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 13AF
Signing time: Thu 26 Mar 2026 07:01:27 +0000
Manifest this update: Thu 26 Mar 2026 07:01:27 +0000
Manifest next update: Fri 27 Mar 2026 07:01:27 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: pMnu1JNoFvQ+HSp30F4AH1TryNdqk4avxu7BD0brz9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b4:61:6b:bb:f2:e2:60:08:5f:89:f3:82:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Mar 26 07:01:27 2026 GMT
Not After : Mar 27 07:01:27 2026 GMT
Subject: CN=bcd4a6f13a31d3dcb5a00ab026081d32a4e722f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:d6:eb:5e:30:48:f7:ef:cd:2e:e5:af:3b:
91:ed:46:7f:13:3d:85:99:40:02:63:02:02:5c:b6:
d7:38:e5:43:4d:fc:19:40:71:4a:fd:c7:fd:ba:4e:
a3:8f:85:d9:f9:ed:fb:fa:af:47:47:0e:24:35:c5:
ea:1e:70:c5:33:62:e9:04:d7:4a:a4:a2:19:ed:88:
58:40:b0:a0:97:52:72:0c:62:8a:a3:70:5c:bf:8b:
a7:13:73:83:b7:e6:b8:24:d9:12:98:e0:bd:b1:6e:
55:55:d1:12:77:fc:cf:93:be:79:8e:37:56:e5:61:
a9:b6:39:91:e7:e4:0c:ca:bf:a8:8c:36:41:7d:64:
77:7c:49:bd:f1:d3:15:f7:87:82:97:45:c7:15:cc:
cb:78:60:63:12:cf:a2:f9:e7:14:b3:c1:58:98:49:
8c:ab:1a:54:ac:94:8f:5e:34:39:15:3a:6e:8e:43:
e0:1f:5d:37:a2:a3:ca:a8:a0:55:51:f6:6e:87:71:
57:05:8f:54:ca:69:a0:d7:f8:88:33:b7:2e:b7:50:
ce:a4:b2:a2:b5:43:d4:ad:ad:be:16:11:04:b2:4b:
03:78:58:33:00:2c:50:24:b8:13:33:60:36:d8:9a:
a3:28:21:b6:54:92:71:71:31:11:29:de:08:c5:32:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:A6:F1:3A:31:D3:DC:B5:A0:0A:B0:26:08:1D:32:A4:E7:22:F9
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:64:be:ae:58:80:1b:73:28:d0:25:21:cf:26:bb:77:a1:c6:
f4:54:4a:cf:06:eb:61:c1:bc:c0:6f:5f:c8:d0:09:75:ec:69:
b5:83:ed:91:a6:fb:06:4c:56:8c:47:0d:42:43:9c:71:00:53:
a5:fc:c8:27:ff:33:85:10:db:3d:27:e0:7d:4a:ff:fb:b5:53:
08:f0:14:9d:93:29:51:59:1b:39:c2:15:b1:6f:54:a9:39:35:
f2:84:83:5a:51:6f:c6:3c:9e:63:29:be:ff:80:96:14:0a:06:
ed:23:13:e0:cb:8f:86:e9:c1:d9:92:d0:56:de:31:f0:51:f1:
c5:76:5e:63:75:ca:03:3e:3a:a9:1b:ef:b6:d7:0d:75:74:f9:
69:de:fc:70:dc:93:f0:31:54:d6:1f:2a:4a:c8:e6:e1:96:c9:
ea:72:bc:71:2e:52:0d:e6:cc:fd:fe:8a:79:e4:1c:1d:fe:b0:
c4:5f:70:70:55:b5:01:b6:56:1d:12:8a:f8:e3:5c:68:c9:6a:
ae:2e:f2:26:ff:76:bd:5a:0f:16:2e:b1:15:0d:0c:c6:a2:64:
e7:70:2e:de:94:a4:c1:f7:7f:17:78:14:fc:ed:c4:d6:5c:11:
d1:61:b3:c4:0b:ee:2c:63:ed:bb:90:3d:3f:db:d2:05:5e:74:
34:2a:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:27 2026 by rpki-client