Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: dlUqWwlkl5YRBQmc82NgPANNLJ5hy3kKUgoiZC03XWg=
Subject key identifier: 82:DA:91:34:3A:97:3E:A7:7C:A2:96:BB:5A:51:29:3A:78:EB:03:56
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 019D39408EBE1D2E770E5117D54979E20634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 1690
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: fcxHIwB1Plb27iA7bvPu/cw4GYFjnQuRY8dWR5sU/F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8e:be:1d:2e:77:0e:51:17:d5:49:79:e2:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=82da91343a973ea77ca296bb5a51293a78eb0356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:ee:4b:7a:91:bd:fa:b1:ae:2a:c1:67:f3:
1d:7c:69:24:25:dd:1e:be:0d:58:73:1f:01:1d:7c:
96:df:b7:c7:9c:ad:ab:ba:d3:88:98:c3:79:4c:b4:
4b:9a:47:f7:d9:60:39:0b:e2:59:f4:7d:95:f6:6f:
ff:34:e1:3e:3a:16:b8:db:4e:d4:0b:84:7a:2e:be:
a2:ed:45:dd:05:2e:62:6e:81:4d:60:6b:2a:25:c8:
2d:1c:06:25:12:db:b5:4f:e5:11:24:aa:31:0c:34:
b6:8b:06:80:26:8d:e6:a0:1f:5b:f3:51:bc:c6:77:
74:d8:46:57:f1:74:c8:98:f7:e6:00:51:31:f6:64:
83:28:40:b6:ea:9a:a5:01:b9:87:40:53:02:98:00:
63:dc:6a:e2:48:ac:ee:7e:46:39:fc:6d:b8:10:fa:
1e:7c:16:dd:68:c4:db:9e:57:ea:b9:2c:8e:d9:24:
49:b3:d6:e6:95:04:3f:46:82:37:18:90:3f:3a:98:
9d:17:ea:a3:29:99:ab:e0:62:a8:d8:6d:e4:cd:fb:
76:5c:a4:26:f0:84:9f:f3:9a:47:90:76:5c:6a:f1:
27:ed:a9:12:7b:ca:3d:51:6d:7b:ff:0a:f4:28:25:
1b:0e:d8:ff:68:3f:5c:45:bd:d5:e2:0f:2b:6f:b9:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:91:34:3A:97:3E:A7:7C:A2:96:BB:5A:51:29:3A:78:EB:03:56
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:57:3c:f8:d7:67:5c:57:91:31:aa:ff:fb:8f:80:4d:f4:77:
0f:d6:8d:ef:cf:25:10:27:61:a4:75:7f:ea:13:da:26:fe:d8:
a0:37:b5:b7:c0:2a:1d:21:03:cf:a3:48:fd:b9:15:c5:e2:2c:
be:13:02:2a:f4:90:b5:29:dc:a6:81:d5:93:ff:c9:8c:2b:7b:
6f:d7:0f:f8:c8:17:a3:fd:b0:4d:b8:d2:4b:d0:29:d2:03:5d:
23:67:16:97:37:0b:ec:6a:2c:87:73:31:72:af:72:b3:02:74:
02:92:e1:90:21:57:65:60:a7:cf:36:65:82:f9:83:d6:63:64:
69:31:05:c2:c6:7b:f4:c3:a7:48:94:c9:b1:89:c3:b0:56:34:
e8:85:ce:ca:d3:16:af:75:18:5f:a7:24:e5:72:d6:52:3b:a1:
a9:b9:ef:0e:e4:51:6b:90:67:34:b5:84:92:38:4e:1d:4d:b9:
db:c1:7e:a2:f9:57:43:6b:8e:66:ff:45:93:24:e2:63:56:29:
3c:37:19:85:ed:ce:8d:a1:20:eb:40:01:e7:48:c5:08:d8:2c:
f7:30:b7:61:77:9a:4d:49:53:99:7f:05:1d:0c:a1:a7:94:42:
f5:0d:2a:e8:0a:2c:3f:b2:fc:a4:ed:d6:f3:41:31:0d:74:89:
76:d0:9c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:22 2026 by rpki-client