Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
File: VkQtN4qHkyt22vks6Pye80Hrx1k.mft (raw, json)
Hash identifier: p/KMxJIi79PpTxFou+E4QqPR6Eo3kMMdYOXOg+Fec00=
Subject key identifier: 82:AA:B7:E5:9C:00:BF:A4:A4:EB:BB:B0:17:70:FC:80:2C:8A:37:81
Authority key identifier: 56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
Certificate issuer: /CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Certificate serial: 019D333F0E8FF311E8A3C75844398D1268E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
Manifest number: 0E4E
Signing time: Sat 28 Mar 2026 07:01:03 +0000
Manifest this update: Sat 28 Mar 2026 07:01:03 +0000
Manifest next update: Sun 29 Mar 2026 07:01:03 +0000
Files and hashes: 1: VkQtN4qHkyt22vks6Pye80Hrx1k.crl (hash: 6I2Ff2qjrqc0sQRJcisWrF5Uq6ePR98IOgXA9qf4RXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:0e:8f:f3:11:e8:a3:c7:58:44:39:8d:12:68:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56442d378a87932b76daf92ce8fc9ef341ebc759
Validity
Not Before: Mar 28 07:01:03 2026 GMT
Not After : Mar 29 07:01:03 2026 GMT
Subject: CN=82aab7e59c00bfa4a4ebbbb01770fc802c8a3781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:b4:51:fe:57:16:30:de:72:cb:d4:da:b0:
48:64:e6:dd:d2:8c:80:23:9e:27:a2:4a:36:cb:1e:
6e:9a:19:0b:7e:db:af:19:d2:9c:77:3d:00:44:6f:
8e:56:7c:de:a0:92:a4:0c:93:97:3f:fe:77:2e:a6:
1a:03:6a:12:f0:17:d4:85:a2:0e:8d:2c:ac:17:29:
5f:15:7a:dd:0f:6c:48:45:07:d1:fc:a7:6a:5b:6e:
dd:ac:75:29:ae:7f:dd:27:19:5b:6b:d2:90:06:53:
20:d5:fb:09:47:6a:0c:27:64:ef:0e:14:4d:ed:f5:
44:fa:c5:0d:43:74:f4:0e:02:d0:80:98:c9:e7:cb:
ff:94:d4:c5:b4:c1:b1:c4:e7:2a:40:27:fc:61:2a:
01:a7:36:c2:30:99:ef:c5:a5:2a:69:f0:45:c4:1e:
7a:ce:6a:72:da:33:07:a3:15:72:f0:51:af:1c:fc:
e5:87:db:55:32:98:d7:2a:d6:cd:30:ff:00:28:64:
f2:fe:11:86:b5:dc:0d:1f:c0:81:0f:56:68:c9:e6:
0f:92:e9:4a:b2:f6:cd:4c:eb:5a:f3:2c:33:f8:20:
62:9c:b2:22:c6:19:6d:5d:3e:0d:b2:7f:5d:4b:de:
d2:8f:de:3b:93:a3:da:3d:be:7f:dd:65:2d:34:71:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AA:B7:E5:9C:00:BF:A4:A4:EB:BB:B0:17:70:FC:80:2C:8A:37:81
X509v3 Authority Key Identifier:
keyid:56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:b3:fe:6b:37:88:85:54:27:76:4f:02:b7:73:09:f0:16:
a1:f5:63:fb:bd:1f:50:c0:f4:8a:ab:8d:d1:24:a6:d5:d2:ba:
fb:13:2b:fe:ad:84:51:b1:c6:a8:7d:d2:7b:fb:21:7e:81:e8:
11:73:1e:13:83:1b:68:e8:d0:45:e8:eb:64:24:e9:f2:16:0a:
e7:1e:72:14:28:43:6e:af:d7:47:78:1c:59:63:e5:ea:48:46:
7c:6c:1e:4e:4a:68:52:dc:5d:e1:9a:64:b1:94:13:11:ec:7c:
bd:68:b5:e4:e3:99:f2:47:78:08:ed:ec:c2:6b:f2:ce:1f:8a:
db:3b:2d:8c:77:6c:5c:77:79:8a:1e:df:72:cb:e9:03:fb:d5:
6b:9c:44:68:27:19:c9:f3:67:d6:ef:5b:45:b7:05:7a:f9:f5:
b6:24:7f:26:dd:bd:c5:27:6f:c2:1c:09:9d:d3:88:52:60:e3:
bc:9a:f4:12:29:ca:ed:9b:5c:33:85:0a:ef:62:d6:e5:72:a5:
37:99:9a:91:4d:b1:5a:75:30:7c:da:87:2e:2f:ad:71:d4:35:
ee:0d:95:86:cd:5c:2a:16:57:c7:32:a7:d9:1f:fa:db:66:9b:
d2:64:c4:20:de:3c:19:1e:15:9c:d9:74:c7:30:21:c2:09:da:
d7:de:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:05 2026 by rpki-client