Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: /fpRTaEJEpXoT1J8gE9euvlc0Mv+U4KFTroHmFyZrt8=
Subject key identifier: 42:D7:E8:08:1E:0A:68:87:63:33:D4:C5:C1:0E:32:51:23:32:96:AC
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 019D29CEB4DD9E7FC4B67295491A553F35BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0969
Signing time: Thu 26 Mar 2026 11:01:45 +0000
Manifest this update: Thu 26 Mar 2026 11:01:45 +0000
Manifest next update: Fri 27 Mar 2026 11:01:45 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: zlYrPgEggmBZ8RQdSwxrIDifrP4cBsQ+/sE9v65BRU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:b4:dd:9e:7f:c4:b6:72:95:49:1a:55:3f:35:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Mar 26 11:01:45 2026 GMT
Not After : Mar 27 11:01:45 2026 GMT
Subject: CN=42d7e8081e0a68876333d4c5c10e3251233296ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:00:c1:3c:27:9d:fe:7e:71:8b:1b:56:d3:
d9:b5:b4:2f:cc:01:e8:98:ef:6c:af:51:ce:14:f1:
3a:db:d1:f9:79:32:ff:c5:10:bf:f7:2b:12:5e:14:
c8:46:35:3e:66:79:4b:b5:d5:64:84:5f:ef:bd:52:
f0:5d:95:66:52:8b:a2:f2:a4:7a:81:90:d4:d2:a6:
4c:f6:f0:96:21:54:b1:e0:c4:26:e5:9e:95:c0:c9:
0c:f4:ad:bd:89:7c:16:43:0b:f4:e5:a6:42:ba:73:
45:f7:28:3a:ed:6d:a6:b8:1a:cc:e7:0d:db:b5:05:
76:cd:9c:3e:ea:67:f4:4b:f0:51:cc:7d:6a:ea:50:
68:c2:5e:63:8a:70:5c:fc:c3:2d:c8:bd:61:75:63:
48:41:0b:60:59:10:cb:5f:44:37:6c:5e:fd:b0:f3:
8f:e5:c2:39:67:71:46:8b:27:0e:44:9a:4f:a5:b8:
7c:3d:e4:a6:68:9d:1a:52:d9:a2:26:ec:c6:54:af:
4f:d5:89:7e:9f:c5:da:99:aa:74:58:e9:8a:40:0c:
4e:cf:a7:9f:9b:c8:9d:28:62:34:60:bf:a7:72:05:
a4:c2:46:6a:7a:11:71:c8:1f:68:f9:5f:61:07:f7:
7a:92:1d:c7:71:90:96:3f:fb:6a:5c:24:ee:49:89:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:E8:08:1E:0A:68:87:63:33:D4:C5:C1:0E:32:51:23:32:96:AC
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f5:7b:ff:7d:90:92:e8:21:c2:89:42:2a:e5:99:95:5f:34:
08:f4:0c:32:70:95:e1:9f:04:0f:15:53:47:97:0c:14:f3:ed:
52:9b:c5:ef:84:5b:d4:62:34:3e:f4:8f:c7:65:4b:3c:42:1a:
b0:c9:20:8f:d6:e1:2c:5d:cd:cb:78:06:a1:66:58:4e:56:ff:
4d:ce:e2:a8:d0:81:f0:ff:f3:6e:6f:27:4f:fe:2d:13:2e:f8:
78:57:8b:a8:26:92:a3:51:54:3f:f0:3c:f2:2c:e9:7c:f6:4f:
c2:0a:2a:06:b6:a4:fd:4b:0a:50:61:b0:c2:eb:05:95:82:dc:
e6:62:ba:d6:e5:c1:7f:55:30:3a:a3:a3:6b:5d:bb:8f:8f:fd:
ca:29:dc:08:31:0b:28:e2:eb:a5:db:d2:a3:c8:28:6f:72:67:
3c:a3:0a:db:d8:5c:a0:80:8a:0a:e4:d3:a0:b1:88:dc:6f:a2:
48:71:e9:e5:c5:15:7d:3f:a8:8d:8b:f5:07:a3:99:9e:fe:eb:
ea:48:16:11:39:d6:dd:7a:1f:0c:08:ab:9a:96:31:95:0b:16:
da:9e:35:4b:b5:6f:5a:6f:c9:b5:1a:4d:5f:b6:d1:23:dc:57:
f3:a8:0f:cd:50:ea:13:62:05:28:10:c2:92:17:c6:0a:ee:f6:
43:45:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:34 2026 by rpki-client