Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: 39gNbKwbleu/eThYMj5dSn1Tvu7fBrlRh2oj//H5fus=
Subject key identifier: 49:5F:ED:77:5E:3A:71:FD:4D:48:A5:9C:1D:A6:2F:D2:69:E1:51:4A
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 019D38662B3749BC35C74E1EA4EEAEBE41E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 1409
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: VlC7w8CQZ9s2vnoN/6yN5T+Tr9pHLJLFuMmhpNERMxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2b:37:49:bc:35:c7:4e:1e:a4:ee:ae:be:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=495fed775e3a71fd4d48a59c1da62fd269e1514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:56:52:9c:e8:29:cd:c9:ae:70:ba:09:07:
a7:71:19:bf:7b:3b:70:71:d0:41:34:e1:e6:69:15:
63:47:f3:4f:92:f8:e2:41:46:26:67:0c:bb:26:8a:
ab:56:cb:3e:06:d8:3d:01:87:32:60:6f:be:11:4f:
1c:49:dc:46:6c:5e:75:64:1e:86:9c:b5:59:e1:37:
2f:8e:b6:03:65:07:fd:82:b4:36:82:9a:f9:08:8c:
95:fd:2a:57:ca:17:75:07:15:c6:e7:68:f8:8e:0e:
93:f8:f4:23:87:7e:45:b4:3b:e7:00:9e:b1:e3:e9:
72:ea:f8:48:2e:41:79:40:14:b4:f5:62:25:0e:32:
ee:68:6b:a1:72:2c:81:21:0b:13:ab:5f:85:56:8e:
62:d0:06:bc:d8:ef:c8:7a:50:93:52:78:7d:f7:07:
67:08:bb:07:2f:10:f6:71:dc:cd:b5:3a:62:1b:4b:
7b:a3:93:54:fa:89:f3:d8:92:53:2b:22:eb:d5:ea:
71:39:15:37:34:65:35:65:16:e6:66:55:30:76:6d:
0c:2e:a9:1e:25:db:c2:51:70:56:10:72:d5:78:8f:
f1:3b:42:81:19:b8:f8:32:86:cb:69:ab:05:f3:76:
e2:24:3e:0e:7a:03:7c:e1:97:1b:6b:9a:1d:98:8f:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:ED:77:5E:3A:71:FD:4D:48:A5:9C:1D:A6:2F:D2:69:E1:51:4A
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a1:64:a4:73:2e:13:b1:9e:d1:40:8c:59:cd:43:69:48:f2:
e2:ef:7f:54:be:f1:cc:3c:e3:8f:1a:32:c4:60:94:ac:cd:4f:
5c:c3:ec:0d:c6:44:29:ed:52:09:9d:d4:1a:d7:62:46:ec:b8:
28:a6:42:cd:af:c4:1a:88:1f:5f:67:00:18:77:e8:52:7a:ae:
5e:1f:ef:da:63:9b:b8:dd:f6:16:4a:1d:4a:d7:ab:12:10:31:
b8:d9:a9:53:8f:cd:76:04:eb:8b:a7:89:55:b5:d2:7f:b7:87:
63:f8:ce:15:1a:6a:20:d8:73:87:4f:ad:d5:50:61:a7:95:b6:
d5:12:72:c5:04:e4:dc:71:d7:4a:97:a4:a0:3a:93:ba:d4:86:
e9:c4:fb:bf:6d:31:23:e8:03:b1:ac:6e:89:0a:4d:b6:83:bc:
b4:1e:f7:cb:21:aa:91:95:30:76:0a:12:d1:8f:23:a9:73:a8:
2f:44:96:bd:86:32:6d:e6:7e:56:9f:9a:bd:55:7e:5d:53:3c:
61:94:c8:a8:e9:af:7f:1c:ec:6e:0b:4d:b2:20:ce:f1:36:2d:
72:5f:6f:58:04:f2:a6:19:6d:8d:a5:7c:ed:07:55:b9:37:e8:
19:68:6f:40:96:fa:d9:fa:8d:dc:d2:fb:b4:08:2c:77:ec:c2:
9d:8f:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:04 2026 by rpki-client