Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
File: vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft (raw, json)
Hash identifier: n6kR1mcfK5Qyw59jod+sm6k9VQafmVxcIzHBE39AVIY=
Subject key identifier: 71:A5:FA:E7:B8:00:AA:3C:24:75:CF:66:46:A1:C1:8D:10:43:5F:B2
Authority key identifier: BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA
Certificate issuer: /CN=be3119f4d953e760221acffeed3a4d7827d0e7ca
Certificate serial: 019D389C43925F7B82651EA1776148880D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
Manifest number: 01A9
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl (hash: 7BB7PcOCxAP+YFg1PEsqBncEbP0ElcfoCe3RoqYBHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:43:92:5f:7b:82:65:1e:a1:77:61:48:88:0d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3119f4d953e760221acffeed3a4d7827d0e7ca
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=71a5fae7b800aa3c2475cf6646a1c18d10435fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:22:8f:68:f4:eb:57:66:c4:c8:d4:bf:3f:
08:8f:ff:a5:2e:d3:27:a9:3c:2b:8c:2a:19:3f:2c:
92:8c:1d:6d:fb:51:22:ce:0b:c8:0c:a6:7b:42:a6:
83:fc:55:b2:8e:33:8b:00:e6:06:4b:ea:e2:b1:bf:
50:79:4e:63:1b:bf:f3:81:d5:c3:9b:53:28:6b:88:
bf:c1:92:b9:7c:38:11:f5:fa:41:9b:68:bf:a0:2d:
19:0a:2c:7f:47:6f:62:6b:f2:57:00:65:3b:de:39:
a9:82:d3:0f:91:15:22:8e:3c:5f:75:4b:f7:05:d3:
f8:24:c1:cc:8e:f9:0e:2c:15:d7:88:dd:bd:1a:fa:
22:be:5c:a6:ae:b9:4f:c7:75:ce:9d:d1:1e:a5:05:
ed:e7:ab:4f:79:8f:b1:fb:79:aa:1d:74:88:1b:89:
b3:c1:85:be:9b:79:23:d2:35:25:85:1e:25:ff:2e:
b1:d4:e0:eb:52:09:42:2b:a2:60:d4:c8:b3:98:26:
50:72:61:8b:2b:9d:3b:3e:6d:d2:45:47:45:55:36:
74:e1:ec:80:42:cd:d3:43:9d:89:03:82:41:c2:e7:
0c:e8:7f:b6:a5:d5:9b:91:15:49:43:fd:ff:6e:ba:
39:c6:6d:99:91:c4:fc:37:c9:9b:58:7d:33:ff:3e:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:FA:E7:B8:00:AA:3C:24:75:CF:66:46:A1:C1:8D:10:43:5F:B2
X509v3 Authority Key Identifier:
keyid:BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ea:03:c5:94:be:83:33:8b:05:40:a8:b1:38:7a:f2:5b:fc:
c6:c9:bd:d4:ea:57:c5:7b:ae:cb:89:3d:98:72:3d:26:bc:9f:
f0:8a:44:2f:ba:ca:35:3f:a7:2d:8e:54:07:e7:c0:f6:8e:7c:
f3:18:99:3b:ad:d6:eb:15:46:0b:fe:88:2b:09:17:00:fe:b1:
52:e9:cd:61:4f:ae:b1:23:01:c6:a4:f9:6d:6c:de:ed:b0:9d:
41:d8:a0:8f:9a:db:df:23:45:9f:23:55:96:db:31:e9:f2:d5:
91:3c:da:70:2c:46:15:74:a9:2c:e9:c0:f3:66:f4:37:0f:b1:
d7:4f:fc:ba:23:79:2c:0e:a4:14:54:ec:d2:08:49:b2:2a:e5:
69:83:61:61:cc:17:d5:10:59:0b:fa:5c:ec:8c:5d:cd:20:54:
e4:f0:1d:5d:48:66:83:47:67:6f:a7:0f:e6:1a:a8:2b:d5:3e:
ec:62:04:86:a3:d9:e9:1a:7a:21:5b:1c:c5:ab:0a:21:fd:4d:
7b:15:45:61:b6:db:d2:cf:f2:20:48:0c:50:5b:a6:e8:c5:4a:
67:c7:d5:58:ff:9a:9f:c4:85:84:37:2c:84:74:b9:fa:73:9d:
0c:27:6d:c8:ad:6f:1d:9c:5f:57:4d:8e:48:15:32:5c:46:eb:
3e:8c:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:00 2026 by rpki-client