Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
File: vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft (raw, json)
Hash identifier: l1e+/TPc0+qq0Z1Q8S0AMUjj7XCElcdS+QBCmV0adGc=
Subject key identifier: 1D:3D:54:AB:5F:EC:8D:B0:83:52:46:6C:75:28:DC:5F:D7:62:B7:F9
Authority key identifier: BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
Certificate issuer: /CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Certificate serial: 019D37C0DD47DCFA4AC8EF0A92AD6677A198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
Manifest number: 031A
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl (hash: hhrrT5lGbFPW2PvBm2J26GPRVyEC6siARoOD6A1ob3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:dd:47:dc:fa:4a:c8:ef:0a:92:ad:66:77:a1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=1d3d54ab5fec8db08352466c7528dc5fd762b7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:72:94:27:33:09:9c:cb:78:7d:e2:69:b7:
20:0b:cf:d5:26:ba:e8:be:a1:08:c1:cf:1a:3b:92:
07:df:7a:72:fb:63:da:6f:18:84:c6:43:5f:ca:5c:
ac:17:7a:95:8b:60:29:4c:8f:00:77:15:39:d7:e5:
70:b1:22:6b:d4:60:fb:a5:b9:b4:b1:06:a9:7d:ab:
17:1c:0c:c3:98:ce:71:35:dd:7e:3c:f5:0a:fd:b1:
b7:cc:2f:0e:ec:72:65:0b:54:e9:45:dd:42:4a:de:
b3:bb:2e:5f:4c:56:5e:0c:3d:20:e6:7a:1c:dc:07:
24:23:58:05:9c:f6:1d:ea:77:5e:9b:50:fa:f3:a7:
4e:f1:d5:d0:04:84:33:2d:ba:51:34:60:53:d7:6e:
b3:14:cc:bb:bc:59:70:ee:2d:72:13:3a:f9:42:63:
44:ea:ae:42:be:74:43:62:d7:05:d6:e8:b8:52:e0:
8e:8e:8f:2a:b1:fa:1c:28:4f:2d:fd:7d:45:ab:c6:
b2:f7:05:3d:bb:9f:8d:c9:08:4c:97:2e:92:8d:9d:
02:6f:0b:8a:91:fe:71:49:b5:d1:c6:89:3c:b9:95:
d0:8c:b9:01:28:24:6c:c5:88:ee:e2:fd:89:e7:d4:
9e:60:a6:65:64:2a:63:4e:a1:1a:94:7b:7e:bf:d1:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:54:AB:5F:EC:8D:B0:83:52:46:6C:75:28:DC:5F:D7:62:B7:F9
X509v3 Authority Key Identifier:
keyid:BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0d:98:45:20:b1:d4:7c:95:b3:c0:2c:da:a3:8c:b1:c7:d7:
e4:5b:c4:55:dc:10:75:cb:43:f3:5c:84:98:23:d0:22:45:43:
80:85:04:a3:14:e4:f3:6c:d7:04:d5:c9:47:af:c4:02:ab:9a:
1c:4d:b7:8f:a9:a3:0a:95:e1:cd:4f:10:ed:df:fa:b0:8d:8a:
a9:98:b2:08:69:9e:10:32:97:aa:1d:44:f1:10:d8:b3:69:37:
c2:b8:cc:02:00:7d:9f:be:51:de:65:5a:a0:2f:6c:fb:85:10:
cc:2d:c9:0a:32:0a:d7:28:31:6a:70:f7:72:b5:64:a8:68:67:
ca:b9:bd:91:f9:f2:5b:e9:af:3f:28:5f:9f:32:d4:88:8f:08:
8c:65:62:1a:4c:40:8f:6d:ba:fb:a4:95:61:61:10:a3:89:d4:
ca:b0:6d:89:ba:29:57:bb:88:a8:9d:0a:2a:5c:9a:ac:1d:22:
0b:79:8d:7f:31:17:cb:42:41:14:fb:58:e8:86:62:eb:ee:7a:
70:0b:49:43:22:eb:fe:a6:4c:a8:59:5f:eb:05:21:42:f3:10:
eb:91:cd:dc:88:ec:81:b9:de:82:e2:45:08:87:8e:38:a2:38:
81:63:88:f0:89:1d:3c:2d:e6:cf:5a:e1:42:33:1c:08:3b:6d:
b3:24:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:11 2026 by rpki-client