Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: MUvrpMKWXKO9yt7b9JinplScZzEbWW3zY1/lo0Kj5tk=
Subject key identifier: 57:1A:53:1E:E3:B5:A1:5B:48:F0:6A:52:42:B1:14:3D:CD:A5:48:80
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 019D3A5409E1E269765D8134CA06ABEE02B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 0BC2
Signing time: Sun 29 Mar 2026 16:01:19 +0000
Manifest this update: Sun 29 Mar 2026 16:01:19 +0000
Manifest next update: Mon 30 Mar 2026 16:01:19 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: W1ajzrpp2k6OgzCWhfq43oQV3mKGQsORd2NiGyv/usE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:09:e1:e2:69:76:5d:81:34:ca:06:ab:ee:02:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Mar 29 16:01:19 2026 GMT
Not After : Mar 30 16:01:19 2026 GMT
Subject: CN=571a531ee3b5a15b48f06a5242b1143dcda54880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:23:db:ad:e1:55:6a:d0:cc:ec:84:99:1c:
6e:e6:b6:a5:78:ef:ee:3c:0a:c6:f4:98:35:15:63:
7a:71:56:1c:13:2e:28:f2:ec:0c:01:6b:5f:63:6f:
c5:a1:91:85:e2:55:f7:d6:a2:1b:44:22:20:4b:84:
59:7b:c8:b4:ef:4c:66:3b:5f:e0:39:8e:34:b4:44:
a8:35:06:b6:c3:7c:6e:25:d1:49:d8:20:11:ff:6a:
7f:42:fa:3e:44:e9:6b:6c:44:53:ce:69:4f:16:c0:
20:10:a3:ac:42:41:19:a1:28:e9:d7:4f:ed:43:86:
18:2f:05:32:fc:db:56:27:d8:d0:6d:1e:b9:46:fb:
f2:4a:e4:28:5b:63:09:7d:16:e4:29:02:b3:7f:76:
77:66:fc:0e:c1:8c:f6:81:67:4e:9f:66:d2:c5:e6:
59:ff:cb:e7:cd:7c:f7:0c:ac:52:3c:9d:6d:11:c6:
12:67:90:24:3e:d4:e7:a1:a2:c5:17:30:c1:2a:22:
bf:cc:87:21:20:5a:31:d5:b8:ae:40:b8:21:a6:85:
2d:79:10:a5:2e:a8:0a:a0:13:7c:78:4d:e4:6d:b4:
20:9d:d6:f5:b1:49:e8:bf:e0:26:9c:80:6e:f0:48:
41:44:46:94:e6:f0:b3:43:26:a1:25:94:ac:ff:d6:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1A:53:1E:E3:B5:A1:5B:48:F0:6A:52:42:B1:14:3D:CD:A5:48:80
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f4:2a:dc:f4:59:cb:42:71:cd:e8:d8:cb:ed:fc:65:78:ec:
d6:6f:38:d5:e7:19:4d:09:bb:14:f4:89:8f:2e:b2:ec:09:83:
f4:b0:6e:bc:1e:25:2d:5b:18:96:9f:4b:ab:70:09:b7:54:73:
61:57:f3:9d:d0:3e:c3:86:78:b2:5d:b7:ac:76:15:9d:1d:d8:
06:01:b4:95:0b:1c:3a:e8:5c:77:48:4b:4d:b9:76:ca:ae:f5:
3a:b6:18:cb:27:16:9a:93:78:5d:37:10:60:d7:7e:0a:ab:82:
30:d4:cd:3b:66:c6:d4:bb:8b:92:a8:44:4f:c9:a0:a4:d6:90:
6f:6b:5b:34:d8:f8:cd:e5:53:9b:8b:89:ed:d4:33:33:95:52:
3f:5b:44:d3:47:44:0e:53:86:0d:3a:f8:29:19:1b:14:1b:cf:
35:41:90:0c:33:81:0c:b1:e3:7f:ec:94:58:18:6d:58:b0:1e:
84:f2:97:61:d9:9b:29:f4:b7:23:75:a9:51:5a:08:09:2d:d5:
ee:be:a0:6c:19:6c:09:11:a7:c4:d7:19:1a:87:ca:b3:81:a0:
74:40:6b:52:14:16:44:42:97:a2:60:3c:c6:6d:52:67:31:75:
b2:6b:7e:3f:4e:da:b2:69:32:4c:65:44:50:48:26:fe:14:c7:
81:56:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:18 2026 by rpki-client