Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: t9voLDzoXaNmL91pik+yV0QeULIM4ueoudWp9FqB3DA=
Subject key identifier: 91:C7:76:2C:2F:87:28:76:3F:AC:3A:8B:4D:20:95:9D:68:47:FF:82
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 019D2AE150C1FE58EA26B911D66B502CC7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 124D
Signing time: Thu 26 Mar 2026 16:01:42 +0000
Manifest this update: Thu 26 Mar 2026 16:01:42 +0000
Manifest next update: Fri 27 Mar 2026 16:01:42 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: x18ffu8KsoOSu6aQVrDY4KwhlMeJtM+bRhsC5PbBgGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:50:c1:fe:58:ea:26:b9:11:d6:6b:50:2c:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Mar 26 16:01:42 2026 GMT
Not After : Mar 27 16:01:42 2026 GMT
Subject: CN=91c7762c2f8728763fac3a8b4d20959d6847ff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:45:cf:98:59:76:50:48:a9:8a:87:41:35:
36:33:01:5d:76:69:52:ff:3a:4b:c5:ba:f1:b8:b2:
31:85:7b:47:2d:6a:0a:da:56:7b:45:91:a6:56:78:
3e:c1:e9:c2:d3:44:20:40:f5:67:60:6a:1d:6e:0f:
07:c0:92:7c:a9:77:ee:f8:98:04:d2:d1:4d:22:6e:
58:07:ea:a6:4f:5b:a2:71:c1:b7:c6:ac:09:6c:7b:
21:22:e1:0b:f0:6e:71:07:bd:cd:eb:ad:8b:8f:b9:
6d:b3:c8:39:e1:a8:81:f4:90:0a:1c:c6:22:82:06:
55:f4:38:2b:5d:d3:6f:16:de:40:f4:94:21:12:c7:
26:5f:c0:84:47:e2:3a:ca:76:34:fb:00:fd:35:13:
9d:4b:87:1f:e8:a4:fd:05:3e:67:6f:f9:20:0b:91:
83:64:98:63:d3:cb:3d:f7:ee:03:07:8f:a7:05:db:
18:55:2e:70:a6:f0:ed:ce:89:39:8c:17:82:1a:f0:
d9:19:13:aa:fa:9e:c3:27:00:30:c0:a0:e0:33:7f:
60:3c:d4:91:de:8f:7d:02:fb:3d:07:9e:18:f7:e3:
e3:d5:bb:a6:53:0d:c7:c0:3c:a3:29:34:82:33:ff:
56:0e:3e:d8:90:66:1a:fc:cc:bd:e1:3e:3f:a1:a5:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:76:2C:2F:87:28:76:3F:AC:3A:8B:4D:20:95:9D:68:47:FF:82
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:1a:8d:a6:20:ba:d7:f4:ee:e3:bb:63:4c:45:e8:dd:b2:
dd:9d:f2:ea:ac:a5:8b:34:7c:97:56:5f:85:ce:af:92:3f:6d:
9c:6f:e9:4a:b2:4f:0c:17:51:6e:dc:e8:d5:ad:70:e6:ff:2c:
64:f1:86:e6:02:de:a7:26:13:98:27:3f:48:ee:87:2d:12:37:
2e:2a:7a:53:bb:45:ba:a1:d1:a6:e7:3a:56:03:b6:59:35:c9:
cf:f4:59:a0:d9:ed:e8:cb:55:3f:f9:8a:55:8e:5b:01:7a:20:
bf:63:43:c6:cd:2d:ac:11:73:fc:95:47:d1:82:74:9f:18:66:
a3:c5:8c:2d:7e:63:9e:96:45:0c:20:42:76:aa:93:82:a5:63:
00:e6:c4:5a:6f:29:cc:7c:93:2e:f5:6f:b0:a2:72:68:34:c1:
8e:1b:8b:c0:d8:e9:5c:fc:b3:61:ff:81:26:4d:da:21:57:68:
37:b7:89:33:5b:ba:9e:27:53:6c:c9:ea:8a:4d:5b:5d:05:5f:
da:e2:7e:eb:9c:45:52:bb:07:dc:34:1b:d1:8f:b8:e5:74:ca:
eb:80:df:b0:aa:3e:e8:2d:31:6f:4e:fc:41:76:8d:c3:9d:fd:
9e:77:a5:a4:ee:3f:8a:75:4a:e2:45:97:8e:fb:f7:67:fa:70:
e6:22:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:14 2026 by rpki-client