Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
File: VuqlFkAibog8wIkopOAmGoAzf-I.mft (raw, json)
Hash identifier: IX+/ROR1tV/SlrTrrNYS3wqmU4ff3E4WbP9Kc5EDIPY=
Subject key identifier: C8:88:00:68:EA:C4:DF:ED:92:89:B6:4F:54:79:B7:C1:C5:F1:28:27
Authority key identifier: 56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2
Certificate issuer: /CN=56eaa51640226e883cc08928a4e0261a80337fe2
Certificate serial: 019D2771C7FEBA4135F353F210545115A918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
Manifest number: 0187
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: VuqlFkAibog8wIkopOAmGoAzf-I.crl (hash: 4eMsyeZiHK+m+eHjv4cQKDw824R9+ywYJkpce6xxhOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c7:fe:ba:41:35:f3:53:f2:10:54:51:15:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eaa51640226e883cc08928a4e0261a80337fe2
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=c8880068eac4dfed9289b64f5479b7c1c5f12827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:1c:8f:e0:a4:1c:3d:86:73:ce:2a:24:d8:
41:98:87:b1:e1:7f:f4:e9:6c:85:1f:81:4d:05:83:
d3:1b:e4:f7:ee:6a:37:cb:d4:72:1c:9a:78:fe:ab:
d1:61:fb:be:7f:61:ae:ca:88:f8:be:52:69:df:41:
0f:78:a3:90:9b:bd:a6:d2:46:f1:7a:39:f6:01:a9:
00:c8:ed:55:44:ea:02:cd:3c:12:f8:b4:93:8f:77:
ac:d9:2a:f4:9e:51:c7:6a:46:a2:3a:cd:8a:40:6f:
cf:62:ee:31:85:40:ae:d2:ec:ba:ef:93:e5:14:f4:
cc:c8:ee:a2:65:41:5a:09:55:52:c3:3a:6f:22:84:
44:39:28:19:32:cb:f3:5d:17:5b:b1:7f:e6:58:96:
76:20:8b:1d:75:3f:66:30:c1:3c:16:2c:bb:67:50:
65:1a:da:40:64:8d:6d:84:b6:52:db:f1:cb:76:a2:
bc:97:5d:ea:e2:d0:9e:fb:52:71:6a:8f:5c:23:47:
bd:c0:55:49:b6:4f:e2:4c:91:7e:0a:61:82:e0:8e:
4e:8d:a4:c9:f9:41:65:ed:85:da:eb:35:59:f9:c9:
19:b1:5c:fc:ba:79:3d:d0:6f:ea:0e:f5:ec:52:6a:
64:7d:f1:14:45:42:e7:e6:25:d1:77:85:19:5e:53:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:88:00:68:EA:C4:DF:ED:92:89:B6:4F:54:79:B7:C1:C5:F1:28:27
X509v3 Authority Key Identifier:
keyid:56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ad:52:69:22:2a:2e:b2:8c:e6:c6:22:7f:5d:43:51:bc:c7:
5f:30:2e:fa:75:35:14:57:78:6e:06:d5:4e:45:c7:fe:a0:f2:
68:1b:1b:2d:83:35:7d:c7:7a:6a:ec:a0:80:df:7f:e1:2d:80:
d8:be:57:c2:81:38:cb:c3:3a:02:e6:f9:2f:60:cc:0d:be:37:
3d:c9:e5:3e:65:b6:16:71:65:7b:97:cf:d5:52:93:8b:27:fe:
9a:b6:6d:7a:8a:0c:e9:54:6e:09:4c:cc:dd:f6:f5:24:53:2f:
3c:44:e5:63:05:7c:dd:7c:74:a9:49:8e:8c:41:e0:72:97:97:
28:5e:25:96:ae:26:be:07:1b:20:e3:6d:51:2d:8d:a8:09:8c:
14:5e:b2:e0:24:db:8e:99:84:11:70:84:b4:3d:8e:29:09:2c:
f7:57:38:ef:3d:63:b4:5b:74:fb:24:a3:72:9b:1e:50:4b:86:
23:61:66:bf:cd:d3:f8:33:fd:c9:e4:04:72:e2:42:ca:94:22:
b5:e6:c9:89:5b:d2:07:c7:78:43:30:26:23:99:3e:4b:4e:e4:
3f:aa:d7:08:91:f5:50:9a:99:99:ff:a7:26:17:0d:b1:81:ad:
f6:6a:a3:51:b6:1e:4a:80:59:ee:eb:03:41:3f:a4:bc:79:a2:
41:4a:ed:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nccf+ukE181PyEFRRFakYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZWFhNTE2NDAyMjZlODgzY2MwODkyOGE0ZTAyNjFhODAz
MzdmZTIwHhcNMjYwMzI2MDAwMTAxWhcNMjYwMzI3MDAwMTAxWjAzMTEwLwYDVQQD
EyhjODg4MDA2OGVhYzRkZmVkOTI4OWI2NGY1NDc5YjdjMWM1ZjEyODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuYcj+CkHD2Gc84qJNhBmIex4X/0
6WyFH4FNBYPTG+T37mo3y9RyHJp4/qvRYfu+f2Guyoj4vlJp30EPeKOQm72m0kbx
ejn2AakAyO1VROoCzTwS+LSTj3es2Sr0nlHHakaiOs2KQG/PYu4xhUCu0uy675Pl
FPTMyO6iZUFaCVVSwzpvIoREOSgZMsvzXRdbsX/mWJZ2IIsddT9mMME8Fiy7Z1Bl
GtpAZI1thLZS2/HLdqK8l13q4tCe+1Jxao9cI0e9wFVJtk/iTJF+CmGC4I5OjaTJ
+UFl7YXa6zVZ+ckZsVz8unk90G/qDvXsUmpkffEURULn5iXRd4UZXlP3+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiIAGjqxN/tkom2T1R5t8HF8SgnMB8GA1UdIwQY
MBaAFFbqpRZAIm6IPMCJKKTgJhqAM3/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVxbEZrQWlib2c4d0lrb3BPQW1Hb0F6Zi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83MDg4NmEtOGQ3Ni00OTU2LWFkOWMt
ZTlhZDNjMzY5ZWM1LzEvVnVxbEZrQWlib2c4d0lrb3BPQW1Hb0F6Zi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83MDg4NmEtOGQ3Ni00OTU2LWFkOWMtZTlhZDNjMzY5ZWM1
LzEvVnVxbEZrQWlib2c4d0lrb3BPQW1Hb0F6Zi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK1SaSIq
LrKM5sYif11DUbzHXzAu+nU1FFd4bgbVTkXH/qDyaBsbLYM1fcd6auyggN9/4S2A
2L5XwoE4y8M6Aub5L2DMDb43PcnlPmW2FnFle5fP1VKTiyf+mrZteooM6VRuCUzM
3fb1JFMvPETlYwV83Xx0qUmOjEHgcpeXKF4llq4mvgcbIONtUS2NqAmMFF6y4CTb
jpmEEXCEtD2OKQks91c47z1jtFt0+ySjcpseUEuGI2Fmv83T+DP9yeQEcuJCypQi
tebJiVvSB8d4QzAmI5k+S07kP6rXCJH1UJqZmf+nJhcNsYGt9mqjUbYeSoBZ7usD
QT+kvHmiQUrtOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:39 2026 by rpki-client