Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
File: vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft (raw, json)
Hash identifier: 7MG7LeUTGtW9+2eJqeZuvMnP4l2/chHIA8gQciyeXyY=
Subject key identifier: DC:BB:0E:C6:D5:20:27:13:C7:37:BA:0C:67:5B:10:66:88:03:AD:38
Authority key identifier: BD:A8:89:23:F7:34:1B:E9:68:65:16:EB:72:E3:8E:EC:2B:FC:AE:3B
Certificate issuer: /CN=bda88923f7341be9686516eb72e38eec2bfcae3b
Certificate serial: 019D3A1CB2A6FA4BF6048839426B8DF2661E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaiJI_c0G-loZRbrcuOO7Cv8rjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
Manifest number: 64
Signing time: Sun 29 Mar 2026 15:00:52 +0000
Manifest this update: Sun 29 Mar 2026 15:00:52 +0000
Manifest next update: Mon 30 Mar 2026 15:00:52 +0000
Files and hashes: 1: vaiJI_c0G-loZRbrcuOO7Cv8rjs.crl (hash: qqrv16gLEUy6JJrsS3BqYSrEfmS/lrazJjFEcqNrlTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaiJI_c0G-loZRbrcuOO7Cv8rjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b2:a6:fa:4b:f6:04:88:39:42:6b:8d:f2:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda88923f7341be9686516eb72e38eec2bfcae3b
Validity
Not Before: Mar 29 15:00:52 2026 GMT
Not After : Mar 30 15:00:52 2026 GMT
Subject: CN=dcbb0ec6d5202713c737ba0c675b10668803ad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:5c:d3:c1:eb:3d:de:cd:78:bd:28:0e:e7:
2e:e3:33:1c:27:4c:f1:54:06:2a:66:9b:95:24:a0:
b1:b1:5d:68:e7:42:76:bc:ae:02:13:4d:3a:6c:55:
e0:0a:ab:5d:5d:2b:8c:a5:24:31:c1:f3:e9:78:bb:
14:94:51:04:a1:79:24:a4:5a:6c:9d:d8:f5:d6:3e:
5f:70:d0:57:9b:cf:ec:65:d5:c7:21:eb:ef:d8:da:
cb:a2:88:88:16:2d:1b:0c:de:a3:a6:c9:c4:fc:8c:
71:17:8a:a1:b8:41:9e:bd:3d:9e:c6:da:e4:6d:d2:
9e:1a:7e:7e:e7:31:bd:5a:7c:dd:d2:d2:e1:33:19:
6f:db:4d:9a:d1:d7:f4:3c:a8:16:25:2c:3d:8e:4d:
eb:d4:90:3b:d1:ab:84:82:43:11:ac:38:39:2e:c4:
e4:96:c4:63:c3:cf:62:c3:83:e1:d8:6f:a9:90:b4:
08:34:d1:69:08:ea:89:2e:c1:3e:03:ae:e1:ec:a4:
7f:17:17:5a:4f:5b:b6:a8:ff:09:1c:74:43:68:48:
4d:51:86:15:27:57:82:02:40:2e:47:8b:4d:e9:b5:
d9:48:b7:6f:76:42:1a:26:e0:a2:9e:da:67:6f:a6:
8f:58:05:0b:f8:8c:22:70:2a:a6:09:23:2e:9e:dc:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:0E:C6:D5:20:27:13:C7:37:BA:0C:67:5B:10:66:88:03:AD:38
X509v3 Authority Key Identifier:
keyid:BD:A8:89:23:F7:34:1B:E9:68:65:16:EB:72:E3:8E:EC:2B:FC:AE:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaiJI_c0G-loZRbrcuOO7Cv8rjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/vaiJI_c0G-loZRbrcuOO7Cv8rjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:be:a4:83:21:7a:92:04:a8:52:2a:38:8b:b7:84:c9:e4:8e:
ae:ae:3d:c1:64:83:bb:fa:e3:45:e2:04:13:20:ef:11:d3:63:
0c:c9:66:8d:05:de:a8:9a:52:a2:93:5b:b7:91:72:3d:f3:8d:
f6:8a:35:71:a5:da:5f:49:03:6c:a5:84:88:60:73:11:cd:d9:
8d:54:2e:e2:18:79:72:a9:36:84:36:c4:85:9a:1a:52:ce:42:
5b:50:ce:c8:ac:c5:f2:6c:01:9c:d8:23:a4:42:1c:ea:fe:ce:
c2:fa:c1:b5:44:9f:eb:71:a2:49:66:4c:70:0e:03:05:17:2a:
ac:62:25:42:11:85:0a:db:0e:4e:ff:89:da:41:17:41:d6:76:
8f:dc:ca:8c:8f:8a:43:0e:b6:49:34:1d:f3:67:c8:8a:6e:f3:
8e:33:c3:86:f7:43:f9:ec:f9:f7:e8:6a:78:b9:8d:d4:93:54:
50:5e:e3:a1:f3:8d:37:d8:03:97:82:47:44:46:ae:6e:c4:68:
df:c8:78:f6:dc:eb:2e:71:e5:3c:e5:31:07:24:34:ac:3f:e8:
c2:59:fe:e0:87:52:1e:6d:42:c8:33:db:18:13:08:4f:a5:37:
fe:34:2e:6b:d4:10:3d:0e:0e:22:80:8b:c8:ca:38:0b:2c:d4:
3c:cc:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:34 2026 by rpki-client