Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: uE1oiabsiJhNib+pilRjd7tqWvPl+3fROwiEi5mk3io=
Subject key identifier: F1:56:26:8D:2D:19:44:4D:0C:B9:A4:72:41:74:56:A2:C0:97:2E:CB
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 019D28F327B5841FE097F43C2C20D1DCA600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: pHMmhtl5+QUcue57serljdG5jhAnyn39g1Kje8fdSSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:27:b5:84:1f:e0:97:f4:3c:2c:20:d1:dc:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=f156268d2d19444d0cb9a472417456a2c0972ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:02:4b:35:1b:d0:b7:5a:0a:07:f5:fe:d0:
76:1d:8c:c8:a0:8e:68:27:3d:5d:a3:83:e6:27:17:
47:7c:59:03:9d:1b:79:70:51:f7:11:dd:59:95:47:
7e:fe:e8:63:93:3f:c1:ee:cd:ab:45:35:70:ea:ea:
01:ca:a0:ce:50:9e:2a:fb:dd:12:dd:11:8c:09:bb:
88:4b:b2:a7:01:bd:ca:09:0a:64:a4:be:9c:4b:89:
54:e2:96:23:9a:9c:7d:5e:0b:cd:81:e7:2a:c0:34:
85:a7:89:8c:09:77:80:b0:f1:76:0f:e1:39:39:97:
d4:cf:ab:08:d1:49:c9:7b:42:c8:34:a5:ce:88:f4:
fa:8e:a2:e1:52:83:b6:9f:40:51:24:94:72:7f:83:
e3:c2:cb:4a:38:fe:39:1e:ac:f7:cc:c5:3d:2e:be:
bf:ed:df:8f:57:86:e7:e0:16:c9:66:61:39:29:e7:
7f:9a:3c:13:c2:29:fd:83:9a:eb:f1:9d:20:18:4c:
a7:0d:e1:bd:e1:65:56:26:7d:90:a3:11:30:e9:8b:
60:42:8a:8e:ff:73:f0:80:42:c0:2d:49:39:25:a8:
8a:0b:6c:d7:03:c7:ce:f0:63:24:17:d8:d2:9c:ce:
96:1f:61:bf:b5:5d:f6:59:0e:6c:a5:3e:22:1b:b9:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:26:8D:2D:19:44:4D:0C:B9:A4:72:41:74:56:A2:C0:97:2E:CB
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:ec:25:f9:86:c3:96:2c:83:21:ff:61:31:ff:7a:96:9f:
0a:93:8e:88:eb:21:1d:12:ab:90:2b:29:f2:67:b6:ff:06:1e:
ca:0a:b4:df:54:4c:f3:b6:41:6e:20:53:35:32:66:6e:66:ab:
30:ce:53:ad:de:a8:9c:97:f0:55:bc:e3:27:93:6b:c8:7a:7e:
31:40:2c:c9:27:5f:89:34:7b:46:82:89:1d:cf:30:dc:08:8d:
c1:ba:b2:2b:65:c1:56:9c:30:8e:b4:a3:12:cf:aa:7a:bc:a4:
26:1e:75:43:2a:d6:2b:40:a4:3b:16:c0:80:c6:e3:78:a4:20:
f4:60:70:73:3b:5a:55:3d:4f:58:e9:13:16:6a:1c:76:12:ad:
18:43:36:78:9f:43:1f:f8:f6:00:0d:f5:e0:52:a7:f2:a0:2a:
62:1f:b8:18:9b:63:40:74:ba:da:ff:19:6c:f1:4a:28:bd:7c:
67:ff:9f:82:fd:4a:b1:39:99:18:4c:f8:38:b8:a5:2b:69:ed:
d0:67:5a:a8:ca:77:3a:a0:ab:dd:ac:22:de:c8:18:03:2b:ae:
89:c5:50:58:df:21:5b:d4:6a:2a:4a:4f:63:a1:e1:2c:07:1f:
d7:f9:2b:0d:4b:f3:ec:99:9c:fd:b9:91:0e:08:43:e8:6e:58:
2c:5d:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:42 2026 by rpki-client