Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: YRT0RY0tfNPwpfjUNWFjZXm0iBzwNCjKUvJShITmwnI=
Subject key identifier: 7D:9B:62:DC:16:78:85:07:3B:6F:87:0B:3D:F1:2D:79:94:D8:D7:0B
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 019D382E730EA9530AABF19734F731B5085C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 155F
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: fju2RdlhGGXOYIZVDZrn0tLQiXWOabz+FQJkF+NZFEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:73:0e:a9:53:0a:ab:f1:97:34:f7:31:b5:08:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=7d9b62dc167885073b6f870b3df12d7994d8d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:1a:5c:cb:6e:e5:ab:c9:dd:b3:73:13:39:
ec:de:88:e4:b4:96:fb:3f:42:8d:2c:d1:23:52:2f:
5f:d9:ae:db:69:6a:af:7a:f8:3c:85:d5:88:51:61:
e7:3b:14:85:92:07:a9:6a:a4:70:bf:b2:da:26:4c:
81:4a:cc:47:19:3d:31:ab:10:46:a8:af:9e:b5:19:
c6:34:6e:e4:78:31:d1:d0:73:9c:e4:a6:c6:53:39:
42:32:6e:ca:8b:f5:d5:7d:27:ea:7d:96:55:7e:9c:
6d:95:73:8b:75:a4:07:ed:58:3c:74:b7:6b:12:f9:
7c:48:f3:03:07:1d:3f:d2:6c:39:83:a8:f3:1f:14:
33:a2:93:c3:fe:c0:51:e5:a7:b8:b5:ee:73:a0:f3:
65:c8:63:74:08:5b:7c:bb:c6:05:2f:3d:67:09:91:
a0:8b:d0:4e:37:55:2b:f8:c5:59:13:9f:38:d9:03:
ef:6d:3b:22:e0:f4:b2:14:44:35:ac:ba:f2:25:ea:
1c:fb:7a:ce:f1:7d:e1:06:1d:84:52:f9:92:81:9a:
c2:a1:7a:b5:26:db:a3:1d:8c:5a:63:c3:2b:93:a4:
c9:ae:5f:b9:54:1c:de:ad:71:63:a6:03:a4:85:60:
7a:7e:fc:d1:ff:7f:93:b7:ba:3a:af:16:fc:26:eb:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:62:DC:16:78:85:07:3B:6F:87:0B:3D:F1:2D:79:94:D8:D7:0B
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6c:83:b3:76:00:dc:cd:f8:04:71:8a:6e:41:f9:82:51:8c:
35:94:63:fe:c5:3e:ad:db:35:43:74:e3:8a:f9:77:c6:95:a7:
f7:ab:c3:13:12:0a:0f:0d:b3:c4:6a:ee:2f:66:81:a4:b1:af:
35:68:4e:8a:05:a8:ed:1e:10:43:3b:5a:15:12:6c:57:c5:6c:
02:c3:3f:ec:20:f9:a7:76:94:df:4e:4e:2f:32:ac:02:27:a3:
6a:0c:fa:4c:61:f2:b9:cd:0c:e9:71:4f:ca:60:7c:89:5f:50:
f2:f6:9e:17:36:dd:40:97:83:47:c8:da:30:4d:89:c3:06:62:
e7:24:e1:0f:1a:77:92:32:ab:15:5f:83:4d:a2:b6:ed:96:10:
16:88:73:84:fd:80:07:f1:c6:82:ec:8c:77:47:53:8c:eb:a9:
d0:69:88:1c:90:ab:51:11:06:c1:40:b9:28:8a:94:b9:98:37:
35:f9:82:b8:a5:a7:5b:cb:07:fe:a6:75:35:ba:67:ff:3d:a9:
26:bf:ed:bb:86:1b:00:da:3a:20:89:cc:99:04:27:ae:00:f8:
a6:79:38:61:4b:8d:5f:dd:5b:27:ac:d8:26:64:0d:fa:23:3a:
30:57:25:5a:1f:7b:be:35:17:ec:f2:44:dd:8f:e1:48:c8:ec:
11:09:54:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LnMOqVMKq/GXNPcxtQhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjNlNDQwOTVmMzhjYTM4ODgzNmJmNjY1YjZmOWYwOThk
YzU3OTQwHhcNMjYwMzI5MDYwMTAxWhcNMjYwMzMwMDYwMTAxWjAzMTEwLwYDVQQD
Eyg3ZDliNjJkYzE2Nzg4NTA3M2I2Zjg3MGIzZGYxMmQ3OTk0ZDhkNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvgaXMtu5avJ3bNzEzns3ojktJb7
P0KNLNEjUi9f2a7baWqvevg8hdWIUWHnOxSFkgepaqRwv7LaJkyBSsxHGT0xqxBG
qK+etRnGNG7keDHR0HOc5KbGUzlCMm7Ki/XVfSfqfZZVfpxtlXOLdaQH7Vg8dLdr
Evl8SPMDBx0/0mw5g6jzHxQzopPD/sBR5ae4te5zoPNlyGN0CFt8u8YFLz1nCZGg
i9BON1Ur+MVZE5842QPvbTsi4PSyFEQ1rLryJeoc+3rO8X3hBh2EUvmSgZrCoXq1
JtujHYxaY8Mrk6TJrl+5VBzerXFjpgOkhWB6fvzR/3+Tt7o6rxb8Jutq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2bYtwWeIUHO2+HCz3xLXmU2NcLMB8GA1UdIwQY
MBaAFL6z5ECV84yjiINr9mW2+fCY3FeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NWE1MjUtYTI1OS00MDIzLTlmOTUt
YTZhNDk0NTYyZTFkLzEvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82NWE1MjUtYTI1OS00MDIzLTlmOTUtYTZhNDk0NTYyZTFk
LzEvdnJQa1FKWHpqS09JZzJ2MlpiYjU4SmpjVjVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWyDs3YA
3M34BHGKbkH5glGMNZRj/sU+rds1Q3Tjivl3xpWn96vDExIKDw2zxGruL2aBpLGv
NWhOigWo7R4QQztaFRJsV8VsAsM/7CD5p3aU305OLzKsAiejagz6TGHyuc0M6XFP
ymB8iV9Q8vaeFzbdQJeDR8jaME2JwwZi5yThDxp3kjKrFV+DTaK27ZYQFohzhP2A
B/HGguyMd0dTjOup0GmIHJCrUREGwUC5KIqUuZg3NfmCuKWnW8sH/qZ1Nbpn/z2p
Jr/tu4YbANo6IInMmQQnrgD4pnk4YUuNX91bJ6zYJmQN+iM6MFclWh97vjUX7PJE
3Y/hSMjsEQlUnA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:50 2026 by rpki-client