Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: M97Vp54B72LmdtxjJHgnZTDAdB7Jwd5xkJiS4tZVVag=
Subject key identifier: B3:17:5A:4A:E3:2D:9D:59:5E:96:75:13:42:54:ED:B9:73:AC:8C:84
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 019D38664E4A8A87B5C0819BA778896CE9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 123C
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: tsEtsXrDn56DmkVIyPVF5Tv5nYzOdVWVOtC2PK3zKFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4e:4a:8a:87:b5:c0:81:9b:a7:78:89:6c:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=b3175a4ae32d9d595e9675134254edb973ac8c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:60:01:23:ab:23:80:56:dc:94:24:d0:84:
3f:26:45:a2:50:f3:19:46:c4:b1:20:09:5f:34:b1:
3b:37:e4:5d:78:e9:d0:99:8f:94:52:d3:43:dd:ff:
db:ad:cd:e5:1f:2a:26:19:05:af:06:a8:8e:6d:c0:
c1:e4:78:33:bd:26:bc:0a:44:1b:65:71:6e:fb:33:
90:b0:b1:3a:5c:8e:46:3b:25:cd:18:e5:8f:ff:e2:
61:e8:6d:90:54:8e:5f:18:59:e6:44:f4:9d:45:41:
29:d8:91:24:b9:c6:a9:4c:ff:c8:d6:85:7c:cd:c9:
2a:49:96:c5:70:f9:06:72:67:fc:56:42:df:07:da:
63:2e:24:9b:17:c0:dd:6e:bd:bd:78:01:e6:d8:52:
96:cf:48:f3:2e:91:7b:73:46:dc:ca:da:33:95:b4:
e5:ae:ee:83:e0:79:71:60:35:2f:7d:32:14:94:ff:
2e:3b:fb:8b:c4:eb:ef:8f:e7:2e:ab:aa:51:e9:ca:
0b:54:f7:f5:44:ae:ba:2a:d8:1e:c7:94:ce:b5:df:
fc:e0:48:53:5a:ac:ad:1b:d7:ac:7a:53:74:5f:c2:
8b:de:ff:a1:b7:da:ec:93:96:7a:44:35:1c:f7:7a:
8f:1d:fa:dc:9d:ab:d6:1a:32:28:87:7e:88:3f:bd:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:5A:4A:E3:2D:9D:59:5E:96:75:13:42:54:ED:B9:73:AC:8C:84
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ff:23:98:4a:65:f6:7a:f7:6d:1f:c5:a8:b0:5f:5e:ad:14:
ea:08:cf:0e:3c:7b:97:d5:b7:15:b6:68:f1:57:51:7e:b7:92:
60:d2:82:65:0b:8f:ee:ee:b7:c7:42:21:77:70:ab:15:de:98:
f1:12:fa:38:b7:f8:56:f3:88:15:f4:8d:f2:f0:72:81:8b:9a:
6f:55:59:cc:63:70:fe:53:f5:82:13:18:a8:56:7a:17:e6:c0:
89:0e:6d:91:b0:a0:0c:15:fa:7c:3c:a8:06:7c:c5:56:fe:26:
b4:c3:8e:fd:c8:0e:04:f3:82:bf:da:29:95:4e:59:3b:26:db:
e9:d4:42:1a:e1:4c:78:62:80:10:e9:89:dd:dc:e4:bf:3d:b7:
4b:46:57:3d:1a:ad:42:e0:9b:a1:df:9e:72:03:c3:b7:eb:69:
94:93:ac:2a:b6:f2:b3:59:58:2f:86:ed:8c:e1:19:02:29:86:
73:c5:ff:ce:bc:54:b8:d7:69:53:4b:68:57:ab:14:32:18:13:
41:63:c6:ab:6a:ea:3b:a0:d5:65:b0:fe:c3:be:bf:49:0c:7d:
2c:28:29:49:52:b6:d7:33:8f:4c:2e:74:35:b5:c3:95:2c:eb:
b3:e7:36:17:84:f4:1f:23:40:b9:c5:06:40:4d:e8:92:6d:99:
7e:aa:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:40 2026 by rpki-client