Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: A/tSpb9laFvZKDedKYZPyCNV/syqxRUFYHaPbPyx+nA=
Subject key identifier: AB:51:F6:0A:CA:7F:40:FD:F9:64:3B:9E:DF:F0:1F:C2:B0:9B:6D:49
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 019D28F2A286AD02DE0F1B6AB9FE3F855BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 0B76
Signing time: Thu 26 Mar 2026 07:01:22 +0000
Manifest this update: Thu 26 Mar 2026 07:01:22 +0000
Manifest next update: Fri 27 Mar 2026 07:01:22 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: rI2FWWDL8Vx6mHWCJxyw2AFDZM1ulZF5DVm7n0gH+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a2:86:ad:02:de:0f:1b:6a:b9:fe:3f:85:5b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Mar 26 07:01:22 2026 GMT
Not After : Mar 27 07:01:22 2026 GMT
Subject: CN=ab51f60aca7f40fdf9643b9edff01fc2b09b6d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:eb:7d:20:9f:d0:98:4a:b6:3c:61:d1:81:
ab:58:62:97:86:ce:cb:45:4b:d3:eb:3c:79:54:08:
b7:b9:10:bd:8f:51:0f:4a:f0:1f:6c:77:39:12:45:
2d:35:ca:76:f3:f1:6f:9d:02:98:44:8c:89:7d:d4:
d4:66:83:a0:de:76:34:8f:94:68:31:d4:c9:ab:8f:
ac:7a:0e:85:0f:df:a4:c2:e6:2c:3a:e3:9a:50:85:
db:8e:8a:5c:de:08:18:16:8e:1a:79:0a:c3:3f:51:
ab:f5:21:11:39:11:57:71:59:b5:28:d2:7f:92:eb:
d5:92:7a:57:7e:0b:75:4f:a0:12:2d:f9:c2:54:2c:
e9:61:ae:58:40:6b:c4:3a:67:66:71:03:56:4d:28:
5e:fa:d7:2d:26:f3:03:b1:af:58:70:de:69:ce:89:
f7:73:f9:55:da:5f:e3:fa:1e:e0:2f:e3:4f:8a:01:
42:2b:bf:1e:a0:17:6a:68:2e:c3:57:92:e1:4b:a1:
6e:27:04:d7:22:20:22:a1:d6:73:b3:62:e7:81:3e:
11:e7:81:cf:67:4a:2f:4a:a5:7d:e9:57:6a:3d:b8:
c5:90:b6:48:cb:ef:82:39:19:06:f5:02:73:bc:27:
29:50:b5:5d:62:09:8e:a7:ee:4f:e6:9b:fe:81:79:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:F6:0A:CA:7F:40:FD:F9:64:3B:9E:DF:F0:1F:C2:B0:9B:6D:49
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cf:20:94:7c:1d:27:0c:a3:d8:2e:59:f1:69:38:8e:cd:72:
85:e1:5f:fb:f5:03:0e:0e:31:e0:63:c2:80:77:b6:cc:db:42:
96:80:8c:ba:dc:4a:dd:ef:34:8d:01:10:4d:05:61:75:4f:d4:
81:04:20:8e:7a:dc:77:10:4d:46:6b:f0:c7:d9:12:4d:1e:88:
f7:ed:a5:ae:71:34:62:61:65:84:80:a5:b1:bd:07:1e:4d:55:
b0:96:47:b2:7b:5e:39:bc:8b:d3:f4:9f:6d:f5:c8:18:b3:62:
09:e3:f9:c6:d8:14:89:19:d9:75:05:87:d3:f7:03:2a:d1:e2:
85:9d:95:c8:9a:d9:d5:11:ea:c8:48:14:da:84:39:f6:2b:55:
34:ee:31:a6:de:18:f0:59:a2:81:d3:5f:e7:10:85:41:21:88:
db:c6:35:52:1d:3d:59:26:51:e1:6a:4c:8c:88:1a:e1:e3:9b:
b2:d1:5f:69:37:13:eb:d1:83:c4:a6:db:d6:2a:97:41:c3:e6:
18:c9:4a:59:83:1f:4a:bf:9f:4e:30:25:eb:d9:5b:67:f9:bb:
11:67:58:38:ca:2e:65:3c:06:47:6d:99:3e:72:dc:ca:38:12:
99:34:e6:66:eb:07:fe:30:6f:bb:10:20:ce:b8:e5:f6:0b:1f:
ce:87:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:40 2026 by rpki-client