Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File: Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier: rBB9E0NLNkkKbM/EhAzV6e7zS68XkO/qgpPwHxlsYw4=
Subject key identifier: 14:7C:5D:A6:17:36:EF:EC:07:21:A6:D9:EF:DB:F9:37:FF:D0:A7:18
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer: /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial: 019D37522F68C70925A4CCC3139253885044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number: 08A0
Signing time: Sun 29 Mar 2026 02:00:26 +0000
Manifest this update: Sun 29 Mar 2026 02:00:26 +0000
Manifest next update: Mon 30 Mar 2026 02:00:26 +0000
Files and hashes: 1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: R+fnEkGKFTZO89ZwlDVByk0a6bC3Bsz0I3884cbYIoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2f:68:c7:09:25:a4:cc:c3:13:92:53:88:50:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Validity
Not Before: Mar 29 02:00:26 2026 GMT
Not After : Mar 30 02:00:26 2026 GMT
Subject: CN=147c5da61736efec0721a6d9efdbf937ffd0a718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:54:8d:e7:02:00:a7:e2:1e:27:3d:6e:be:
f9:85:1e:a6:20:93:f4:e1:66:b2:0c:94:88:45:b8:
73:ea:4b:30:7d:9a:37:60:f4:af:38:78:43:08:09:
5e:f5:13:03:9a:cc:47:d2:44:84:57:40:1f:40:b4:
67:e6:82:80:aa:83:d2:95:b5:46:31:b4:a5:9f:b8:
54:fb:29:1e:50:1c:0e:5a:b3:76:db:df:ee:c0:20:
dc:5a:2f:54:da:02:90:76:c2:7f:d9:6a:55:5a:31:
7d:d4:34:66:f5:b0:bd:31:7d:e5:00:70:97:d6:2d:
3f:90:0c:1d:2d:1a:64:c5:ed:95:9a:66:2e:45:fa:
cb:1e:b0:f1:65:b1:b3:5f:0e:11:78:21:42:28:b3:
09:73:22:03:43:3c:bf:b1:79:48:a6:d7:ca:ff:e0:
60:8f:7c:48:03:47:b8:ba:d0:d5:f2:ad:3c:78:c2:
87:f5:00:8e:72:ad:63:b7:76:70:16:4e:4d:c1:41:
af:fb:8d:1d:be:43:d2:f5:50:83:20:23:93:b8:90:
a1:85:14:d9:5d:0c:64:ba:b0:2b:e2:0a:b5:ec:72:
f7:d6:a2:56:26:37:92:d7:05:2c:be:1d:a6:72:a8:
86:b5:1a:dd:21:c3:c1:c5:07:e7:83:bb:31:01:a8:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:5D:A6:17:36:EF:EC:07:21:A6:D9:EF:DB:F9:37:FF:D0:A7:18
X509v3 Authority Key Identifier:
keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:15:1a:2c:24:d7:87:45:96:24:35:bd:6e:56:f4:8f:61:1c:
99:4f:28:59:94:bc:dd:f3:88:2a:fd:01:a5:78:3c:32:df:2b:
26:d3:51:ca:72:6c:5b:7d:5c:e0:81:34:0c:2c:66:f9:99:61:
46:26:24:48:f4:a5:16:29:0a:7a:fc:85:d5:10:b5:15:7d:9f:
0b:7b:43:cf:f7:c7:1d:05:83:fc:8a:7f:3c:13:5f:60:b8:b0:
00:94:28:b0:84:9d:6d:bf:2d:7d:6d:7a:41:ae:5c:90:ee:ed:
ab:59:da:ba:f5:b6:e2:90:7a:b1:b2:8a:1a:12:b8:3a:81:4f:
53:e1:18:e4:7f:c5:85:5e:21:6e:e3:df:6c:21:16:2b:47:8a:
27:84:58:d5:71:5b:fe:6a:2c:b6:9a:ed:33:2e:19:47:de:2f:
73:8e:8d:04:31:8f:36:b3:72:cf:e2:9d:08:4e:4d:ed:cd:0f:
ec:54:1b:f0:51:c0:46:43:08:75:5c:f6:6a:8d:aa:48:d8:71:
fb:f9:43:38:22:bf:a9:73:5d:7d:a1:c9:76:37:87:1e:f4:14:
67:f7:52:66:fe:ad:ba:72:7b:a2:0a:1f:fa:67:07:80:db:f6:
70:5a:15:83:86:1a:f6:ec:59:49:c9:f0:c6:4c:41:be:fc:5c:
6b:96:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:20 2026 by rpki-client