Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: XstbVsiZy/awDsV6Ek5Iv5/3bguY5dyUIPRd62glvWg=
Subject key identifier: 1B:8E:DE:A4:7D:FC:CF:B0:A5:6D:ED:58:9C:17:C9:FA:C5:0D:A7:3C
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 019D3865D6AC6DBF0899528B8B5684537D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: XfUIBcj1wHIrM13FJef52TSNAZfnZdZehGoJuZ2t7p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d6:ac:6d:bf:08:99:52:8b:8b:56:84:53:7d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=1b8edea47dfccfb0a56ded589c17c9fac50da73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:d3:b4:86:16:75:63:e0:6b:bc:5b:81:13:
e4:a8:de:bf:b1:46:44:2d:17:06:58:60:23:ab:79:
cc:e1:77:07:26:5f:4b:02:00:f6:2b:2b:7e:0c:4c:
a6:28:38:8a:61:f4:e7:76:8a:5f:1e:b9:13:48:63:
2f:be:7f:d4:9f:c9:c6:24:85:01:15:e7:c6:22:28:
9e:64:6e:57:01:1a:c1:34:40:c4:44:81:85:7e:3d:
39:45:21:0b:91:fd:4e:e7:1a:64:e9:ea:e5:d6:3f:
9e:e0:2b:a1:95:bb:06:86:26:bd:a4:b2:5e:0f:0d:
e9:8c:a8:d0:8a:61:8b:b3:9e:c6:08:85:66:1f:57:
80:0a:de:7e:47:24:21:64:34:6b:7e:62:3b:59:47:
b6:92:e7:fe:75:bb:e8:aa:fe:6d:ae:6d:20:96:76:
34:60:60:01:13:8f:52:16:76:ea:c4:f5:1e:33:76:
c5:78:41:ab:59:17:76:d2:13:69:ad:67:c9:41:c9:
1d:84:42:3e:f1:65:c8:e1:e8:c4:29:ee:1f:36:5f:
8f:6d:3f:54:e1:59:88:b4:b4:06:65:56:88:96:3a:
cd:ac:3f:e9:b2:65:ab:96:f7:4e:01:2b:da:11:bb:
e9:60:15:49:ad:68:85:1a:32:74:f2:9c:e9:79:51:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8E:DE:A4:7D:FC:CF:B0:A5:6D:ED:58:9C:17:C9:FA:C5:0D:A7:3C
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e4:ab:fc:5a:6b:d9:c9:90:d6:98:1e:8f:ca:88:d5:21:de:
55:c3:7f:16:90:ac:80:65:80:67:2a:09:11:59:b4:37:0a:60:
77:3b:3e:b3:4f:e3:32:d7:90:fc:0d:1b:ad:b2:15:0c:13:b1:
fc:b4:a7:2e:8e:62:bf:14:8c:65:59:ea:f7:3f:a8:a8:f0:6c:
9a:96:dc:9d:f8:5f:97:70:03:bf:aa:47:b9:e0:9b:8a:c4:d8:
c4:1e:96:a5:98:64:e3:04:de:ec:d3:d4:47:e6:49:1d:33:12:
20:9b:0a:ef:ee:02:48:77:6d:f1:39:0d:5d:d8:11:b4:ed:7f:
13:78:25:9f:ac:5c:f3:e2:11:83:8e:f8:78:a5:be:6b:48:13:
5a:31:04:35:29:10:e7:79:e4:04:e2:08:ed:04:29:0f:dd:67:
b9:07:7c:57:89:b8:3c:9d:7d:b7:ed:e9:29:61:6f:51:e8:4c:
96:b8:5f:3c:68:18:06:c4:8c:a2:c0:2e:48:a9:7d:c2:4a:44:
ac:63:8c:55:43:7c:7e:46:74:a1:9f:93:e6:78:a9:d6:16:70:
82:7f:e2:00:63:c1:de:7a:8d:40:66:55:40:79:e4:f5:3b:3f:
bb:64:05:7e:9c:3b:88:e1:b8:2d:c8:74:96:81:99:d2:6a:12:
21:86:4c:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zdasbb8ImVKLi1aEU30KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTI2ZjNhMzU1MzlhMGNkMDVkZWUwNWNmNzMzMDA2MDk3
NzFkYTAwHhcNMjYwMzI5MDcwMTMxWhcNMjYwMzMwMDcwMTMxWjAzMTEwLwYDVQQD
EygxYjhlZGVhNDdkZmNjZmIwYTU2ZGVkNTg5YzE3YzlmYWM1MGRhNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FDTtIYWdWPga7xbgRPkqN6/sUZE
LRcGWGAjq3nM4XcHJl9LAgD2Kyt+DEymKDiKYfTndopfHrkTSGMvvn/Un8nGJIUB
FefGIiieZG5XARrBNEDERIGFfj05RSELkf1O5xpk6erl1j+e4CuhlbsGhia9pLJe
Dw3pjKjQimGLs57GCIVmH1eACt5+RyQhZDRrfmI7WUe2kuf+dbvoqv5trm0glnY0
YGABE49SFnbqxPUeM3bFeEGrWRd20hNprWfJQckdhEI+8WXI4ejEKe4fNl+PbT9U
4VmItLQGZVaIljrNrD/psmWrlvdOASvaEbvpYBVJrWiFGjJ08pzpeVGH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuO3qR9/M+wpW3tWJwXyfrFDac8MB8GA1UdIwQY
MBaAFFQSbzo1U5oM0F3uBc9zMAYJdx2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJKdk9qVlRtZ3pRWGU0RnozTXdCZ2wzSGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lYWMzNTctZjdhMC00MWJmLWFkNTkt
ZjcxNzQ1YjM1ZGEwLzEvVkJKdk9qVlRtZ3pRWGU0RnozTXdCZ2wzSGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lYWMzNTctZjdhMC00MWJmLWFkNTktZjcxNzQ1YjM1ZGEw
LzEvVkJKdk9qVlRtZ3pRWGU0RnozTXdCZ2wzSGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeSr/Fpr
2cmQ1pgej8qI1SHeVcN/FpCsgGWAZyoJEVm0Nwpgdzs+s0/jMteQ/A0brbIVDBOx
/LSnLo5ivxSMZVnq9z+oqPBsmpbcnfhfl3ADv6pHueCbisTYxB6WpZhk4wTe7NPU
R+ZJHTMSIJsK7+4CSHdt8TkNXdgRtO1/E3gln6xc8+IRg474eKW+a0gTWjEENSkQ
53nkBOII7QQpD91nuQd8V4m4PJ19t+3pKWFvUehMlrhfPGgYBsSMosAuSKl9wkpE
rGOMVUN8fkZ0oZ+T5nip1hZwgn/iAGPB3nqNQGZVQHnk9Ts/u2QFfpw7iOG4Lch0
loGZ0moSIYZMPQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:05 2026 by rpki-client