Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft
File: VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft (raw, json)
Hash identifier: D2E4onFtw/wpxP7Kv6rMAWxfbFITDPAWJ57AHxIOICo=
Subject key identifier: BA:CB:BA:53:C3:31:13:AE:4F:AC:0A:E2:1E:E8:6F:3F:55:72:66:EC
Authority key identifier: 54:81:F9:15:2F:86:08:33:A0:33:F3:CC:D1:4B:BA:16:3C:E0:33:D0
Certificate issuer: /CN=5481f9152f860833a033f3ccd14bba163ce033d0
Certificate serial: 019D322C63B29F66CFEAB85A284133F5B9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft
Manifest number: 0F
Signing time: Sat 28 Mar 2026 02:01:02 +0000
Manifest this update: Sat 28 Mar 2026 02:01:02 +0000
Manifest next update: Sun 29 Mar 2026 02:01:02 +0000
Files and hashes: 1: VIH5FS-GCDOgM_PM0Uu6FjzgM9A.crl (hash: MOuMMMLA45NGpaRaQyf/5bRZVV8zXabLSKiyaLsbUBo=)
2: b0eULW524rwjof0wjVz0Ni8tmeY.roa (hash: SgY9hmoB2mUvS85rDXaHAm9BmHh1T9kvU5od3UCFLzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:63:b2:9f:66:cf:ea:b8:5a:28:41:33:f5:b9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5481f9152f860833a033f3ccd14bba163ce033d0
Validity
Not Before: Mar 28 02:01:02 2026 GMT
Not After : Mar 29 02:01:02 2026 GMT
Subject: CN=bacbba53c33113ae4fac0ae21ee86f3f557266ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:a8:5a:36:56:91:52:b0:1a:bb:e8:97:c6:
00:b0:8c:75:29:82:f5:85:81:9d:aa:51:95:22:76:
e3:2b:07:29:93:6f:13:49:38:d7:42:aa:60:7f:21:
54:ad:b2:70:10:c3:d3:09:a0:a3:81:f7:7d:d7:d6:
31:fe:d3:cf:4e:b2:ab:c7:49:58:ca:ba:63:42:5d:
68:1a:a2:1e:8a:61:4c:d3:32:38:3d:46:f3:e1:f3:
d9:22:51:c0:32:52:2d:37:d6:aa:4a:3f:8d:5e:df:
f1:12:53:8c:61:43:ff:a5:09:cf:9e:48:b1:a4:9f:
90:ca:0e:0f:cd:04:b8:06:6a:13:26:32:c8:24:b7:
94:0e:da:9f:ba:27:af:cb:df:91:b3:3e:d8:03:e2:
a8:b8:bb:2e:d5:3f:f2:a6:55:95:cc:5e:63:f3:13:
82:c5:87:c4:c1:07:8e:da:59:76:7b:ff:b7:4f:1f:
20:bc:92:84:5e:6a:7b:d1:4f:7e:45:53:27:3e:02:
48:43:96:13:91:82:3f:b0:1b:cc:bf:02:93:fb:a4:
15:5f:b9:c0:fe:b4:6e:cb:84:b3:49:ad:c9:db:f3:
30:94:32:db:51:68:95:d8:0c:80:79:39:4a:a6:88:
62:7e:d6:d2:dc:f8:49:41:7d:ec:f7:1d:5d:fc:d5:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:BA:53:C3:31:13:AE:4F:AC:0A:E2:1E:E8:6F:3F:55:72:66:EC
X509v3 Authority Key Identifier:
keyid:54:81:F9:15:2F:86:08:33:A0:33:F3:CC:D1:4B:BA:16:3C:E0:33:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d6:dc:a3:e5:cf:7b:2c:c6:84:b9:30:bf:48:a6:36:c3:d9:
c6:88:2d:66:94:65:f0:0b:79:7f:42:fc:6f:ae:d3:08:5d:e7:
86:97:09:51:04:bf:ac:0f:9f:31:1b:77:2a:21:61:0f:96:e7:
30:f4:94:5a:a0:41:54:90:bf:8f:08:61:88:e8:ff:cf:7b:31:
b2:28:c4:35:52:f6:12:d1:3e:85:6f:0c:44:88:0c:0e:ab:b6:
5b:2b:4d:db:9a:ad:20:76:b9:cd:5d:5d:66:91:67:71:da:e6:
a8:08:91:16:1d:96:2b:a3:b1:a9:2e:54:dd:8a:97:0f:37:31:
2d:11:ff:94:85:66:bf:35:cb:f1:25:99:4f:98:1d:bf:55:74:
15:61:b1:35:87:b4:e5:71:1e:5f:c6:46:8c:ba:97:ba:40:6d:
d4:b6:d4:49:c2:68:15:7f:a1:4b:09:c2:f6:c9:bf:a1:4f:d9:
75:f4:5d:a4:43:85:2f:82:2d:80:ef:b0:5a:11:bf:88:86:16:
e8:4f:c2:20:d2:6f:23:1e:9e:5b:a3:ee:41:3a:5f:67:40:23:
27:6a:95:20:d5:2f:f1:9a:b6:7f:99:62:f6:95:59:df:0a:45:
75:43:30:4e:55:51:12:95:ce:be:2f:a7:82:55:14:35:a6:65:
2a:25:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:47 2026 by rpki-client