Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: XXY8AuET1pxRyr5GRKZtewoaiFcg0mG1Vm4Z0DZ2EvQ=
Subject key identifier: BA:42:92:5F:35:46:3D:95:69:10:BB:40:43:97:25:25:F5:EC:46:DA
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 019D382EAA3E89102EB1304C7FF2E0B9B222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 1056
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: Tg0iDUmOHlPuXOHvBo7ii31neinSWk5RhVdBjoX/iA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:aa:3e:89:10:2e:b1:30:4c:7f:f2:e0:b9:b2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=ba42925f35463d956910bb4043972525f5ec46da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:78:08:61:b4:f0:97:21:22:66:79:3a:af:
f7:99:97:4d:76:a3:9f:bb:7c:c2:b1:a7:61:d4:64:
c1:56:a8:c5:9f:12:99:2f:28:2f:7c:61:ce:2c:4b:
3a:72:71:ed:29:b0:1c:1d:7d:6c:d0:1c:d6:61:3f:
eb:19:a6:8c:de:68:cf:88:67:97:15:8d:6e:99:9d:
97:35:4d:91:f1:d8:bb:20:31:ea:cc:42:0e:06:aa:
09:df:ca:07:88:7d:33:eb:30:47:4f:5a:35:e2:b1:
3d:da:13:82:8a:8f:d3:ce:08:62:3a:e0:b8:61:f9:
68:fc:85:11:7e:71:95:f4:cf:cc:1d:aa:c8:28:1c:
ed:50:b8:39:f7:ef:a5:5f:d0:f0:2d:d3:4c:cd:40:
62:0c:3c:11:ad:f0:56:f2:9a:bf:61:e4:3b:e5:e8:
cd:62:d3:24:89:b2:37:44:f6:fe:d5:90:1f:fe:62:
8b:fa:34:20:cf:0e:3c:29:48:e0:44:6c:d5:e6:4e:
c1:2f:ac:fc:3e:06:d9:04:74:0a:9d:47:33:d9:a3:
a7:55:56:8c:ba:5d:12:8a:a3:c4:ce:35:34:42:7b:
5d:4e:7e:95:1c:3d:c3:94:9c:76:00:03:f9:5d:27:
ca:81:c5:bd:f1:96:fb:4e:6b:d8:67:25:02:3f:2c:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:92:5F:35:46:3D:95:69:10:BB:40:43:97:25:25:F5:EC:46:DA
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:ee:a9:7d:b3:23:fd:3f:cd:54:d9:8b:65:94:60:db:06:
6d:88:32:52:24:d7:9f:77:24:33:a8:0c:78:ae:9a:43:9e:c5:
a0:e2:88:da:03:51:3e:ef:91:97:12:49:ed:c4:7f:e9:e8:13:
a8:61:33:fd:7f:7f:e8:71:32:7e:d9:2f:13:f8:ee:64:af:bc:
fc:96:55:c3:22:3d:bc:29:e2:d2:48:01:9b:5d:5c:8f:57:5c:
09:2d:f1:e8:dc:36:ca:58:4d:6d:a4:a4:0f:e8:ec:f4:fb:2d:
17:88:8e:e4:1d:ec:0c:fb:86:7a:e2:c8:37:89:23:fb:82:b4:
21:bf:c8:2f:db:22:dd:45:ca:3b:a6:d6:3c:25:3f:1a:8a:63:
96:ed:44:e8:50:e1:b0:e6:86:c3:bc:03:fa:71:2f:2e:36:f1:
bb:47:d9:7e:f2:82:f8:16:8f:09:58:4a:68:77:a5:00:c8:a3:
ec:57:83:77:7f:6a:a2:10:2d:3b:e6:6d:98:ec:c2:3e:23:9b:
2e:fd:7c:fe:6f:34:d7:2e:db:3c:0d:71:b7:57:7c:bf:bd:f8:
a3:15:f0:5c:bc:d9:e5:97:8c:94:d7:8b:99:38:fc:99:a2:54:
6a:a7:39:ed:d4:17:e7:49:c8:d3:03:c9:31:18:49:78:cc:f8:
90:87:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:15 2026 by rpki-client